flexlm 11.7 deamon with ECC. pathing procedure

[kirart]

Greetings all
I am new to the forum but have read all topics related to the flexlm a couple people to help with the patch. I hope lucky))

here is a daemon and an example of a license file (long SIGN, 239 bit)
http://www.megaupload.com (2.6 Mb)
http://rapidshare.com

I did already
1) a signature for Ida - very few proc names have been found
2) gerbay plugin for ida (from woodmann) as well as in the 1)
3) certainly got seed1 & seed2
4) make lmcrypt
5) ecc patcher doesn't work on my version (actualy from version 8. ) error Invalid license key (inconsistent authentication code)


I hope sombody help me to find _lc_checkout for patch. All essay are very old. Too many differents with flexlm now/

sorry for my bad english ;)


seeds
11111111
22222222

/* Version 11 keys */
#define VENDOR_KEY1 0x11111111
#define VENDOR_KEY2 0x22222222
#define VENDOR_KEY3 0x33333333
#define VENDOR_KEY4 0x44444444
#define VENDOR_KEY5 0x55555555
#define TRL_KEY1 0xasdfg
#define TRL_KEY2 0xqwerty

#define VENDOR_NAME "xxxx"

[besoeso]

i think this can help you

http://www.mediafire.com/?gejvum07lm9gnnp

[kirart]

besoeso
If this file is already patched, it has not helped. license is not accepted with the same error.
in any case, thanks for the tip. I looking for the flags in this library.

[besoeso]

You target must patch too. ¿The installer is big size?

[kirart]

besoeso

Yes, installer size very big.
I think that you will not want to download several gigabytes

Two questions to make sure that I did everything right.

1. in lm_code.h I set #define LM_STRENGTH LM_STRENGTH_LICENSE_KEY
2. copy your lmgrd11.dll into isiscfd directory with file replacing

you say, needed to patch application. Ie looking for some dll in the installed program?
Do not need to patch the daemon himself to accept the license in the old format
(which I do)?

Could you explain what has changed in the dll if possible,
showing instructions and addresses.
I'd like to understand your actions and repeat it by myselt

Anyway, thanks for the help

[besoeso]

You don´t cand find the flags 1 and 2 in daemon file .exe .

You can to compare files and i will see the changes.:-)

You can find the flags 1 and 2 in dll file that i send you.

If have time i will do the lic for you check.

[kirart]

1)You don´t cand find the flags 1 and 2 in daemon file .exe .
Yes, but maybe I'm just blind and stupid))

2)You can to compare files and i will see the changes.:-)
3)You can find the flags 1 and 2 in dll file that i send you.
Now it did. I just have no experience (I'm generally not a programmer, and engineer).
So turns out very slowly. But I'll deal it

If have time i will do the lic for you check.
It will be great. my computer id=xxx

The flags in your dll are

.text:100xxx mov eax, [ebp+arg_14]
.text:100xxx mov dword ptr [eax], 1 //!


10xxx dword_10xxx dd 0 ; DATA XREF: sub_100xxx+EFE0r

:100100xx mov edx, [ecx+3Ch]
.text:100100xx add edx, dword_10xxx //!
.text:100100xx mov eax, [ebp+Dst]
.text:100100xx mov [eax+3Ch], edx

Now I will check how you find it

As it is written in a famous essay
0040xx mov eax, [ebp+1Ch]
0040xx mov dword ptr [eax], 1 ; Set flag (we want 0)

I was maked it with 0 (as in the example), but it did not help

Now I trying this approach - looking the pattern ( at l_pubkey_verify()):

# 8B 88 9C 01 00 00 mov ecx, [eax+19Ch]
# 8B 91 E8 1C 00 00 mov edx, [ecx+1CE8h]
# 83 BA 60 05 00 00 00 cmp dword ptr [edx+560]

I found 4 occurrence of this pattern. In originaly method only one occurence shold be.
I dont know, maybe it is wrong way. Should I patch each occurence of this pattern and test my license?

added later

I tried to change the setting for cmp (each individually, some combinations. not all of them - too much.). It did not work.

Nobody said anything
probably just not interested
ok, then I'll speak with myself ))

besoeso
your patched dll is correct. I was check it for several approaches.

license server still doesn't work((
I think the problems may be here:
1. error in seeds (i checked it with 2 approaches)
2. error in lmcrypt ( It seemed to me that the settings are very simple )
3. some additional flag in daemon. It can be a very big problem for me((

I did it! rtfm for lm_code.h))

besoeso, Thanks for help (especially for tips with dll and hostid in license)

2all
I changed the private data in my messages. do not use them, just as example

[besoeso]

@kirart

Congratulations friend!

Can you send me you steps for check it?

[kirart]

besoeso,

your dll is correct. my seeds were correct. my VENDOR_KEYS were also correct.

You need to make correct lmcrypt
Use my seeds and keys
lm_code.h:
#define ENCRYPTION_SEED3 0x00000000
#define ENCRYPTION_SEED4 0x00000000
#define LM_STRENGTH LM_STRENGTH_LICENSE_KEY
#define TRL_KEY1 0x00000000
#define TRL_KEY2 0x00000000

use version behavior 7_1


first line in license.dat should be @SERVER host_name ANY@

[arlequim]

It should be interesting if you try my new patcher ( http://rapidshare.com/files/449346334/flexlm.ecc.generic.patcher.rar ).
If possible, please write correct links to download vd+lic.
Let me know. Bye!

[bgptlmzyh]

http://rapidshare.com/files/449346334/flexlm.ecc.generic.patcher.rar
This file is cann't download, please reupload!Thanks!

[arlequim]

Im upgrading pattern, wait some days.