Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   flexlm 10.8 linux 64 daemon need help (https://forum.exetools.com/showthread.php?t=16214)

iconstart 09-26-2014 16:12

flexlm 10.8 linux 64 daemon need help
 
1 Attachment(s)
Hi all,
I have a daemon encrypt with flexlm v10.8
by search 6f7330b8 fand the _l_sg I guess
and I want get seeds @.text:0000000000464CE7 call rax

but it jmped @ .text:0000000000464C8C jz short loc_464CEE

my args is -t localhost 10.8 –c license.dat


My question is
Why did it jmp @ .text:0000000000464C8C jz short loc_464CEE
What can I do to avoid it and let it run to 0000000000464CE7 call rax


deamon and lic are uploaded



.text:0000000000464C42 push rbp
.text:0000000000464C43 mov rbp, rsp
.text:0000000000464C46 sub rsp, 70h
.text:0000000000464C4A mov [rbp+var_8], rdi
.text:0000000000464C4E mov [rbp+var_10], rsi
.text:0000000000464C52 mov [rbp+var_18], rdx
.text:0000000000464C56 mov [rbp+var_50], 0
.text:0000000000464C5D mov [rbp+var_58], 6F7330B8h
.text:0000000000464C65 mov [rbp+var_60], 0
.text:0000000000464C6D mov [rbp+var_68], 0
.text:0000000000464C75 mov [rbp+var_6C], 3
.text:0000000000464C7C mov rdi, [rbp+var_8]
.text:0000000000464C80 mov esi, 1000h
.text:0000000000464C85 call sub_47B023
.text:0000000000464C8A test eax, eax
.text:0000000000464C8C jz short loc_464CEE
.text:0000000000464C8E mov rax, [rbp+var_8]
.text:0000000000464C92 mov rax, [rax+288h]
.text:0000000000464C99 mov rax, [rax+1E08h]
.text:0000000000464CA0 cmp qword ptr [rax+5C0h], 0
.text:0000000000464CA8 jz short loc_464CEE
.text:0000000000464CAA mov rax, [rbp+var_8]
.text:0000000000464CAE mov rax, [rax+288h]
.text:0000000000464CB5 mov rdx, [rax+1E08h]
.text:0000000000464CBC mov rcx, [rbp+var_18]
.text:0000000000464CC0 mov rsi, [rbp+var_10]
.text:0000000000464CC4 mov rax, [rbp+var_8]
.text:0000000000464CC8 mov rax, [rax+288h]
.text:0000000000464CCF mov rdi, [rax+1E08h]
.text:0000000000464CD6 add rdi, 5C8h
.text:0000000000464CDD mov rax, [rdx+5C0h]
.text:0000000000464CE4 mov rdx, rcx
.text:0000000000464CE7 call rax
.text:0000000000464CE9 jmp locret_464E3C






help please

thanks

iconstart 09-27-2014 00:18

solved
add -l option

ZeNiX 09-29-2014 14:07

It is good to see that you have solved the problem and you shared the solution.


All times are GMT +8. The time now is 17:11.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX