PDA

View Full Version : Others ECC patch linux



rohank
2014-10-22, 01:06 PM
Hello everyone,

I need some guidance with patching ecc method in linux files to force them to accept older style flexlm license.

Plese help. Urgent.

Thank you

synkro
2014-10-30, 04:19 AM
With IDA, locate l_pubkey_verify, easy to find, it contains
push 214h
push 0FFFFFFF8h

then patch it to return eax=0, toward the end of the function.

For example,

.text:000A735B loc_A735B: ; CODE XREF: l_pubkey_verify+7ACj
.text:000A735B cmp [ebp+var_DC], 0
.text:000A7362 jnz short loc_A7395
.text:000A7364 mov eax, [ebp+arg_0]
.text:000A7367 mov dword ptr [eax+14h], 0FFFFFFF8h
.text:000A736E sub esp, 4
.text:000A7371 push 0
.text:000A7373 push 0FFh ; int
.text:000A7378 push 0 ; src
.text:000A737A push 0 ; errnum
.text:000A737C push 214h ; int
.text:000A7381 push 0FFFFFFF8h ; int
.text:000A7383 push [ebp+arg_0] ; int
.text:000A7386 call l_set_error
.text:000A738B add esp, 20h
.text:000A738E mov [ebp+var_10], 0FFFFFFF8h
.text:000A7395
.text:000A7395 loc_A7395: ; CODE XREF: l_pubkey_verify+145j
.text:000A7395 ; l_pubkey_verify+181j ...
.text:000A7395 mov eax, [ebp+var_10]
.text:000A7398 mov [ebp+var_FC], eax
.text:000A739E
.text:000A739E loc_A739E: ; CODE XREF: l_pubkey_verify:loc_A6C2Dj
.text:000A739E ; l_pubkey_verify+F4j
.text:000A739E mov eax, [ebp+var_FC] ; patch xor eax,eax (6 bytes, so in hex, patch it to: 33 C0 90 90 90 90)
.text:000A73A4 mov ebx, [ebp+var_4]
.text:000A73A7 leave
.text:000A73A8 retn