PDA

View Full Version : FlexNet 11.16 Target ECC Patch



kalabal
2022-05-11, 08:39 PM
Hi All,

The software that I use was protected by FlexNet version 11.13 and pattern 4C894C24204489442418488954241048894C24084881EC78010000488B05 ( pattern6_addr+20: pattern6_addr+20+3 ==> 4881EC>33C0C3) was working. Now the software moved to FlexNet version 11.16 and I couldn't find a working pattern so far. I will be so grateful if anyone can help me on this?

You can find attached related .dll file.

kalabal
2022-05-23, 03:21 PM
Hi all, quick update to my progress.

I was able to patch vendor daemon .exe file. Vendor daemon is up and running without an issue.

I did the same patch on client side .dll file but I'm still getting "license unavailable" error.

Patching process is like this;

"look for the string "SIGN%s=", two of them is found, and inside the same function; find the call statement at the end of the function and modify the call statement to "mov eax, 1"

It looks like there is another protection on client side .dll file. Does anyone have an idea about it?

Vendor deamon status is attached. 43520

kalabal
2022-05-31, 04:06 PM
Hi All,

Progress update to the thread;

I located the l_pubkey_verify and patched it.

License server is up and running without an issue. When I start the client software, I get "Invalid (inconsistent) license key. (-8,523)" error.

I tried with different encryption strength on the license (113BIT, 163BIT or 239BIT) but still getting the same error. (lmcrypt is created with 11.4 SDK)

I really need a guidance from the experts what to do next.

Attached are the original and patched .dll files.

BfoX
2022-05-31, 05:59 PM
Hi All,

Progress update to the thread;

I located the l_pubkey_verify and patched it.

License server is up and running without an issue. When I start the client software, I get "Invalid (inconsistent) license key. (-8,523)" error.

I tried with different encryption strength on the license (113BIT, 163BIT or 239BIT) but still getting the same error. (lmcrypt is created with 11.4 SDK)

I really need a guidance from the experts what to do next.

Attached are the original and patched .dll files.

You need make patсh for client also.

kalabal
2022-05-31, 06:06 PM
Thanks for the tip BfoX. Can you please explain what is "making path for client"?

BfoX
2022-05-31, 06:16 PM
Thanks for the tip BfoX. Can you please explain what is "making patсh for client"?

locate l_pubkey_verify and patch it also for client part.

kalabal
2022-05-31, 07:35 PM
locate l_pubkey_verify and patch it also for client part.

BfoX,

Can you please confirm if this is the l_pubkey_verify function for FNP11.16 x64?

43527

If so, please guide me where to patch?

kalabal
2022-06-01, 03:11 PM
locate l_pubkey_verify and patch it also for client part.

BfoX,

I searched for "2930h" (BA 30 29 00 00) and in the same sub I modified the last call from "call __security_check_cookie" to "xor eax, eax nop". When I start the client software, now I get error "Error in Public key package.(-115,10544)". Am I patching the wrong place for l_pubkey_verify?