I'm working on a target for which I don't know the feature names, and I can't find them inside the exe (looking as binary).
I turned on FLEXLM_DIAGNOSTICS with value 2, and I get a log file on run, but it is always zero bytes, nothing gets saved inside it. The program says "FlexLM returns error -5 (no such feature exists)".
Which function can I trace, that gets called with feature names as parameters?

Many thanks!!!!

If you've actually read the FAQ, you know YOU are supposed to tell US what YOU have done, so far, to attempt, yourself, to find the answer to your question, other than post it here!



Regards,

I read CrackZ page about FlexLM, but could not find anything other than to enable FlexLM Diagnostics in order to attempt to get the accessed Feature Names from the logfile. This is what I did, but as I said, the log file is empty so that's why I'm asking for an alternative way to get them (i.e. which function gets them as parameters), because I also tried looking inside the exe as binary and found nothing. I haven't a single feature name to which I can hang to in order to look for others. I hope it's clear now. Many thanks!!

So the question remains. What searching, both here and on the net have YOU attempted to try to find the answer to YOUR question? You are supposted to do your own first, then, when that fails, ask for help and/or guidance.

You are not supposed to ask for help here without having attempted to FIND the answer to YOUR question FIRST! That is the point!

The issue isn't that we don't want you to get help. The issue is that we don't want you to be lazy and just ask someone else each time you don't know what to do. That's how you improve your own skill set!

You show YOU have tried to solve YOUR problem FIRST, THEN you ask for help and tell us what YOU have done to try to find the answer, besides asking the question here, at the first moment you are stumped.

If you had actually READ THE FAQ, you would already know this.



Regards,

Finding the feature names ought to be rather easy if one takes a cursory read of the FLEXlm documentation. For example there is a function called _lc_checkout() which takes as one of its parameters.....

You dig it from here. I've been using the same hex search string to find the start of _lc_checkout() since about v8 and it still works on 11.x.

Regards,

CrackZ.

Rose, if you have disassembled your app (in IDA presumably), you would be able to follow those strings back to where they're referenced. It might be just me, but I'd think that a message about checkout failing MIGHT be the place to set a breakpoint to get the feature names!

Rose,

It's not unheard of for the Flex code to be located outside the main executable, that could be why you're not finding what you're looking for, an easy check is to use a full directory string search like the one found in 010 Editor - comes with a 30 day trial - and after that ...... anyway do a string search in your target's directory for "flex" or "flexlm" that will tell you what files contain code to be dealt with, after that search for "ckout" if found then that would be the one to concentrate on.

SiGiNT

FLEXnet Licensing v11.6.1.3 build 72149 x64_mac10 (liblmgr.a), Copyright (c) 1988-2008 Acresso Software Inc


Mac file?

SiGiNT

Someone???? I don't speak Mac (too old )

SiGiNT

errrrrrrrr.............

Thats a new one around these parts .

Woodmann

Maybe a whole new project for CrackZ ----- if Shania lets him alone long enough!

SiGiNT

All kinds of new (old?) tricks coming out from the above mentioned Co. now known as FLEXER@, ran in to one a while back partially packed with Arma.

I'm sure someone has a few tidbits of info for you.

Woodmann

Hello Rose,

There is not much of an issue on Flexlm for the mac. Ideally, it should be the same as on linux. You see, the mac internals are ultimately li/unix-y (even if they cover it up). And I am sure that looking at Flexlm for linux is the key here.

My points:

1. Get a linux vmware (or better, download ubuntu and run it in windows partition)

2. see if you can get an evaluation of another application for linux protected with flexlm.

3. Try using IDA and break the Flexlm there. GDB is good. And hey, if its a company that was just impressed by flexlm name and not really understood how it works as most flexlm source is garbage anyways (I've been told by reliable sources that the guy programming the flexlm source itself is not having it under control -- thanks for that tip Mr. C, don't see you on #c4n nowadays -- wonder why), the way most companies don't, then you may even see debug information in them. That will make it easier for you to find out WHERE in the code to get your features, even if they're now on MAC.

4. Then, its a matter of following Crackz's tutorials in IDA to get the lc_checkout.

And 64 MB for a visual effect? I hope your graphics card is upto it... did you really try to blow it?

Have Phun

Your sources are correct, all of the original group are over at Reprise Software, left sometime during the Macrovision days - but - Alladin is now a licensee of some sort cranking out all kinds of things not good for hardrives, as described several years ago by Tesla.

SiGiNT

Dont worry about your words Rose, they are no problem.

It is good to know that you have tried this on different platforms.

Perhaps a few people will PM with a request to know what the program is .

Woodmann

Woodmann...sorry, um... Woody!...damn, sorry again, WOODMANN,

I believe you have made quite a fan in there in Rose. :P

Have Phun

Rose,

The exchange of money is between you and whomever.
Just do it through a PM and I will have no problem.


Woodmann