password
June 14th, 2002, 17:44
I'm new here, so I hope I do this right.
1)What is the problem.... I can only get one feature for application
2)What is the protection..... FlexLM v6.1a intigrated dlls
3)What tools are you using.... IDA; SoftIce
4)What tutorials have you read.... http://www.woodmann.net/crackz/Flexlm.htm all the essays
5)Show your output listing WITH comments.... NA
6)NOW ask your question.... OK, it's like this...
#########################################
I have been working on creating a license for Mirai 1.0 for a couple of weeks now. I have all the correct vendor keys and the vendor name. I was only able to get one feature name (mirai-runtime-1-0) by turning on diagnostics in the registry, setting up and running a FlexLM server, and including a USE_SERVER line in the license. I found this earlier but it doesn't seem to help much:
Q2. How can I find more features in the program which was encrypted by FLEXlm? Such as Cadence Specctra, I have looked through all .exe .dll files, but I can't
find similar features. Other programs which were integrated with lmgrxxx.dll, I also can't find more features. I can only find one feature prior to lc_checkout, where
were the other features placed?.
A2. You can often find the features by doing a search of the executable for the feature you know - often the other features are very close to it in the binary. One
thing you can do is start up the cdslmd server and see if the program is trying to check out any specific features - attempts to check out unsupported features will
show up in the log file. I've found that there's usually an attempt to check out a license before it bombs; A few programs call lc_get_config and then check the
returned list for features.
Either way, you find out what it is trying to do. Try searching everything for _ALL to see if you can find anything. Tell me the version of FLEXlm that cdslmd uses,
plus the first two bytes of ENCRYPTION_SEED1 and I may be able to help you more.
#########################################
The vendor daemon never reaches lc_checkout; so, I have no idea where the actual checkout is occurring. The target also uses AllegroCL, so some of the call may be hidden in the .dxl file. After the log file checks out the first feature it say Unsuported: "Internal", but I can't use Internal as a feature. I did a string search in SoftIce for the feature I have, and found what looked like the the the second feature line, except encrypted somehow.
#########################################
41 82FFFFFF 6E114779
FEATU ... n?›Gy
#########################################
I know there's more features; but where are they?
P.S. Damn, that's a long post.
1)What is the problem.... I can only get one feature for application
2)What is the protection..... FlexLM v6.1a intigrated dlls
3)What tools are you using.... IDA; SoftIce
4)What tutorials have you read.... http://www.woodmann.net/crackz/Flexlm.htm all the essays
5)Show your output listing WITH comments.... NA
6)NOW ask your question.... OK, it's like this...
#########################################
I have been working on creating a license for Mirai 1.0 for a couple of weeks now. I have all the correct vendor keys and the vendor name. I was only able to get one feature name (mirai-runtime-1-0) by turning on diagnostics in the registry, setting up and running a FlexLM server, and including a USE_SERVER line in the license. I found this earlier but it doesn't seem to help much:
Q2. How can I find more features in the program which was encrypted by FLEXlm? Such as Cadence Specctra, I have looked through all .exe .dll files, but I can't
find similar features. Other programs which were integrated with lmgrxxx.dll, I also can't find more features. I can only find one feature prior to lc_checkout, where
were the other features placed?.
A2. You can often find the features by doing a search of the executable for the feature you know - often the other features are very close to it in the binary. One
thing you can do is start up the cdslmd server and see if the program is trying to check out any specific features - attempts to check out unsupported features will
show up in the log file. I've found that there's usually an attempt to check out a license before it bombs; A few programs call lc_get_config and then check the
returned list for features.
Either way, you find out what it is trying to do. Try searching everything for _ALL to see if you can find anything. Tell me the version of FLEXlm that cdslmd uses,
plus the first two bytes of ENCRYPTION_SEED1 and I may be able to help you more.
#########################################
The vendor daemon never reaches lc_checkout; so, I have no idea where the actual checkout is occurring. The target also uses AllegroCL, so some of the call may be hidden in the .dxl file. After the log file checks out the first feature it say Unsuported: "Internal", but I can't use Internal as a feature. I did a string search in SoftIce for the feature I have, and found what looked like the the the second feature line, except encrypted somehow.
#########################################
41 82FFFFFF 6E114779
FEATU ... n?›Gy
#########################################
I know there's more features; but where are they?
P.S. Damn, that's a long post.