Hi. I am stuck in digging correct seeds out of my flexlm 7.2 protected program. Applying Nolan Blender's "Zendenc FLEXlm 7.2 cracking information." essay on my target, I found all _l_sg calls inside the program. Examining the stack at that point (dd esp) I found these values for pointers:
esp = 00EE3300
esp+4= 00EE344C
esp+8= 0012FAE8
Doing dd (12FAE8+4) revealed me the data[0] and [1], but the pointer to the job structure (EE3300) did not yield anything! Value in 00EE3300+8 is 00000000,
as well as in EE330C and EE3310 --> the XOR value is 0.
That's pretty wierd and obviously something's wrong. I put data[O] and [1] into lm_code.h - you bet it was invalid. What I did wrong? Is there some another protection used in te flexlm 7.2a?
Thanks for any suggests!