I have read CrackZ's new paper: "FLEXlm latest information by CrackZ".

From CrackZ's paper we can get these information:

Vendor code structure

04 00 00 00 52 EE F9 99 A6 14 01 63 ED 11 A0 18
97 E1 4B 27 A8 21 6A E2 41 04 58 52 09 00 00 00

Job structure

66 00 00 00 EA 00 AA 00 C6 E0 F4 21 93 65 B8 00
00 00 6F 00 00 00 00 00 00 00 00 00 02 00 00 00

LM_SEED1 = 0x0A192837
LM_SEED2 = 0xF0E1D2C3

vendor name = bitplane

i run the lenv8gen.exe and got:

#define VENDOR_KEY1 0xda96fa16
#define VENDOR_KEY2 0xc09506f0
#define VENDOR_KEY3 0x5530637d
#define VENDOR_KEY4 0x8859a9df
#define VENDOR_KEY5 0x617b2ab0

#define CRO_KEY1 0x801b706d
#define CRO_KEY2 0xb9100f8b

#define VENDOR_NAME "bitplane"


I filled above information into the file lm_code.h(from flexlmsdk9.2) and run the genlic32.exe. An error is given.

where i'm worng?

What;s the error?

I am currently trying to break an app with Flexlm 9.2 and CRO implemented. You may first try to look at:

http://dev.csdn.net/user/zxg32

The cracking of a Flexlm 9.2 scheme with license created (fortunately for the cracker, the app did not have CRO. Mine does)

Have Phun

1,lm_seed !=vendor_seed!!!
what you get is vendor_seed!!!
2,nocro is for you do....but you define crokey,would you crack ECC?????
3, as up you said , you are fresh in flexlm,so read the guide(pdf) carefully

The URL http://dev.csdn.net/user/zxg32, and cannot find any FLEXlm 9.2 tutorial...
Anyone have it?.

Thanks.

Clearly you are not correctly using your "brain." The Tutorial is not at:

http://dev.csdn.net/user/zxg32

That appears to be a Forum where Aimless suggested one might look for information about "Flexlm 9.2 and CRO implemented." The CrackZ article is in the CrackZ Forum listed at the bottom of this Forum. The article, itself is at:

http://www.woodmann.com/crackz/Tutorials/Flex2004.htm

Regards,

Hiya,

You are wrong in 2 places.

Firstly for that target, it doesn't use the Counterfeit Resistant Option, so your CRO keys should be 0x0. By default this also means your LM_SEED's 1-3 can be just initialised to any values you make up just to get the SDK or GenLic to accept them as non-unique.

Secondly, the 2 values you have their are ENCRYPTION_SEED1 & ENCRYPTION_SEED2 which you need to add to the lm_code.h manually. This target uses a standard SIGN=12 digits checkout.

Regards

CrackZ.