Old ElanLM SDK
 

Hello,

I am currently reversing an old target that uses ElanLM 4.1

I have found an API Guide on the CrackZ FlexLM page.
http://web.archive.org/web/20201002220102/http://woodmann.com/crackz/Flexlm.htm
But does anyone have the full SDK?

There is also a tutorial by pilgrim where he uses an old unix binary to get the symbols
http://web.archive.org/web/20200711052611/http://www.woodmann.com/crackz/Tutorials/Pilgelan.htm
Does anyone have this binary or anything other with ElanLM and not stripped symbols?

Thanks!

Windoze

It's 20 years old story. Wonder what do you expect to learn by reversing it.

Technically it's DES encryption, thus can be RE&keygenned 100%.

Some help files here: https://www35.zippyshare.com/v/ud3l91L4/file.html

I'm just playing around with some old software. Do you (or anyone else) happen to have the full sdk?

Nope. Always solved my targets in clean RE style :-)

Here is some essential info to save your time:

/*
extern int slm_endapi(void **);
extern int slm_gencode(void * , char *, char *, unsigned long);
extern char slm_getversion(void *);
extern int slm_key(void *, int, char *, void *, unsigned long);
extern char *slm_message(void *, char *, char *, int);
extern int slm_setversion(void *, int);
extern int slm_startapi(void *);
extern char __import slm_salt[40];
extern char __import slm_port_salt[4];

void * instance;
*/

#define SLM_ENCODE 0
#define SLM_DECODE 1

#define SLM_CODE_LEN 100 //?
#define SLM_FEATURE_LEN 32
#define SLM_MAX_REDUNDANT_SERVERS 31 //?
#define SLM_MULTIKEY_MAXNUMFEAT 11
#define SLM_VENDORDATA_LEN 94

typedef struct slm_keydata
{
long nlic[SLM_MULTIKEY_MAXNUMFEAT];
long soft_nlic[SLM_MULTIKEY_MAXNUMFEAT];
long licpak_id;
long server_count;
long multikey;
long resource_attached;
long licpak_type;
long test_what;
long test_op;
long test_vd_start;
long test_vd_length;
long replace_what;
long replace_vd_start;
long replace_vd_length;
time_t start_date;
time_t expiration;
time_t test_start_date;
time_t test_expiration;
char feature[SLM_FEATURE_LEN+1];
char code[SLM_MAX_REDUNDANT_SERVERS+1][SLM_CODE_LEN+1]; //char code[3232]
char vendordata[SLM_VENDORDATA_LEN+1];
char test_domain;
char test_vdata[SLM_VENDORDATA_LEN+1];
char domain;

} slm_keydata_t;

If I recall correctly, old SentinelLM SDK's v7.0/v7.1 or so have ElanLM headers/libs, if not drop me a priv msg because I'm sure I have them *somewhere* in an archive, once you can find the routines its relatively easy to make a keygen by calling the correct functions in your target (just have to fill in the key structure).

I can't send you a PM because of my user-level...

I think I got most of the needed functions, so the SDK is not that important anymore.
But if you find in in your archives I'd like to look at it anyways.

There's a name from the past!