i agree with the last post's either set the int3 in the places you need them, you should have a rough idea where the flexlm functions are located, then just let it crash and debug from there, or like the last person said you can trace the createprocess call's, either emulate them if they are doing (OldProc->CreateNewProc->KillOldProc) (NewProc->FlexLM), or just attach as after they are supended.

Its possible for you to msg me the target name and url ?
id be intrested to look