View Single Post
  #1  
Old 08-08-2006, 00:10
Git's Avatar
Git Git is offline
Old Git
 
Join Date: Mar 2002
Location: Torino
Posts: 1,116
Rept. Given: 220
Rept. Rcvd 265 Times in 157 Posts
Thanks Given: 110
Thanks Rcvd at 220 Times in 126 Posts
Git Reputation: 200-299 Git Reputation: 200-299 Git Reputation: 200-299
FlexLM V8 problem

I have a problem finding the encryption keys in a V8 flexlm app. It uses lmgr8b.dll. On entry to l_string_key, the vendorcode pointer is null, plus I cannot find in V8 the equivelant of L_MOVELONG from V9. Looking at l_checkout, the vendorcode struct is changing the first two long words each side of the l_sg call. I have reversed V9 before, but not V8. I have not seen this form of l_string_key before and I have been careful to make sure it is called by _real_crypt, as there are often several functions that are very similar to l_string_key and sometimes IDA sigs find the wrong function.

Could somebody point me in the right direction please?

Git
Attached Files
File Type: zip l_string_key.zip (3.7 KB, 18 views)
Reply With Quote