|
FlexLM V8 problem
I have a problem finding the encryption keys in a V8 flexlm app. It uses lmgr8b.dll. On entry to l_string_key, the vendorcode pointer is null, plus I cannot find in V8 the equivelant of L_MOVELONG from V9. Looking at l_checkout, the vendorcode struct is changing the first two long words each side of the l_sg call. I have reversed V9 before, but not V8. I have not seen this form of l_string_key before and I have been careful to make sure it is called by _real_crypt, as there are often several functions that are very similar to l_string_key and sometimes IDA sigs find the wrong function.
Could somebody point me in the right direction please?
Git
|