Need some help on this flexlm target

[Sailor_EDA]

Hi everybody,

I'm trying to generate a licence for a popular EDA tool that uses flexlm 9.2. In the past, I've been quite successful in recovering seeds 1 & 2 as outlined in n CrackZ's essay based on Nolan Blender's seed recovery technique i.e. place a break point on _l_sg() tracing through and examing the values of the job structure and the vendor structure.

The problem I'm facing with this particular target is that the breakpoint hits _l_sg() and the vendor structure has values in it but the job structure never gets populated, its remains exactly as it was when the breakpoint for _l_sg() hit i.e 66 followed by 0's
I can trace the rest of the flexlm routines and i can see when the features are checked out with _lc_checkout() and can see the error being set.

Going back, I traced the sequence of calls is as follows
lc_init()->_l_init()->_l_sg()

After the first _l_sg() being hit, it never hits again.

I know I'm being really sparse on information here but if anybody has anything in specific that will help, please let me know and I will post it here.

Thanks

Sailor