View Single Post
  #1  
Old 08-03-2022, 09:37
Gede Gede is offline
Friend
 
Join Date: Jun 2022
Location: Some place where the sun shines
Posts: 17
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 17
Thanks Rcvd at 6 Times in 3 Posts
Gede Reputation: 0
Exclamation SDK 11.x How to find Vendor_Name and Vendor_Key5 in application !!

Hi all,

After 2weeks of playing with the SDK 11.14 and Demo App. and
more than a few night shifts of internet surfing

I am trying to find some info on a old EOL 15 year old Application.
The company that sold it is gone with the wind after 3 or 4 take overs.

How can one find the Vendor_Name and Vendor_Key5 in an Application
developed with .NET and FLEXNET 11 implemented ?

Or can one calculate the Vendor_Key5 and Vendor_Name with the recovered information I found so far :

ES1, ES2, TRL1, TRL2, 239BIT VK1, VK2, VK3, VK4 VN "mips" ? FN "Complete" ?

ES1: FEFC2E17
FEFC2E17 >> ES1 >>>> .textidx:100A43BB mov ecx, [edx+4]
B7794E11 >> ES2 >>>> 8Bytes down in MEM
ES2: B7794E11

TRL1: 0F63E683
0F63E683 TRL1 >>>> .text:100084D3 add edx, eax

TRL2: A22D254C
A22D254C >> TRL2 >>>> .textidx:100D9A96 mov edx, [ecx+eax*4]

4x LOOP for the 4 keys

VK1: F793BF1F
F793BF1F >> VK1>>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch]

VK2: F9633543
F9633543 >> VK2 >>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch]

VK3: 8E0FEF44
8E0FEF44 >> VK3 >>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch]

VK4: 44F6D202
44F6D202 >> VK4 >>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch]

*******************************************************************************************

Update >>> found possible VN "mips" >>>>> using this in the LONG tools doesn't give me the found VendorKeys !!!!!!!!
App can be found at :
https://web.archive.org/web/20080908052838/http://www.fs2.com/fpgaview_download/


Possible FEATURE NAME "Complete" found with ORCA in MSI after extracting it from the EXE file


"C:\Program Files (x86)\Fs2\FPGAView\Bin\FPGAView.exe" A altera tla
"C:\Program Files (x86)\Fs2\FPGAView\Bin\FPGAView.exe" X xilinx tla
"C:\Program Files (x86)\Fs2\FPGAView\Bin\FPGAView.exe" AV altera mso
"C:\Program Files (x86)\Fs2\FPGAView\Bin\FPGAView.exe" XV xilinx mso



*******************************************************************************************

[Any suggestions or hints ??

And YES these values have been confirmed by a 3th party .....will be named later. Avi



Extra Info:
********************************************************************************************
Code:
textidx:100C33F8 loc_100C33F8:                           ; CODE XREF: sub_100C33BF+2E↑j
.textidx:100C33F8 cmp     [ebp+var_10], 4
.textidx:100C33FC jge     short loc_100C3414
.textidx:100C33FE mov     ecx, [ebp+var_10]
.textidx:100C3401 mov     edx, [ebp+arg_4]
.textidx:100C3404 mov     eax, [ebp+var_10]
.textidx:100C3407 mov     esi, [ebp+arg_4]
.textidx:100C340A mov     eax, [esi+eax*4+0Ch]            ; Gede  VK1 VK2 VK3 VK4
.textidx:100C340E mov     [edx+ecx*4+0Ch], eax
.textidx:100C3412 jmp     short loc_100C33EF
********************************************************************************************
HTML Code:
Breakpoints used: 

Abs	0x10001090				Break	sub_10001090	Default
Abs	0x10006144				Break	Gede ES1	Default
Abs	0x10007712				Break	Gede ES2	Default
Abs	0x100084D3				Break	Gede TRL1	Default
Abs	0x1009FDE0				Break	lc_checkout	Default
Abs	0x100A43BB				Break	Gede ES1	Default
Abs	0x100A43EE				Break	Gede ES2	Default
Abs	0x100A9630				Break	lc_set_attr	Default
Abs	0x100AC0E0				Break	lc_new_job	Default
Abs	0x100C2B17				Break	Gede TRL1	Default
Abs	0x100C340A				Break	Gede  VK1 VK2 VK3 VK4	Default
Abs	0x100C34D5				Break	Gede TRL A22D254C F63E683	Default
Abs	0x100D9A96				Break	Gede TRL2	Default
Abs	0x100D9AFA				Break	Gede TRL A22D254C F63E683	Default
Abs	0x100D9B05				Break	Gede TRL1 TRL2 A22D254C F63E683 VK1	Default
Abs	0x100D9B23				Break	Gede TRL A22D254C F63E683	Default
Abs	0x10120610				Break	lc_flexinit	Default
*********************************************************************************************


HTML Code:
Enable all breakpoints as per file. Exept lc_init...   app crashes.
Select Options from menu and feed LIC, after klik OK
It will stop at the first BP
BP	F9	FEFC0017
BP	F9	B7790011
BP	F9	0F63E683 TRL1 >>>> .text:100084D3 add     edx, eax
BP	F9	0F63E683 TRL1 >>>> .textidx:100C2B17 mov     edx, [ecx+28h]				
BP	F9	F793BF1F >> VK1
BP	F9	F793BF1F >> VK1
BP	F9	F793BF1F >> VK1
BP	F9	F9633543 >> VK2
BP	F9	F9633543 >> VK2
BP	F9	F9633543 >> VK2
BP	F9	F9633543 >> VK2
BP	F9	8E0FEF44 >> VK3
BP	F9	8E0FEF44 >> VK3
BP	F9	8E0FEF44 >> VK3
BP	F9	8E0FEF44 >> VK3
BP	F9	44F6D202 >> VK4
BP	F9	44F6D202 >> VK4
BP	F9	44F6D202 >> VK4
BP	F9	F793BF1F >> VK1
BP	F9	F9633543 >> VK2
BP	F9	8E0FEF44 >> VK3
BP	F9	44F6D202 >> VK4
BP	F9	8E0FEF44 >> VK4
BP	F9	8C5FD88A
BP	F9	8C5FD88A
BP	F9	8C5FD88A
BP	F9	F1DF3BCB
BP	F9	F1DF3BCB
BP	F9	F1DF3BCB
BP	F9	F1DF3BCB
BP	F9	86DAE1BC
BP	F9	86DAE1BC
BP	F9	86DAE1BC
BP	F9	86DAE1BC
BP	F9	3F3AB1FA
BP	F9	3F3AB1FA
BP	F9	3F3AB1FA
BP	F9	3F3AB1FA
BP	F9	0F63E683
BP	F9	0F63E683
BP	F9	0F63E683
BP	F9	0F63E683
BP	F9	A22D254C >> TRL2 >>>> .textidx:100D9A96 mov     edx, [ecx+eax*4]
BP	F9	A22D254C >> TRL2 >>>> .textidx:100D9AFA mov     eax, [ebp+arg_0]
BP	F9	A22D254C >> TRL2 >>>> .textidx:100D9B05 mov     ecx, [ebp+arg_0]
BP	F9	A22D254C >> TRL2 >>>> .textidx:100D9B23 mov     eax, [ebp+arg_0]
BP	F9	00000000
BP	F9	00000000
BP	F9	00000000
BP	F9	00000000
BP	F9	8C5FD88A
BP	F9	F1DF3BCB
BP	F9	86DAE1BC
BP	F9	3F3AB1FA
BP	F9	3F3AB1FA
BP	F9	F793BF1F >> VK1	>>>> .textidx:100C340A mov     eax, [esi+eax*4+0Ch]
BP	F9	F9633543 >> VK2 >>>> .textidx:100C340A mov     eax, [esi+eax*4+0Ch]
BP	F9	8E0FEF44 >> VK3 >>>> .textidx:100C340A mov     eax, [esi+eax*4+0Ch]
BP	F9	44F6D202 >> VK4 >>>> .textidx:100C340A mov     eax, [esi+eax*4+0Ch]
BP	F9	44F6D202 >> VK4
BP	F9	8C5FD88A
BP	F9	F1DF3BCB
BP	F9	86DAE1BC
BP	F9	3F3AB1FA
BP	F9	3F3AB1FA
BP	F9	F793BF1F >> VK1 >>>> .textidx:100D9AFA mov     eax, [ebp+arg_0]
BP	F9	F793BF1F >> VK1 >>>> .textidx:100D9AFA mov     eax, [ebp+arg_0]
BP	F9	F793BF1F >> VK1 >>>> .textidx:100D9B05 mov     ecx, [ebp+arg_0]
BP	F9	F793BF1F >> VK1 >>>> .textidx:100D9B23 mov     ecx, [ebp+arg_0]
BP	F9	F9633543 >> VK2 >>>> .textidx:100D9A96 mov     edx, [ecx+eax*4]
BP	F9	F9633543 >> VK2 >>>> .textidx:100D9AFA mov     edx, [ecx+eax*4]
BP	F9	F9633543 >> VK2 >>>> .textidx:100D9B05 mov     ecx, [ebp+arg_0]
BP	F9	F9633543 >> VK2 >>>> .textidx:100D9B23 mov     ecx, [ebp+arg_0]
BP	F9	8E0FEF44 >> VK3 >>>> .textidx:100D9A96 mov     edx, [ecx+eax*4]
BP	F9	8E0FEF44 >> VK3 >>>> .textidx:100D9AFA mov     eax, [ebp+arg_0]
BP	F9	8E0FEF44 >> VK3 >>>> .textidx:100D9B05 mov     ecx, [ebp+arg_0]
BP	F9	8E0FEF44 >> VK3 >>>> .textidx:100D9B23 mov     ecx, [ebp+arg_0]
BP	F9	44F6D202 >> VK4 >>>> .textidx:100D9A96 mov     edx, [ecx+eax*4]
BP	F9	44F6D202 >> VK4 >>>> .textidx:100D9AFA mov     edx, [ecx+eax*4]
BP	F9	44F6D202 >> VK4 >>>> .textidx:100D9B05 mov     ecx, [ebp+arg_0]
BP	F9	44F6D202 >> VK4 >>>> .textidx:100D9B23 mov     ecx, [ebp+arg_0]
BP	F9	FEFC2E17 >> ES1 >>>> .textidx:100A43BB mov     ecx, [edx+4]
BP	F9	B7794E11 >> ES2 >>>> 8Bytes down in MEM

BP	F9	F793BF1F >> VK1	>>>> .textidx:100C340A mov     eax, [esi+eax*4+0Ch]
BP	F9	F9633543 >> VK2 >>>> .textidx:100C340A mov     eax, [esi+eax*4+0Ch]
BP	F9	8E0FEF44 >> VK3 >>>> .textidx:100C340A mov     eax, [esi+eax*4+0Ch]
BP	F9	44F6D202 >> VK4 >>>> .textidx:100C340A mov     eax, [esi+eax*4+0Ch]
BP	F9	44F6D202 >> VK4
BP	F9	8C5FD88A
BP	F9	F1DF3BCB
BP	F9	86DAE1BC
BP	F9	3F3AB1FA
BP	F9	3F3AB1FA
BP	F9	F793BF1F >> VK1 >>>> .textidx:100C340A mov     eax, [esi+eax*4+0Ch]
BP	F9	F9633543 >> VK2 >>>> .textidx:100C340A mov     eax, [esi+eax*4+0Ch]
BP	F9	8E0FEF44 >> VK3 >>>> .textidx:100C340A mov     eax, [esi+eax*4+0Ch]
BP	F9	44F6D202 >> VK4 >>>> .textidx:100C340A mov     eax, [esi+eax*4+0Ch]
BP	F9	44F6D202 >> VK4
BP	F9	8C5FD88A
BP	F9	F1DF3BCB
BP	F9	86DAE1BC
BP	F9	3F3AB1FA
BP	F9	3F3AB1FA
BP	F9	F793BF1F >> VK1 >>>> .textidx:100C340A mov     eax, [esi+eax*4+0Ch]
BP	F9	F9633543 >> VK2 >>>> .textidx:100C340A mov     eax, [esi+eax*4+0Ch]
BP	F9	8E0FEF44 >> VK3 >>>> .textidx:100C340A mov     eax, [esi+eax*4+0Ch]
BP	F9	44F6D202 >> VK4 >>>> .textidx:100C340A mov     eax, [esi+eax*4+0Ch]
BP	F9	44F6D202 >> VK4 >>>> .textidx:100C34D5 mov     edx, [eax+18h]
BP	F9	8C5FD88A
BP	F9	F1DF3BCB
BP	F9	86DAE1BC
BP	F9	3F3AB1FA
BP	F9	3F3AB1FA
BP	F9	POPUP "FLEXnet License Finder"    FEEEEDDDDD MEEEE   LIC
*********************************************************************************************
-------------------------------------------
For Cooking one needs ingredients.

Last edited by Gede; 08-06-2022 at 09:44.
Reply With Quote