#1
|
|||
|
|||
SDK 11.x How to find Vendor_Name and Vendor_Key5 in application !!
Hi all,
After 2weeks of playing with the SDK 11.14 and Demo App. and more than a few night shifts of internet surfing I am trying to find some info on a old EOL 15 year old Application. The company that sold it is gone with the wind after 3 or 4 take overs. How can one find the Vendor_Name and Vendor_Key5 in an Application developed with .NET and FLEXNET 11 implemented ? Or can one calculate the Vendor_Key5 and Vendor_Name with the recovered information I found so far : ES1, ES2, TRL1, TRL2, 239BIT VK1, VK2, VK3, VK4 VN "mips" ? FN "Complete" ? ES1: FEFC2E17 FEFC2E17 >> ES1 >>>> .textidx:100A43BB mov ecx, [edx+4] B7794E11 >> ES2 >>>> 8Bytes down in MEM ES2: B7794E11 TRL1: 0F63E683 0F63E683 TRL1 >>>> .text:100084D3 add edx, eax TRL2: A22D254C A22D254C >> TRL2 >>>> .textidx:100D9A96 mov edx, [ecx+eax*4] 4x LOOP for the 4 keys VK1: F793BF1F F793BF1F >> VK1>>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch] VK2: F9633543 F9633543 >> VK2 >>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch] VK3: 8E0FEF44 8E0FEF44 >> VK3 >>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch] VK4: 44F6D202 44F6D202 >> VK4 >>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch] ******************************************************************************************* Update >>> found possible VN "mips" >>>>> using this in the LONG tools doesn't give me the found VendorKeys !!!!!!!! App can be found at : https://web.archive.org/web/20080908052838/http://www.fs2.com/fpgaview_download/ Possible FEATURE NAME "Complete" found with ORCA in MSI after extracting it from the EXE file "C:\Program Files (x86)\Fs2\FPGAView\Bin\FPGAView.exe" A altera tla "C:\Program Files (x86)\Fs2\FPGAView\Bin\FPGAView.exe" X xilinx tla "C:\Program Files (x86)\Fs2\FPGAView\Bin\FPGAView.exe" AV altera mso "C:\Program Files (x86)\Fs2\FPGAView\Bin\FPGAView.exe" XV xilinx mso ******************************************************************************************* [Any suggestions or hints ?? And YES these values have been confirmed by a 3th party .....will be named later. Avi Extra Info: ******************************************************************************************** Code:
textidx:100C33F8 loc_100C33F8: ; CODE XREF: sub_100C33BF+2E↑j .textidx:100C33F8 cmp [ebp+var_10], 4 .textidx:100C33FC jge short loc_100C3414 .textidx:100C33FE mov ecx, [ebp+var_10] .textidx:100C3401 mov edx, [ebp+arg_4] .textidx:100C3404 mov eax, [ebp+var_10] .textidx:100C3407 mov esi, [ebp+arg_4] .textidx:100C340A mov eax, [esi+eax*4+0Ch] ; Gede VK1 VK2 VK3 VK4 .textidx:100C340E mov [edx+ecx*4+0Ch], eax .textidx:100C3412 jmp short loc_100C33EF HTML Code:
Breakpoints used: Abs 0x10001090 Break sub_10001090 Default Abs 0x10006144 Break Gede ES1 Default Abs 0x10007712 Break Gede ES2 Default Abs 0x100084D3 Break Gede TRL1 Default Abs 0x1009FDE0 Break lc_checkout Default Abs 0x100A43BB Break Gede ES1 Default Abs 0x100A43EE Break Gede ES2 Default Abs 0x100A9630 Break lc_set_attr Default Abs 0x100AC0E0 Break lc_new_job Default Abs 0x100C2B17 Break Gede TRL1 Default Abs 0x100C340A Break Gede VK1 VK2 VK3 VK4 Default Abs 0x100C34D5 Break Gede TRL A22D254C F63E683 Default Abs 0x100D9A96 Break Gede TRL2 Default Abs 0x100D9AFA Break Gede TRL A22D254C F63E683 Default Abs 0x100D9B05 Break Gede TRL1 TRL2 A22D254C F63E683 VK1 Default Abs 0x100D9B23 Break Gede TRL A22D254C F63E683 Default Abs 0x10120610 Break lc_flexinit Default HTML Code:
Enable all breakpoints as per file. Exept lc_init... app crashes. Select Options from menu and feed LIC, after klik OK It will stop at the first BP BP F9 FEFC0017 BP F9 B7790011 BP F9 0F63E683 TRL1 >>>> .text:100084D3 add edx, eax BP F9 0F63E683 TRL1 >>>> .textidx:100C2B17 mov edx, [ecx+28h] BP F9 F793BF1F >> VK1 BP F9 F793BF1F >> VK1 BP F9 F793BF1F >> VK1 BP F9 F9633543 >> VK2 BP F9 F9633543 >> VK2 BP F9 F9633543 >> VK2 BP F9 F9633543 >> VK2 BP F9 8E0FEF44 >> VK3 BP F9 8E0FEF44 >> VK3 BP F9 8E0FEF44 >> VK3 BP F9 8E0FEF44 >> VK3 BP F9 44F6D202 >> VK4 BP F9 44F6D202 >> VK4 BP F9 44F6D202 >> VK4 BP F9 F793BF1F >> VK1 BP F9 F9633543 >> VK2 BP F9 8E0FEF44 >> VK3 BP F9 44F6D202 >> VK4 BP F9 8E0FEF44 >> VK4 BP F9 8C5FD88A BP F9 8C5FD88A BP F9 8C5FD88A BP F9 F1DF3BCB BP F9 F1DF3BCB BP F9 F1DF3BCB BP F9 F1DF3BCB BP F9 86DAE1BC BP F9 86DAE1BC BP F9 86DAE1BC BP F9 86DAE1BC BP F9 3F3AB1FA BP F9 3F3AB1FA BP F9 3F3AB1FA BP F9 3F3AB1FA BP F9 0F63E683 BP F9 0F63E683 BP F9 0F63E683 BP F9 0F63E683 BP F9 A22D254C >> TRL2 >>>> .textidx:100D9A96 mov edx, [ecx+eax*4] BP F9 A22D254C >> TRL2 >>>> .textidx:100D9AFA mov eax, [ebp+arg_0] BP F9 A22D254C >> TRL2 >>>> .textidx:100D9B05 mov ecx, [ebp+arg_0] BP F9 A22D254C >> TRL2 >>>> .textidx:100D9B23 mov eax, [ebp+arg_0] BP F9 00000000 BP F9 00000000 BP F9 00000000 BP F9 00000000 BP F9 8C5FD88A BP F9 F1DF3BCB BP F9 86DAE1BC BP F9 3F3AB1FA BP F9 3F3AB1FA BP F9 F793BF1F >> VK1 >>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch] BP F9 F9633543 >> VK2 >>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch] BP F9 8E0FEF44 >> VK3 >>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch] BP F9 44F6D202 >> VK4 >>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch] BP F9 44F6D202 >> VK4 BP F9 8C5FD88A BP F9 F1DF3BCB BP F9 86DAE1BC BP F9 3F3AB1FA BP F9 3F3AB1FA BP F9 F793BF1F >> VK1 >>>> .textidx:100D9AFA mov eax, [ebp+arg_0] BP F9 F793BF1F >> VK1 >>>> .textidx:100D9AFA mov eax, [ebp+arg_0] BP F9 F793BF1F >> VK1 >>>> .textidx:100D9B05 mov ecx, [ebp+arg_0] BP F9 F793BF1F >> VK1 >>>> .textidx:100D9B23 mov ecx, [ebp+arg_0] BP F9 F9633543 >> VK2 >>>> .textidx:100D9A96 mov edx, [ecx+eax*4] BP F9 F9633543 >> VK2 >>>> .textidx:100D9AFA mov edx, [ecx+eax*4] BP F9 F9633543 >> VK2 >>>> .textidx:100D9B05 mov ecx, [ebp+arg_0] BP F9 F9633543 >> VK2 >>>> .textidx:100D9B23 mov ecx, [ebp+arg_0] BP F9 8E0FEF44 >> VK3 >>>> .textidx:100D9A96 mov edx, [ecx+eax*4] BP F9 8E0FEF44 >> VK3 >>>> .textidx:100D9AFA mov eax, [ebp+arg_0] BP F9 8E0FEF44 >> VK3 >>>> .textidx:100D9B05 mov ecx, [ebp+arg_0] BP F9 8E0FEF44 >> VK3 >>>> .textidx:100D9B23 mov ecx, [ebp+arg_0] BP F9 44F6D202 >> VK4 >>>> .textidx:100D9A96 mov edx, [ecx+eax*4] BP F9 44F6D202 >> VK4 >>>> .textidx:100D9AFA mov edx, [ecx+eax*4] BP F9 44F6D202 >> VK4 >>>> .textidx:100D9B05 mov ecx, [ebp+arg_0] BP F9 44F6D202 >> VK4 >>>> .textidx:100D9B23 mov ecx, [ebp+arg_0] BP F9 FEFC2E17 >> ES1 >>>> .textidx:100A43BB mov ecx, [edx+4] BP F9 B7794E11 >> ES2 >>>> 8Bytes down in MEM BP F9 F793BF1F >> VK1 >>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch] BP F9 F9633543 >> VK2 >>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch] BP F9 8E0FEF44 >> VK3 >>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch] BP F9 44F6D202 >> VK4 >>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch] BP F9 44F6D202 >> VK4 BP F9 8C5FD88A BP F9 F1DF3BCB BP F9 86DAE1BC BP F9 3F3AB1FA BP F9 3F3AB1FA BP F9 F793BF1F >> VK1 >>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch] BP F9 F9633543 >> VK2 >>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch] BP F9 8E0FEF44 >> VK3 >>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch] BP F9 44F6D202 >> VK4 >>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch] BP F9 44F6D202 >> VK4 BP F9 8C5FD88A BP F9 F1DF3BCB BP F9 86DAE1BC BP F9 3F3AB1FA BP F9 3F3AB1FA BP F9 F793BF1F >> VK1 >>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch] BP F9 F9633543 >> VK2 >>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch] BP F9 8E0FEF44 >> VK3 >>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch] BP F9 44F6D202 >> VK4 >>>> .textidx:100C340A mov eax, [esi+eax*4+0Ch] BP F9 44F6D202 >> VK4 >>>> .textidx:100C34D5 mov edx, [eax+18h] BP F9 8C5FD88A BP F9 F1DF3BCB BP F9 86DAE1BC BP F9 3F3AB1FA BP F9 3F3AB1FA BP F9 POPUP "FLEXnet License Finder" FEEEEDDDDD MEEEE LIC ------------------------------------------- For Cooking one needs ingredients. Last edited by Gede; 08-06-2022 at 09:44. |
Thread Tools | |
Display Modes | |
|
|