Log in

View Full Version : Flexlm signature files or Flair Toolkit for IDA Pro


Sophos
December 13th, 2000, 14:46
Many of the newer programs using Flexlm are statically linking so there is no nice lmgr32xx.dll to watch. To easily find the Flexlm functions for these software packages the signature files for Flexlm .dll's are needed or the Flair Toolkit to generate the signature files are needed.

I have read every tutorial available about Flexlm and IDA Pro. All assume that you have the sig files or instruct you to download the Flair Toolkit from the IDA Pro web site. The Flair toolkit is unavailable without a password.

I have also extensively looked around the web and reversing web sites using methods described on Fravia's web site to find the sig files or Flair. I really have spent a lot of time searching to no avail.

Does anyone know a workaround, where Flexlm sig files or where the Flair toolkit can be obtained other than the IDA Pro web site?

BTW I have installed the plugin located on the immortal decedents web site for finding functions inside other files, but I can't seem to make it find functions on a target with statically linked known version of Flexlm.

tsehp
December 13th, 2000, 19:29
sorry no answer for this, thanks not to post three duplicates of your topic here.
regards,

tsehp

Nolan Blender
December 13th, 2000, 22:07
Quote:

I have read every tutorial available about Flexlm and IDA Pro. All assume that you have the sig files or instruct you to download the Flair Toolkit from the IDA Pro web site. The Flair toolkit is unavailable without a password.


Hmm - maybe you should check some of the
standard tools sites like players tools -
I found a copy within about 30 seconds of
searching.

Quote:

I have also extensively looked around the web and reversing web sites using methods described on Fravia's web site to find the sig files or Flair. I really have spent a lot of time searching to no avail.


I'll even provide you the link:
http://156.17.4.4/~player/playtools/disassemblers.html

Quote:

Does anyone know a workaround, where Flexlm sig files or where the Flair toolkit can be obtained other than the IDA Pro web site?


see above.

Quote:

BTW I have installed the plugin located on the immortal decedents web site for finding functions inside other files, but I can't seem to make it find functions on a target with statically linked known version of Flexlm.


Well, unless you have applied the signature,
IDA doesn't have a better idea of the name
of the function, so using Amante's plugins
aren't as helpful as when the sigs are
applied.

sailor
December 14th, 2000, 00:00
Quote:
Sophos (12-13-2000 03:46):
Many of the newer programs using Flexlm are statically linking so there is no nice lmgr32xx.dll to watch. To easily find the Flexlm functions for these software packages the signature files for Flexlm .dll's are needed or the Flair Toolkit to generate the signature files are needed.

I have read every tutorial available about Flexlm and IDA Pro. All assume that you have the sig files or instruct you to download the Flair Toolkit from the IDA Pro web site. The Flair toolkit is unavailable without a password.

I have also extensively looked around the web and reversing web sites using methods described on Fravia's web site to find the sig files or Flair. I really have spent a lot of time searching to no avail.

Does anyone know a workaround, where Flexlm sig files or where the Flair toolkit can be obtained other than the IDA Pro web site?

BTW I have installed the plugin located on the immortal decedents web site for finding functions inside other files, but I can't seem to make it find functions on a target with statically linked known version of Flexlm.


Sophos,

thats exactly the same conclusion I came to as well.
I've been trying to crack Aldec HDL and I've been asking Nolan similar questions.
Nolan, thanks for providing the link for flair as it will definitely be useful for me.

Sailor

Sophos
December 14th, 2000, 10:44
[QUOTE]+Tsehp (12-13-2000 08:29):
sorry no answer for this, thanks not to post three duplicates of your topic here.
regards,

Sorry about that. I was getting to the message board from CrackZ's website. For some reason evey time I returned to the message board the topic would post again automatically until I shut my browser down. It won't happen again.

Sophos
December 14th, 2000, 10:50
[QUOTE]Nolan Blender (12-13-2000 11:07):

Thank you for the link Nolan, and for all of your Flexlm essays. Your latest one came at a perfect time for me as I am working on a sofware suite that uses user defined crypt filters.