вторник, 19 марта 2013 г.

ZwQueryLicenseValue in windows 8 user-mode

appidapi.dll
  • appid-EnableV2
appidsvc.dll
  • appid-EnableV2
d3d9.dll
  • TerminalServices-RemoteConnectionManager-b7857721-7a62-4a37-aff3-253fe2b8b0e8-MaxSessions
lsasrv.dll
  • LSA-Policy-EnableTrustedDomains
lsm.dll
  • TerminalServices-RemoteConnectionManager-AllowMultipleSessions
  • TerminalServices-RemoteConnectionManager-b7857721-7a62-4a37-aff3-253fe2b8b0e8-MaxSessions
netjoin.dll
  • WorkstationService-DomainJoinEnabled
sppwinob.dll
  • Security-SPP-GenuineLocalStatus
sppobjs.dll
  • Kernel-ExpirationDate
shell32.dll
  • Security-SPP-GenuineLocalStatus
  • Security-SPP-TokenActivation-AdditionalInfo
This license names used to determine if current windows license is time-based:
  • Security-SPP-Reserved-TBLProductKeyType
  • Security-SPP-Reserved-TBLState
  • Security-SPP-Reserved-TBLRemainingTime
Also I wrote simple console program dumpwlic to hex-dump license value by name. Sample of using:
C:\trash\64>dumpwlic.exe appid-EnableV2 WorkstationService-DomainJoinEnabled
appid-EnableV2: type 4
00000000  01 00 00 00                                      ....

WorkstationService-DomainJoinEnabled: type 4
00000000  01 00 00 00                                      ....

Комментариев нет:

Отправить комментарий