Mouradpr Posted August 13, 2009 Posted August 13, 2009 (edited) hi friends and welcome . today we r going to see a classic KeyGenMe, it's a little bit meduim to hard. Required : - Serial for Lite Verion [newbies] - Serial for Standard Version [Meduim] - Serial for Professional Version or KeyGen [Meduim + 1] cya! ================ please redownload the challenge.. there was a bug.. i fixed it BrainKiller KeyGenMe Fixed.rar Edited August 13, 2009 by Mouradpr
HVC Posted August 13, 2009 Posted August 13, 2009 (edited) Thanks.kg.rarEdit: fixed a minor bug Edited August 13, 2009 by HVC
BoRoV Posted August 13, 2009 Posted August 13, 2009 (edited) Thx, I love keygen with math (maybe because I mathematician ) my KeyGen, pass on src: 1234567890 Edit: fixed a minor bug, too keygen.rar keygen_src.rar Edited August 14, 2009 by BoRoV
Mouradpr Posted August 13, 2009 Author Posted August 13, 2009 Thx, I love keygen with mathya. ... There is some bugs in your KeyGen... but good work boy..if you like maths i'm going to make some keyGenMes about different domain in mathscya!
thisistest Posted August 15, 2009 Posted August 15, 2009 004012F0 /. 55 push ebp004012F1 |. 31D2 xor edx,edx004012F3 |. 89E5 mov ebp,esp004012F5 |. 81EC 48050000 sub esp,548004012FB |. 8B45 0C mov eax,[arg.2]004012FE |. 897D FC mov [local.1],edi00401301 |. 8B7D 08 mov edi,[arg.1]00401304 |. 83F8 10 cmp eax,1000401307 |. 895D F4 mov [local.3],ebx0040130A |. 8975 F8 mov [local.2],esi0040130D |. 8995 E0FAFFFF mov [local.328],edx00401313 |. 0F84 27010000 je BrainKil.0040144000401319 |. 3D 11010000 cmp eax,1110040131E |. 74 11 je short BrainKil.0040133100401320 |> 8B5D F4 mov ebx,[local.3]00401323 |. 31C0 xor eax,eax00401325 |. 8B75 F8 mov esi,[local.2]00401328 |. 8B7D FC mov edi,[local.1]0040132B |. 89EC mov esp,ebp0040132D |. 5D pop ebp0040132E |. C2 1000 retn 10
thisistest Posted August 15, 2009 Posted August 15, 2009 0040140D |. 83F9 0C cmp ecx,0C00401410 |. 74 50 je short BrainKil.0040146200401412 |> 893C24 mov dword ptr ss:[esp],edi ; |00401415 |. 31C9 xor ecx,ecx ; |00401417 |. BA 00304000 mov edx,BrainKil.00403000 ; |ASCII "Error"0040141C |. 894C24 0C mov dword ptr ss:[esp+C],ecx ; |00401420 |. B8 06304000 mov eax,BrainKil.00403006 ; |ASCII "Bad Boy"00401425 |. 895424 08 mov dword ptr ss:[esp+8],edx ; |00401429 |. 894424 04 mov dword ptr ss:[esp+4],eax ; |0040142D |. E8 B6010000 call <jmp.&USER32.MessageBoxA> ; \MessageBoxA00401547 |. /74 3A je short BrainKil.0040158300401549 |. |83BD E0FAFFFF>cmp [local.328],300401550 |.^|0F85 CAFDFFFF jnz BrainKil.0040132000401556 |. |BE 10304000 mov esi,BrainKil.00403010 ; ASCII "Registered to : Professional Version"0040155B |. |897424 08 mov dword ptr ss:[esp+8],esi0040155F |> |893C24 mov dword ptr ss:[esp],edi ; |00401562 |. |BB E8030000 mov ebx,3E8 ; |00401567 |. |895C24 04 mov dword ptr ss:[esp+4],ebx ; |0040156B |. |E8 80000000 call <jmp.&USER32.SetDlgItemTextA> ; \SetDlgItemTextA00401570 |. |83EC 0C sub esp,0C00401573 |.^|E9 A8FDFFFF jmp BrainKil.0040132000401578 |> |B8 35304000 mov eax,BrainKil.00403035 ; ASCII "Registered to : Lite Version"0040157D |> |894424 08 mov dword ptr ss:[esp+8],eax00401581 |.^|EB DC jmp short BrainKil.0040155F00401583 |> \B8 54304000 mov eax,BrainKil.00403054 ; ASCII "Registered to : Standard Version"00401588 |.^ EB F3 jmp short BrainKil.0040157D0040158A |> 8B85 E0FAFFFF mov eax,[local.328]00401590 |. 85C0 test eax,eax00401592 |.^ 0F85 88FDFFFF jnz BrainKil.0040132000401598 \.^ E9 75FEFFFF jmp BrainKil.004014120040159D 90 nop
ali.yekta Posted August 15, 2009 Posted August 15, 2009 (edited) could anyone explain whats with the floating point calculation for first 3 digits part of serial which determines version of registeration? Edited August 15, 2009 by ali.yekta
Mouradpr Posted August 15, 2009 Author Posted August 15, 2009 could anyone explain whats with the floating point calculation for first 3 digits part of serial which determines version of registeration?there's an equation of Third degree...x^3 - 8x^2 + 19x - 12 =0solutions of this equation are 1 , 3 and 4...if the first bytes of serial contain one solution then it's a lite Versionif there is two solutions then Standard Versionif 3 solutions then the Professional Version..byte 4 of serial must be '-'byte4+byte5+byte6+byte7 must be 8 and then Byte8 must be '-'B9+B10+B11+B12 = 19b13 = '-'b14+b15+b16+b17 = 128 and 19 and 12 are the equation's Argumentsserial example102-2222-9901-1254 Lite Version130-2222-9901-1254 Standard Version134-2222-9901-1254 Professional Version===============use IDA + HexArray Plugin=======================================that's all ... and thank you for all===============================
TeRcO Posted October 31 Posted October 31 (edited) My attempt ( Sorry i uploaded the *.exe) KG.rar Src.txt Edited November 1 by TeRcO add Src
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now