[Keygenme] Keygenme 15

[ChOoKi]

Another kgm to try, packed with an easy packer and relatively easier than kgm14. Enjoy.

kgm15.7z

[tester]

@ChOoKi

nice keygenme

I can not identify the second hashing algorithm this is something standard or custom modified? some tools detect GOST encryption but it does not seem.

[ChOoKi]

@tester: You are on the right track there. Using kanal is always a good idea but you still have to uncover the rest and only by tracing you will get the correct answers.

[pnta]

@ChOoKi, I can just patch it

 

 

----------

I found some information,

 

length name > 0

length serial = 32 chars

SHA256(name + ComputerName)

----------

name: pnta
ComputerName: PNTA2K10SHA256(pntaPNTA2K10) = 56C686FC8FCDAF957584324CCFF196D79A86C4B4D5E821947BD5AEDF20D49DFA
----------
56C686FC8FCDAF957584324CCFF196D79A86C4B4D5E821947BD5AEDF20D49DFA
                                                                                                       FA9DD420DFAED57B
56C686FC8FCDAF957584324CCFF196D79A86C4B4D5E821947BD5AEDF20D49DFA
95AFCD8FFC86C656                                             
56C686FC8FCDAF957584324CCFF196D79A86C4B4D5E821947BD5AEDF20D49DFA
                                  D796F1CF4C328475
56C686FC8FCDAF957584324CCFF196D79A86C4B4D5E821947BD5AEDF20D49DFA
                                                                     9421E8D5B4C4869A
-----------
ST(0)=-7.7726754773063089660e+18
ST(0)=-2.9118742364095435630e+18
ST(0)=-7.6606784228332159140e+18
ST(0)=-3.8792075522717557760e+17
-----------
fserial: 123456789012345678901234567890121290785634129078
5634129078563412ST(0)=6.2116101977542625460e+18
ST(0)=1.3377014009651897520e+18--------------------

 

it's hard for me

Edited December 6, 2013 by pnta

[ChOoKi]

@ pnta : Nice work except for the "patching" bit Don't give up just yet my friend, try again and this time take it slow through the calls, write down some notes and then take a step back and look at the big picture, you will start to see things clearer.

Edited December 6, 2013 by ChOoKi

[SReg]

@ChOoKi

nice, tnx

[DimitarSerg]

Nice keygenme.ChOoKi Keygenme 15 keygen by SReg and DimitarSerg
in attach

keygen.rar

Edited December 10, 2013 by DimitarSerg

[ChOoKi]

@ SReg & DimitarSerg: Awesome work guys , thank you both very much for taking the time to solve this challenge, I can only hope that it was fun and you have enjoyed it.

 

Cheers

[dihux]

Nice keygenme.

ChOoKi Keygenme 15 keygen by SReg and DimitarSerg

in attach

Familiar kg-gui

[Brainrain]

 

 

Yes, this is most likely an accidental coincidence. Same colors, same font type and surprisingly everything is the same.

I shared the code of my old template with an SSG member, seems it was a mistake and it got leaked, which basically wouldn't be a big problem as long as people use it for learning/getting ideas instead of "modding" it...

It must have been very hard and timeconsuming job to modify the picture and color of the main form and replace the strings in the about section. I'm really amazed of such talents...

Edited December 16, 2013 by Brainrain

[tester]

@SReg

@DimitarSerg

good job

it would be nice to see the tut

[SReg]

@Brainrain,

 

There was no leakage. I & DimitarSerg completely rewrote code from this keygen, using IdaPro + HexPays. Not using asm, 100% Delphi code. Done much work...

In any case, I can send to you source code.

 

I not understand you - is greed or what? something wrong that I used your beautiful template?

p.s. sorry for my bad english

[DimitarSerg]

Yes, this is most likely an accidental coincidence. Same colors, same font type and surprisingly everything is the same.

I shared the code of my old template with an SSG member, seems it was a mistake and it got leaked, which basically wouldn't be a big problem as long as people use it for learning/getting ideas instead of "modding" it...

It must have been very hard and timeconsuming job to modify the picture and color of the main form and replace the strings in the about section. I'm really amazed of such talents...

SReg is rigth. There is no leak !

I saw this template in your release from ~2000year and I liked it. Then we decided to reverse it and get sourcecode of it.

>It must have been very hard and timeconsuming job

Yes, it was a lot of hard job (~48hours) with delphi7, ollydbg, also using IDR, IDA+HR to get full sources of this nice template.

p.s. Code for buttons was rewritten from Dr.Carbon asm sources

p.p.s. If you are against using this template - you can say it

Edited December 18, 2013 by DimitarSerg

[pnta]

@SReg, @DimitarSerg

please give me source code

thanks