![]() |
|
|
|
#1
|
|||
|
|||
|
Quote:
Any random bytes will work so they do not need to be extracted as the program decrypts the decoded bytes using the first 16 bytes as the key. Code:
var_2C = Proc_23_0_565AB7(Mid(var_3C, 17, Len(var_3C)), Mid(var_3C, 1, 16), 0) for example... using 0123456789ABCDEFFEDCBA9876543210 as the random bytes / key and using *-91511383# from the first post, this key should work for that computer ts3Huirg1Olt00VIn78ZgsVes7y8VZqw1Q== |
|
#2
|
|||
|
|||
|
Quote:
Meaning that the key is valid if and only if the Regcode is replaced with a newly generated one with your sample random bytes. The VolumeSerialNum is for sure the only part that is always the same on a target machine but every newly generated RegCode will have a different random bytes which are used in the ActivKey generation as well. Therefore using different random bytes as in your key with the initial RegCode from post #1 will fail. As a prove, deleting the string value for RegCode in the registry location: example Code:
[HKEY_CURRENT_USER\Software\VB and VBA Program Settings\NDataScan\Activation] "Name"="TemPoMat" "Email"="TemPoMat" "RegCode"="GIv/lhuqYNCUTPZfPgYG3rM5EtzvsurmsyLeOB0" "ActivKey"="mP1y4G/RxxQvtIPpV8ZAI/yGoab2NnDSgZWT" I assume this is one of the reasons it is doing the 3 checks. |
![]() |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Can the bit0 mask in port 0x21 stop generating int 0x08? | BlackWhite | General Discussion | 0 | 03-19-2021 22:53 |