S90x123's passord key gen

Author:
S90x123

Language:
C/C++

Upload:
2026-07-26 18:41

Download

Platform:
Windows

Difficulty:
4.4

Quality:
5.0

Arch:
x86-64

Downloads:
885

Size:
998.50 KB

Writeups:
0

Comments:
13

Description

make a key gen to genreat the password

Labels ?

Anti-debugging IsDebuggerPresent Debugger/tool window detection Timing (rdtsc/GetTickCount) PEB BeingDebugged / NtGlobalFlag OutputDebugString TLS callback CloseHandle invalid-handle String / data encryption XOR

Comments (13)
Writeups (0)

You must be logged in to post a comment

qwix456 on 2026-07-28 10:45: Yo, this is really easy: just find `TlsCallback_0` in the exports and replace it with `c3` (ret), then set a breakpoint on `memcpy` -> `(if ( (void *)Size == Buf2[1] && (!Size || !memcmp(Buf1, Buf2[0], Size)) ))` (address `7FF6DC0F5386`), and the correct password will be visible in the dump.

haxoreagle012 on 2026-07-28 18:11: [Click to reveal]

S90x123 on 2026-07-28 20:41: @haxoreagle012 good but not work because it change by the time of your PC and num of cpu cores and ram and name of the PC so try to make a key gen ❤️ to do it

S90x123 on 2026-07-28 20:42: @qwix456 😂😂not easy as you said Read the description + it change from PC to another try by your self ❤️

asm23 on 2026-07-28 20:50: [Click to reveal]

asm23 on 2026-07-28 20:54: [Click to reveal]

S90x123 on 2026-07-28 20:57: [Click to reveal]

S90x123 on 2026-07-28 21:00: Do you know that the protection that I add to it not work after I see the code because I forget to link it in the code 🤣🤣🤣 so it is not hard because I forget to add it 🙂🙄

S90x123 on 2026-07-28 21:16: [Click to reveal]

haxoreagle012 on 2026-07-29 17:55: need to use keygen to generate new password and it changes by everymachine, if you want I can share keygen.

werrec on 2026-07-31 16:15: import ctypes from ctypes import wintypes import time import datetime MASK_64 = 0xFFFFFFFFFFFFFFFF def rotl64(val, shift): val &= MASK_64 return ((val << shift) & MASK_64) | (val >> (64 - shift)) def format_block(val, idx): val &= MASK_64 x = val ^ ((idx * 0x9e3779b9) & MASK_64) x = rotl64(x, 13) ^ 0x85ebca6b x = ((x * 0xc2b2ae35) & MASK_64) ^ (x >> 29) x = x % 10000000 if x < 1000000: x += 1000000 return str(x) def get_computer_name(): size = ctypes.c_uint32(256) buf = ctypes.create_string_buffer(256) ctypes.windll.kernel32.GetComputerNameA(buf, ctypes.byref(size)) return buf.value class SYSTEM_INFO(ctypes.Structure): _fields_ = [ ("wProcessorArchitecture", wintypes.WORD), ("wReserved", wintypes.WORD), ("dwPageSize", wintypes.DWORD), ("lpMinimumApplicationAddress", wintypes.LPVOID), ("lpMaximumApplicationAddress", wintypes.LPVOID), ("dwActiveProcessorMask", ctypes.POINTER(ctypes.c_ulong)), ("dwNumberOfProcessors", wintypes.DWORD), ("dwProcessorType", wintypes.DWORD), ("dwAllocationGranularity", wintypes.DWORD), ("wProcessorLevel", wintypes.WORD), ("wProcessorRevision", wintypes.WORD), ] def get_cpu_cores(): sysinfo = SYSTEM_INFO() ctypes.windll.kernel32.GetSystemInfo(ctypes.byref(sysinfo)) return sysinfo.dwNumberOfProcessors class MEMORYSTATUSEX(ctypes.Structure): _fields_ = [ ("dwLength", wintypes.DWORD), ("dwMemoryLoad", wintypes.DWORD), ("ullTotalPhys", ctypes.c_uint64), ("ullAvailPhys", ctypes.c_uint64), ("ullTotalPageFile", ctypes.c_uint64), ("ullAvailPageFile", ctypes.c_uint64), ("ullTotalVirtual", ctypes.c_uint64), ("ullAvailVirtual", ctypes.c_uint64), ("sullAvailExtendedVirtual", ctypes.c_uint64), ] def get_ram_gb(): meminfo = MEMORYSTATUSEX() meminfo.dwLength = ctypes.sizeof(MEMORYSTATUSEX) ctypes.windll.kernel32.GlobalMemoryStatusEx(ctypes.byref(meminfo)) return meminfo.ullTotalPhys >> 30 def generate_key(): comp_name = get_computer_name() cpu_cores = get_cpu_cores() ram_gb = get_ram_gb() now = datetime.datetime.now() day = now.day month = now.month year = now.year print("="*40) print(" C R A C K M E K E Y G E N") print("="*40) print(f"[*] Hardware & Time Details:") print(f" - Computer Name: {comp_name.decode('utf-8')}") print(f" - CPU Cores : {cpu_cores}") print(f" - RAM : {ram_gb} GB") print(f" - Target Date : {day}/{month}/{year}") uVar10_old = ((day * 0xc2b2ae35) & MASK_64) ^ ((month * 0x85ebca6b) & MASK_64) ^ ((year * 0x9e3779b9) & MASK_64) uVar10_old &= MASK_64 uVar10_old = rotl64(uVar10_old, 13) ^ 0xfedcba9876543210 uVar12 = 0 for c in comp_name: uVar12 = rotl64(c ^ uVar12, 5) uVar12 = ((cpu_cores * 0x9e3779b9) & MASK_64) ^ uVar12 uVar12 &= MASK_64 uVar11 = ((ram_gb * 0x85ebca6b) & MASK_64) ^ rotl64(uVar12, 7) uVar11 &= MASK_64 uVar11 = rotl64(uVar11, 11) ^ 0xdeadbeef12345678 uVar12 = ((uVar11 * 0x9E3779B97F4A7C15) & MASK_64) ^ (uVar11 >> 33) uVar12 &= MASK_64 uVar12_str = str(uVar12)[:10] uVar12_truncated = int(uVar12_str) val0 = (uVar10_old >> 27) ^ ((uVar10_old * 0x85ebca6b) & MASK_64) ^ 0x123456789abcdef0 b2 = format_block(val0, 0) b3 = format_block(uVar12_truncated, 1) b4 = format_block(cpu_cores * 0x12345678, 2) b_internal = format_block(ram_gb * 0x87654321, 3) b1 = "" for i in range(7): c = (int(b2[i]) ^ int(b3[i]) ^ int(b4[i]) ^ int(b_internal[i])) % 10 b1 += str(c) final_key = f"{b1}-{b2}-{b3}-{b4}" print("\n[+] GENERATED CRACKME KEY FOR YOUR SYSTEM:") print(f" {final_key}\n") if __name__ == '__main__': generate_key() input("Press Enter to exit...")

S90x123 on 2026-08-02 13:17: @haxoreagle012 sure do anything you want 🥰

JoshuaKasa on 2026-08-17 15:39: [Click to reveal]

Show all spoilers

You must be logged in to submit a writeup

crackmes.one

crackmes.one

S90x123's passord key gen