MUI Keyfile

[Exodous]

There's no fakery here.

Instead of passing 0 as the last argument to the function you run 6 times, pass 1 and then run it 6 times with the seeds in the reverse order. Instead of decrypting the 1032 byte block of data it encrypts it

[RedskullDC]

Hi Exodus,

Originally Posted by Exodous

There's no fakery here.

Instead of passing 0 as the last argument to the function you run 6 times, pass 1 and then run it 6 times with the seeds in the reverse order. Instead of decrypting the 1032 byte block of data it encrypts it

Apologies for the misunderstanding.

Yep, that's what I did pretty much.

I have the first keyfile type, not the second, so I don't know about that type.
Only the first $620 bytes of the keyfile are valid data, rest is garbage.

Add the new user strings, calculate the first checksum.
Calculate the 16 byte first hash value on the stack, and replace zeroes with '%'
Set the checksum in the $408 byte block, run the encrypt routine 6 times with reverse seed order.
Save the data out to a new keyfile.

Now to automate the process to be able to offer personalised keys to valid users.

Silly of Stefan (and the new developers) to leave the Encrypt routine intact

All the best,
Red

[Hewitson]

Awesome work on the keygens boys!

[Exodous]

It's done, see the attached video demonstration of it in action

I just made up the user details and the serial number as I was doing the video.

All that's left to decide now is how we're going to responsibly generate personalised files for those who have legitimately purchased a licence?

[RedskullDC]

Hi Exodus,

Originally Posted by Exodous

All that's left to decide now is how we're going to responsibly generate personalised files for those who have legitimately purchased a licence?

Excellent work mate.

Might be nice if EAB were to coordinate the requests from valid users?

Maybe setup a gmail address to which users could forward their confirmation emails for verification?

Ultimately, it's your work, so you say how you want to handle it.

I'm more than happy to help process some of the requests though.

Cheers,
Red

[BippyM]

Users can happily send me a screenshot of their confirmation and I'll let you guys know..

There needs to be only one person distributing keys though, and a list of who has received a key so slightly different duplicates aren't sent out..

Originally Posted by RedskullDC

Hi Exodus,


Excellent work mate.

Might be nice if EAB were to coordinate the requests from valid users?

Maybe setup a gmail address to which users could forward their confirmation emails for verification?

Ultimately, it's your work, so you say how you want to handle it.

I'm more than happy to help process some of the requests though.

Cheers,
Red

[Exodous]

Hi BippyM,

I've got a couple of bits of tidying up to do in the code so some error messages are displayed if things go wrong as it currently just quits, but if you're going to accept the proof of registration, then I'm more than happy to pass the tool on to you to generate the keys if you want, then it's all coordinated at one point?

I'm also happy to send you the code to show there's nothing hidden in there. It's a mixture of disassembly with my bits tacked in so isn't pretty, but it's functional.


I only wrote the tool for the challenge to see if it could be done.

[Hewitson]

I still say just release the keygen into the Public Domain. Do it anonymously if you wish. Mr Stuntz could have easily reverse engineered his own code and made a keygen just like you guys did. Instead he thought ripping people off would be a better idea. Why should he profit from the keygens that you guys have made?

[E-Penguin]

I suppose you could offer it to Mr Stuntz and see if he will make good on his word to distribute proper keyfiles once he again has the capability to do so.

[Hewitson]

Originally Posted by E-Penguin

I suppose you could offer it to Mr Stuntz and see if he will make good on his word to distribute proper keyfiles once he again has the capability to do so.

Why does he deserve that?

I'm sorry but he has neglected the Amiga community and ripped people off for years by giving generic keyfiles.

He deserves to make no profit from this whatsoever. If this keygen is not released to the public, I may well make one that is.

[indigolemon]

Originally Posted by Hewitson

If this keygen is not released to the public, I may well make one that is.

With Blackjack, and hookers?

[Exodous]

I can only speak for myself, but I did it mainly as an exercise in whether it was possible to do as I'm surprised it's never been done before.

I'm offering it to EAB as a solution for those who have legitimately spent their money so they can have a key file with their own name.


If you want a keyfile without paying anything, then there is no need to generate one as there are several geniune mui.key files on the EAB file server, just get one that is 5,696 bytes long.

[alexh]

Originally Posted by Hewitson

we don't owe him anything, it's abandonware at this point.

Originally Posted by Hewitson

I still say just release the keygen into the Public Domain. Do it anonymously if you wish. Mr Stuntz could have easily reverse engineered his own code and made a keygen just like you guys did. Instead he thought ripping people off would be a better idea. Why should he profit from the keygens that you guys have made?

Originally Posted by Hewitson

I'm sorry but he has neglected the Amiga community and ripped people off for years by giving generic keyfiles.

He deserves to make no profit from this whatsoever. If this keygen is not released to the public, I may well make one that is.

This is quite a nasty tone.

If you ever create anything ever (I doubt you will), I hope someone feels the same towards your work and does the same to you, and steals your work.

[RedskullDC]

Hi Exodous, et al.

Originally Posted by Exodous

I can only speak for myself, but I did it mainly as an exercise in whether it was possible to do as I'm surprised it's never been done before.

I'm offering it to EAB as a solution for those who have legitimately spent their money so they can have a key file with their own name.

I'm with Exodous 100%.

Love a good puzzle, and at the end of it some poor sods who have parted with their hard earned $$$ have the opportunity to get a personalised keyfile.

EAB maintains a policy of no piracy.
Having the process curated through EAB lends further credibility to the whole idea of providing personalised keys to paid users.

Originally Posted by Hewitson

He deserves to make no profit from this whatsoever. If this keygen is not released to the public, I may well make one that is.

I understand your frustration and views, but that's not congruent with EAB's position. Posts like this could derail the whole idea.

I disagree that he should make no profit for his work.
Until such time as he gifts it to the Amiga community, that is just the way it is. Like it or lump it.
I liked it, so paid for a copy back in 2001 and received a personalised key.

It does annoy me that other valid users have *not* received personalised keys, hence the effort here.

There is another Amiga forum that has no qualms whatsoever about piracy.
That is the place to post a keygen if you make one, and feel strongly enough about the issue.

Regards,
Red

[BippyM]

This 100%

Originally Posted by RedskullDC

Hi Exodous, et al.


I'm with Exodous 100%.

Love a good puzzle, and at the end of it some poor sods who have parted with their hard earned $$$ have the opportunity to get a personalised keyfile.

EAB maintains a policy of no piracy.
Having the process curated through EAB lends further credibility to the whole idea of providing personalised keys to paid users.



I understand your frustration and views, but that's not congruent with EAB's position. Posts like this could derail the whole idea.

I disagree that he should make no profit for his work.
Until such time as he gifts it to the Amiga community, that is just the way it is. Like it or lump it.
I liked it, so paid for a copy back in 2001 and received a personalised key.

It does annoy me that other valid users have *not* received personalised keys, hence the effort here.

There is another Amiga forum that has no qualms whatsoever about piracy.
That is the place to post a keygen if you make one, and feel strongly enough about the issue.

Regards,
Red

[Hewitson]

I'm sorry guys but I honestly can't understand your position on this matter.

Someone sells a game with ripped graphics and they get absolutely annihilated, and ultimately banned.

But sell generic keyfiles to people when they have paid for a personalised one, or even not supplying a keyfile at all, seems like that's absolutely fine. Now he'll be making profit from a keygen that has had to be created because of HIS incompetence and stupidity.

I just don't get it.

[BippyM]

Originally Posted by Hewitson

I'm sorry guys but I honestly can't understand your position on this matter.

Are you for real? The position is simple.. Eab will not be involved in the distribution of any software that is still being sold.. End of discussion..

Someone sells a game with ripped graphics and they get absolutely annihilated, and ultimately banned.

Who, when and where.. And to sell a game with ripped assets for profit is a bit of a cuntish move isn't it.

But sell generic keyfiles to people when they have paid for a personalised one, or even not supplying a keyfile at all, seems like that's absolutely fine. Now he'll be making profit from a keygen that has had to be created because of HIS incompetence and stupidity.

I just don't get it.

It is HIS software. He isn't selling something with ripped gfx or assets, he is selling his software, that he programmed and he put his time and energy into.. Yes his support is shit, yes he seems to be a dick, but obviously users want to pay for his software.. There are generic keyfiles that work.. I don't u derstand your position, or beef.. If you want to use mui registered, go get a key file... Or follow through with your threat of releasing a key maker yourself!

[coldacid]

If ever there was a use case for thread-specific bans...

[dalek]

My biggest issue with the situation is the text at: http://www.sasg.com/cgi-sasg/order_info?app=MUI

Thank you very much for considering to register MUI and to support the shareware concept. This will help the author to improve his product and enable new releases. We are now accepting online orders via credit card or bank transfer through PayPal.

People registering are misled in to thinking there will be "improvements" and "new releases" from the author. Clearly this is not going to be the case.

Releasing a keygen could change the situation (though doubtfully, since there are already keys floating about). It would be trivial to change the registration key format in a "new release" and mail out new keys, rendering the now not-working keygen an indication that development is still active.

How much responsibility does the community have as a whole to educate his customers? Hopefully this thread is a good enough starting point.....

[rbm]

Originally Posted by dalek

My biggest issue with the situation is the text at: http://www.sasg.com/cgi-sasg/order_info?app=MUI

Thank you very much for considering to register MUI and to support the shareware concept. This will help the author to improve his product and enable new releases. We are now accepting online orders via credit card or bank transfer through PayPal.

Yes, this is a misleading advertising and a fraud when you buy it. This is unscrupulous because he knows it will never be updated.

I will always support active developers and this is not the right way.