Mam wreszcie Master Key
........... - Pt mar 03, 2006 10:41 pm
Udało sie!!! kto kolwiek umieścił na uploadze tego scrypta, jest wielki!!!!!!!!!!!!!!!
No no ale dziś jest ruch na tym DVHK UPLOAD
. - So mar 04, 2006 12:08 am
to ten ?
Option Explicit
Const ScriptName="MkBuster_by Matias_ver.no_public"
Dim RetValue
Dim Delay
Dim GPPLen,GPRLen
Dim GPR(1024)
Dim i
Dim MenuChoice
Dim MsgPrompt
Dim vv,St,St2,n,stmin
Dim risposta
Const fsoError = -1
Const fsoOpenRead = 0
Const fsoOpenWrite = 1
Const fsoOpenReadWrite = 2
Const fsoSEEK_SET = 0
Const fsoSEEK_CUR = 1
Const fsoSEEK_END = 2
Const FileFilter = "Oczytane dane (*.txt, *.out)|*.txt;*.out;|Wszystkie Pliki (*.*)|*.*|"
dim s
dim aaa,bbb
Dim DAC
Dim vec(1024)
dim iopt,extra
dim rom(16384)
dim itot,inew
Dim ToWrite
Dim OutFile
Dim Fileuse
dim filesize
dim scrivi
dim trovamk
dim trovak
dim mkok
dim keyok
dim t
dim ua
dim buff
dim keyk
dim masterk
Sub Main()
dim jj
Sc.Verbose=false
n=0
st=0
st2=0
If VerifyWinExplorer()=0 Then Exit Sub
If VerifyUnlooper()=0 Then Exit Sub
Do
MsgPrompt=" Pogromca Szachownic :D"
MenuChoice=Sc.ButtonBox(MsgPrompt,vbDefaultButton1,ScriptName+" - Menu glowne","ATR","Scanuj klucze","Scanuj MK","Wyjscie")
Select Case MenuChoice
Case 1: ATR()
Case 2: Scankey()
Case 3: Scanmk()
End Select
Loop Until MenuChoice=4
End Sub
Function ATR()
dim ToWrite
Sc.Write("A1")
ToWrite="100e06018F"
SendGP(ToWrite)
sc.delay(300)
Sc.Print("ATR: ")
For i=0 to GPRLen-1
Sc.Print(HexInv(GPR(i),2) &" ")
Next
Sc.Print(vbCr)
End function
Function Scankey()
Dim ins,ToWrite,ii,jj,t(8)
dim trova
dim eepromkey
dim mkeycriptata
call atr
trovamk=0
trovak=1
mkok=0
keyok=0
jj="80FC20032420000aFE"
ins="10F70E06C4" & SendSeca("C11a000008") & jj
Sc.Print("Glitch: " & jj & vbCr)
'Sc.Print("Glitch: " & ins & vbCr)
ToWrite="100e06018F"
SendGP(ToWrite)
sc.delay 300
SendGPST(ins)
For jj=0 to 8
t(jj)=GPR(jj)
Next
GetTimer()
For jj=0 to 8
GPR(jj)=t(jj)
Next
RISPOSTA=""
For jj=0 to GPRLen-1
'Sc.Print(HexInv(GPR(jj),2))' & " ")
risposta = risposta & HexInv(GPR(jj),2)
Next
Sc.print(risposta & vbcr)
Sc.print(risposta & vbcr)
'SCHEDA OK ''''''''''''''''''''''''''''''''''''''''''''''''''''''''
'UA SHOW'''''''''''''''''''''''''''''''''''''''''''''''
jj="80FC20032420000aFE"
ins="10F70E06C4" & SendSeca("C10e000308") & jj
Sc.Print("Glitch: " & jj & vbCr)
'Sc.Print("Glitch: " & ins & vbCr)
ToWrite="100e06018F"
SendGP(ToWrite)
sc.delay 300
SendGPST(ins)
For jj=0 to 8
t(jj)=GPR(jj)
Next
GetTimer()
For jj=0 to 8
GPR(jj)=t(jj)
Next
'Sc.Print(vbCr)
Risposta=""
For jj=0 to GPRLen-1
'Sc.Print(HexInv(GPR(jj),2))' & " ")
risposta = risposta & HexInv(GPR(jj),2)
Next
ua=mid(risposta,9,8)
scrivi=("Numer seryjny karty to : " & ua & vbcr)
Sc.print(scrivi & vbcr)
'call savefile
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''
'UA SHOW'''''''''''''''''''''''''''''''''''''''''''''''
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''
trovamk=0
trovak=1
mkok=0
keyok=0
trova = "008064"
jj="80FC2003240a20000a0aFE"
ins="10F70E06C4" & SendSeca("C10e0003ff") & jj
Sc.Print("Glitch: " & jj & vbCr)
for ii=0 to &h5000 step 1
'Sc.Print("Glitch: " & ins & vbCr)
ToWrite="100e06018F"
SendGP(ToWrite)
sc.delay 300
SendGPST(ins)
For i=0 to 8
t(i)=GPR(i)
Next
GetTimer()
For i=0 to 8
GPR(i)=t(i)
Next
call res
IF II MoD 1 = 0 THEN
if keyok then
sc.print("key ok" & vbcr)
else
sc.print("NO key " & vbcr)
end if
if mkok then
sc.print("mk ok" & vbcr)
else
sc.print("NO MK " & vbcr)
end if
SC.PRINT(risposta)
sc.print(vbcr)
end if
for i = 1 to len(risposta) step 2
if trova = "008064" and i > 20 then
if mid(risposta,i,4) = "0080" or mid(risposta,i,4) = "0081" or mid(risposta,i,4) = "0082" or mid(risposta,i,4) = "0083" or mid(risposta,i,4) = "0084" then
if mid(risposta,i-20,2) = "F0" or mid(risposta,i-20,2) = "F2" or mid(risposta,i-20,2) = "F3" or mid(risposta,i-20,1) = "6" then
Sc.print("Klucz " & mid(risposta,i-20,2) & " Prov 0" & mid(risposta,i+3,1) & "= " & mid(risposta,i-18,16) & vbcr & "Pelny Record to = " & mid(risposta,i-20,24) & vbcr)
jj = "80FC2003240a200000092000060a20004B0aFE"
Sc.Print("Glitch: " & jj & vbCr)
trova = "DBDB03"
ins="10F70E06C4" & SendSeca("C10e0003ff") & jj
trovamk=1
trovak=0
mkok=0
keyok=1
call atr
sc.write("A0")
exit function
end if
end if
end if
next
next
End function
Function Scanmk()
Dim ins,ToWrite,ii,jj,t(8)
dim trova
dim eepromkey
dim mkeycriptata
call atr
trovamk=1
trovak=0
mkok=0
keyok=0
jj="80FC2003245200009FE"
ins="10F70E06C4" & SendSeca("C11a000008") & jj
Sc.Print("Glitch: " & jj & vbCr)
'Sc.Print("Glitch: " & ins & vbCr)
ToWrite="100e06018F"
SendGP(ToWrite)
sc.delay 300
SendGPST(ins)
For jj=0 to 8
t(jj)=GPR(jj)
Next
GetTimer()
For jj=0 to 8
GPR(jj)=t(jj)
Next
RISPOSTA=""
For jj=0 to GPRLen-1
'Sc.Print(HexInv(GPR(jj),2))' & " ")
risposta = risposta & HexInv(GPR(jj),2)
Next
Sc.print(risposta & vbcr)
Sc.print(risposta & vbcr)
'SCHEDA OK ''''''''''''''''''''''''''''''''''''''''''''''''''''''''
'UA SHOW'''''''''''''''''''''''''''''''''''''''''''''''
jj="80FC200325200009FE"
ins="10F70E06C4" & SendSeca("C10e000308") & jj
Sc.Print("Glitch: " & jj & vbCr)
'Sc.Print("Glitch: " & ins & vbCr)
ToWrite="100e06018F"
SendGP(ToWrite)
sc.delay 300
SendGPST(ins)
For jj=0 to 8
t(jj)=GPR(jj)
Next
GetTimer()
For jj=0 to 8
GPR(jj)=t(jj)
Next
'Sc.Print(vbCr)
Risposta=""
For jj=0 to GPRLen-1
'Sc.Print(HexInv(GPR(jj),2))' & " ")
risposta = risposta & HexInv(GPR(jj),2)
Next
ua=mid(risposta,9,8)
scrivi=("Numer seryjny karty to : " & ua & vbcr)
Sc.print(scrivi & vbcr)
'call savefile
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''
'UA SHOW'''''''''''''''''''''''''''''''''''''''''''''''
trovamk=1
trovak=0
mkok=0
keyok=0
jj = 80FC20037A0A2000000830000B0A27FDFE
Sc.Print("Glitch: " & jj & vbCr)
trova = "DBDB03"
ins="10F70E06C4" & SendSeca("C10efefeff") & jj & vv
'Sc.Print("Glitch: " & jj & vbCr)
for ii=0 to &h5000 step 1
'Sc.Print("Glitch: " & ins & vbCr)
ToWrite="100e06018F"
SendGP(ToWrite)
sc.delay 300
SendGPST(ins)
For i=0 to 8
t(i)=GPR(i)
Next
GetTimer()
For i=0 to 8
GPR(i)=t(i)
Next
call res
IF II MoD 1 = 0 THEN
if keyok then
sc.print("key ok" & vbcr)
else
sc.print("NO key " & vbcr)
end if
if mkok then
sc.print("mk ok" & vbcr)
else
sc.print("NO MK " & vbcr)
end if
SC.PRINT(risposta)
sc.print(vbcr)
end if
for i = 1 to len(risposta) step 2
if trova = "008064" and i > 20 then
if mid(risposta,i,4) = "0080" or mid(risposta,i,4) = "0081" or mid(risposta,i,4) = "0082" or mid(risposta,i,4) = "0083" or mid(risposta,i,4) = "0084" then
if mid(risposta,i-20,2) = "F0" or mid(risposta,i-20,2) = "F2" or mid(risposta,i-20,2) = "F3" or mid(risposta,i-20,1) = "6" then
Sc.print("KLUCZ " & mid(risposta,i-20,2) & " Prov 0" & mid(risposta,i+3,1) & "= " & mid(risposta,i-18,16) & vbcr & "Pelny Record to = " & mid(risposta,i-20,24) & vbcr)
jj = "80FC2003250a200000092000040a20004B0aFE"
Sc.Print("Glitch: " & jj & vbCr)
trova = "DBDB03"
ins="10F70E06C4" & SendSeca("C10e0003ff") & jj
trovamk=1
trovak=0
mkok=0
keyok=1
end if
end if
else
if mid(risposta,i,6) = "DBDB03" then
eepromkey = mid(risposta,i+8,16)
sc.print(vbcr & "MasterKey = " & eepromkey)
MSGBOX("Znaleziono MASTERKEY Mistrzuniu moj :P ")
trovamk=0
trovak=0
mkok=1
keyok=1
exit function
call atr
sc.write("A0")
end if
end if
next
next
End function
Sub res
risposta = ""
For i=0 to GPRLen-1
' Sc.Print(HexInv(GPR(i),2))' & " ")
risposta = risposta & HexInv(GPR(i),2)
Next
End sub
Function SendSeca(str)
dim i
SendSeca=""
for i=0 to len(str)/2-1
SendSeca=SendSeca & HexInv("&h" & mid(str,2*i+1,2),2)
next
End Function
Function GetTimer()
Sc.Write("C0")
sc.delay(50)
If Sc.Read(5)=5 Then
GPR(0)=Sc.GetByte(4)
GPR(1)=Sc.GetByte(3)
GPR(2)=Sc.GetByte(2)
n=n+1
vv=GPR(0)*256*256+ GPR(1)*256+GPR(2)
st=st+vv
st2=st2+vv*vv
if vv0 Then Sc.Read(GPRLen0)
j=j+1
Do While (GPRLen0>i)
GPR(i)=Sc.GetByte(i)
i=i+1
Loop
sc.delay(50)
wend
sc.flush()
i=Sc.BytesInBuffer
if i>0 then sc.read(3)
sc.flush
if trovamk=1 then
For i=0 to GPRLen-1
BUFF=BUFF+(HexInv(GPR(i),2) &" ")
IF (HexInv(GPR(i),2) ="DB" AND HexInv(GPR(i+1),2) ="DB" AND HexInv(GPR(i+2),2) ="03" AND HexInv(GPR(i+3),2) ="04" AND HexInv(GPR(i+15),2) ="22" AND HexInv(GPR(i+16),2) ="00" ) THEN
masterk=HexInv(GPR(i+4),2) + " "+HexInv(GPR(i+5),2) + " "+HexInv(GPR(i+6),2) + " "+HexInv(GPR(i+7),2) + " "+HexInv(GPR(i+8),2) + " " + HexInv(GPR(i+9),2) + " "+ HexInv(GPR(i+10),2) + " "+ HexInv(GPR(i+11),2)
Sc.Print(vbCr)
scrivi=(ua & " # MASTERKEY = " & masterk)
call savefile
Sc.print(scrivi)
Sc.Print(vbCr)
mkok=1
EXIT SUB
END IF
Next
end if
IF trovak=1 THEN
For i=0 to GPRLen-1
BUFF=BUFF+(HexInv(GPR(i),2) &" ")
IF ((HexInv(GPR(i),2) ="F0" OR HexInv(GPR(i),2) ="F2" OR HexInv(GPR(i),2) ="F3") AND ( HexInv(GPR(i+10),2) ="00") AND (HexInv(GPR(i+11),2) ="80" OR HexInv(GPR(i+11),2) ="81" OR HexInv(GPR(i+11),2) ="82" OR HexInv(GPR(i+11),2) ="83" OR HexInv(GPR(i+11),2) ="84" )) THEN
keyk=HexInv(GPR(i+1),2) + " "+HexInv(GPR(i+2),2) + " "+HexInv(GPR(i+3),2) + " "+HexInv(GPR(i+4),2) + " "+HexInv(GPR(i+5),2) + " " + HexInv(GPR(i+6),2) + " "+ HexInv(GPR(i+7),2) + " "+ HexInv(GPR(i+8),2)
Sc.Print(vbCr)
scrivi=(ua & " # PROV ID : 0" & MID(HexInv(GPR(i+11),2),2,1) & " key " & HexInv(GPR(i),2) & " = " & keyk )
call savefile
Sc.print(scrivi)
Sc.Print(vbCr)
keyok=1
END IF
Next
IF keyok=1 THEN
Sc.Print(vbCr)
Sc.Print(vbCr)
MSGBOX("Znaleziono klucze konusie !!!")
END IF
END IF
End Sub
Function SendUL(ToSend)
Dim RetVal
Dim ULResponseTime
Dim BufferBytes
Const MaxULResponseTime=150000
Const MaxBufferBytes=1024
SendUL=0
ULResponseTime=0
BufferBytes=0
RetVal=Sc.Flush()
Sc.Write(ToSend)
Do While (BufferBytes=0 And ULResponseTime
RoBeRt0 - So mar 04, 2006 12:15 am
orginalna nazwa
"MK_Buster_By_M_PL.xvb"
o ile o ten chodzi (brak unlopka dla sprwdzenia)
ciekawe czy unloopery stanieją ...
........... - So mar 04, 2006 9:31 am
Ten ale ktoś go usunął.
Option Explicit
Const ScriptName="V7Genius"
Const ScriptVer="1.2"
Const fsoError = -1
Const fsoOpenRead = 0
Const fsoOpenWrite = 1
Const fsoOpenReadWrite = 2
Const fsoSEEK_SET = 0
Const fsoSEEK_CUR = 1
Const fsoSEEK_END = 2
Const FileFilter = "Ficheros de resultados (*.txt, *.out)|*.txt;*.out;|Todos los ficheros (*.*)|*.*|"
dim s
dim aaa,bbb
Dim RetValue
Dim DAC
Dim Delay
Dim GPPLen,GPRLen
Dim GPR(110400)
Dim vec(1024)
Dim i
Dim MenuChoice
Dim MsgPrompt
Dim vv,St,St2,n,stmin
dim iopt,extra
dim rom(16384)
dim itot,inew
Dim ToWrite
Dim OutFile
Dim Fileuse
dim filesize
dim scrivi
dim trovamk
dim trovak
dim mkok
dim keyok
dim t
dim ua
Sub Main()
dim jj
dim ins
Sc.Verbose=true
n=0
st=0
st2=0
iopt=-1
extra=0
itot=0
inew=0
trovamk=0
trovak=0
mkok=0
keyok=0
If VerifyWinExplorer()=0 Then Exit Sub
If VerifyUnlooper()=0 Then Exit Sub
Do
MsgPrompt=" SCAN ACCESO "
MenuChoice=Sc.ButtonBox(MsgPrompt,vbDefaultButton1,ScriptName+" "+ScriptVer+" - Menu principal","Dump MASTERK","Dump KEY","Scan Acceso","Exit")
Select Case MenuChoice
Case 1: DumpMK()
Case 2: DumpKEY()
Case 3: Scan()
End Select
IF mkok=1 OR keyok=1 THEN
EXIT SUB
END IF
Loop Until MenuChoice=4
End Sub
Sub GetFileName()
Dim FileName
FileName = Fs.FileSaveDialog(FileFilter, "Introdusca el nombre del fichero donde se salvaran los resultados", "Default.txt")
If FileName "" Then
OutFile = Fs.FileCreate(FileName)
end if
end sub
sub res
For i=0 to GPRLen-1
Sc.Print(HexInv(GPR(i),2))' & " ")
Next
'Sc.Print(vbCr)
end sub
sub res2
For i=0 to GPRLen-1
Sc.Print(HexInv(GPR(i),2))' & " ")
Next
'Sc.Print(vbCr)
end sub
function SendSeca(str)
dim i
SendSeca=""
for i=0 to len(str)/2-1
SendSeca=SendSeca & HexInv("&h" & mid(str,2*i+1,2),2)
next
End Function
Function Atr()
Sc.Verbose = 0
Sc.Write("A1")
ToWrite="100e07018F"
SendGP(ToWrite)
Sc.Print "Datos --> " & GPRLEN & " Bytes del atr"
Sc.Print(vbCr)
For i=0 to GPRLen-1
Sc.Print(HexInv(GPR(i),2) &" ")
Next
Sc.Print(vbCr)
End Function
Function Atr2()
Sc.Verbose = 0
Sc.Write("A1")
ToWrite="100e07018F"
End Function
Function GetTimer()
Sc.Write("C0")
sc.delay(50)
If Sc.Read(5)=5 Then
GPR(0)=Sc.GetByte(4)
GPR(1)=Sc.GetByte(3)
GPR(2)=Sc.GetByte(2)
'For i=0 to 2
' Sc.Print(HexString(GPR(i),2) &" ")
'Next
'if GPR(0) >0 then
n=n+1
vv=GPR(0)*256*256+ GPR(1)*256+GPR(2)
' sc.print(" " & vv )
' Sc.Print(vbCr)
st=st+vv
st2=st2+vv*vv
if vv0 Then Sc.Read(GPRLen0) ' Read additional bytes from the unlooper if they're coming
j=j+1
Do While (GPRLen0>i) ' Put all bytes that the unlooper had to send into the GPR array
GPR(i)=Sc.GetByte(i)
'sc.print GPR(i)
i=i+1
Loop
'sc.delay(10)
wend
'sc.flush()
'i=Sc.BytesInBuffer
'if i>0 then sc.read(3)
'sc.flush
'Else
' We didn't receive 2 bytes from the unlooper
' GPPLen=0
' GPRLen=0
'End If
' Else
' ' We didn't receive a response from the unlooper
' GPPLen=0
' GPRLen=0
' End If
if trovamk=1 then
For i=0 to GPRLen-1
BUFF=BUFF+(HexInv(GPR(i),2) &" ")
IF (HexInv(GPR(i),2) ="DB" AND HexInv(GPR(i+1),2) ="DB" AND HexInv(GPR(i+2),2) ="03" AND HexInv(GPR(i+3),2) ="04" AND HexInv(GPR(i+15),2) ="22" AND HexInv(GPR(i+16),2) ="00" ) THEN
masterk=HexInv(GPR(i+4),2) + " "+HexInv(GPR(i+5),2) + " "+HexInv(GPR(i+6),2) + " "+HexInv(GPR(i+7),2) + " "+HexInv(GPR(i+8),2) + " " + HexInv(GPR(i+9),2) + " "+ HexInv(GPR(i+10),2) + " "+ HexInv(GPR(i+11),2)
MSGBOX("TROVATO INGRESSO MASTERKEY")
Sc.Print(vbCr)
scrivi=(ua & " # MASTERKEY = " & masterk)
call savefile
Sc.print(scrivi)
Sc.Print(vbCr)
mkok=1
EXIT SUB
END IF
Next
end if
IF trovak=1 THEN
For i=0 to GPRLen-1
BUFF=BUFF+(HexInv(GPR(i),2) &" ")
IF ((HexInv(GPR(i),2) ="F0" OR HexInv(GPR(i),2) ="F2" OR HexInv(GPR(i),2) ="F3") AND ( HexInv(GPR(i+10),2) ="00") AND (HexInv(GPR(i+11),2) ="80" OR HexInv(GPR(i+11),2) ="81" OR HexInv(GPR(i+11),2) ="82" OR HexInv(GPR(i+11),2) ="83" OR HexInv(GPR(i+11),2) ="84" )) THEN
keyk=HexInv(GPR(i+1),2) + " "+HexInv(GPR(i+2),2) + " "+HexInv(GPR(i+3),2) + " "+HexInv(GPR(i+4),2) + " "+HexInv(GPR(i+5),2) + " " + HexInv(GPR(i+6),2) + " "+ HexInv(GPR(i+7),2) + " "+ HexInv(GPR(i+8),2)
Sc.Print(vbCr)
scrivi=(ua & " # PROV ID : 0" & MID(HexInv(GPR(i+11),2),2,1) & " key " & HexInv(GPR(i),2) & " = " & keyk )
call savefile
Sc.print(scrivi)
Sc.Print(vbCr)
keyok=1
END IF
Next
IF keyok=1 THEN
Sc.Print(vbCr)
Sc.Print(vbCr)
MSGBOX("TROVATA KEY")
END IF
END IF
End Sub
Function SendUL(ToSend)
' This function handles the low-level communication to the unlooper for
' packets that receive a response. It gives the unlooper some time to
' respond to a packet. If we get a response the function returns 1,
' otherwise returns 0.
Dim RetVal
Dim ULResponseTime
Dim BufferBytes
Const MaxULResponseTime=25000 ' Make sure we delay enough so very fast computers wait a little
Const MaxBufferBytes=1024
SendUL=0
ULResponseTime=0 ' Currently, haven't waited for unlooper
BufferBytes=0 ' Current bytes in buffer is 0
'RetVal=Sc.Flush() ' Flush receive buffer
Sc.Write(ToSend)
' Send the bytes to the unlooper
Do While (BufferBytes=0 And ULResponseTime= 5000 and vv< 35000 then
sc.print "G1= " & HexString(hh,4) &" " & "G2= " & HexString(tt,4)&" "
sc.print " " & vv & "(INSTime)"
kk=kk+1
end if
if vv >=35000 and vv45000 and vv 12 then
kk = 0
jj=&hFF
end if
IF mkok=1 THEN
EXIT FUNCTION
END IF
next
next
next
next
Sc.Write("A0")
End Function
sub SendIns(str,delay)
dim ins,ilen,ToWrite,ci,ci1,flag
dim nn ,rest
'sc.verbose=true
Sc.Write("A1")
ilen=len(str)/2
nn=(ilen)/16
rest=ilen mod 16
ins=SendSeca(str)
for i=0 to nn-1
ToWrite="100e" & delay & "CF" & mid(ins,i*32+1,32)'& "bf"
SendGP(ToWrite)
' sc.delay(0)
next
if rest>0 then
ToWrite="100e" & delay & "F7c" & HexString(rest-1,1) & mid(ins,2*(ilen-rest)+1,2*rest)& "FCFE"
SendGPST(ToWrite)
' sc.delay(0)
else
ToWrite="100e" & delay & "F7FCFE"
SendGPST(ToWrite)
' sc.delay(0)
end if
Sc.Write("A0")
'GetTimer()
End sub
Function DumpKEY()'Eeprom
dim ins,ToWrite,hh,jj,tt, myP3,t(8)
dim nn,kk
dim stri
dim gg
trovamk=0
trovak=1
mkok=0
keyok=0
scan()
Sc.Verbose =0
Sc.Write("A1")
Sc.Print(vbCr)
kk = 0
for nn= 00 to 10050
for hh= &h0324 to &h0324
CALL ATR
'FOR GG=1 TO 2
'for hh= &H370 to &H370
'if gg=1 then
'hh= &h0374
'end if
'if gg=2 then
'hh= &h0374
'end if
for tt= &h0009 to &h0009 step &h01
kk = 0
for jj= 00 to &h20
stri="C10efefeff"
ToWrite="10F70E06C4" & SendSeca(stri) & "80FC20" & HexString(hh,4)& "0A20" & HexString(tt,4) & "0A07fdFE"
SendGPST(ToWrite)
For i= 0 to 8
t(i)= GPR(i)
Next
Sc.Write("A0")
GetTimer()
if vv >= 0 and vv< 5000 then
sc.print "G1= " & HexString(hh,4) &" " & "G2= " & HexString(tt,4)&" "
sc.print " " & vv & "(INSTime)"
kk=kk+2
call atr
end if
if vv >= 5000 and vv< 35000 then
sc.print "G1= " & HexString(hh,4) &" " & "G2= " & HexString(tt,4)&" "
sc.print " " & vv & "(INSTime)"
kk=kk+1
end if
if vv >=35000 and vv45000 and vv
........... - So mar 04, 2006 9:34 am
Sory jest dalej ale na wczorajszej dacie.
x - So mar 04, 2006 9:58 am
Ale ten co kolega dał wyzej wygląda też na dobry.
Option Explicit
Const ScriptName="MkBuster_by Matias_ver.no_public"
Dim RetValue
Dim Delay
Dim GPPLen,GPRLen
Dim GPR(1024)
Dim i
Dim MenuChoice
Dim MsgPrompt
Dim vv,St,St2,n,stmin
Dim risposta
Const fsoError = -1
Const fsoOpenRead = 0
Const fsoOpenWrite = 1
Const fsoOpenReadWrite = 2
Const fsoSEEK_SET = 0
Const fsoSEEK_CUR = 1
Const fsoSEEK_END = 2
Const FileFilter = "Oczytane dane (*.txt, *.out)|*.txt;*.out;|Wszystkie Pliki (*.*)|*.*|"
dim s
dim aaa,bbb
Dim DAC
Dim vec(1024)
dim iopt,extra
dim rom(16384)
dim itot,inew
Dim ToWrite
Dim OutFile
Dim Fileuse
dim filesize
dim scrivi
dim trovamk
dim trovak
dim mkok
dim keyok
dim t
dim ua
dim buff
dim keyk
dim masterk
Sub Main()
dim jj
Sc.Verbose=false
n=0
st=0
st2=0
If VerifyWinExplorer()=0 Then Exit Sub
If VerifyUnlooper()=0 Then Exit Sub
Do
MsgPrompt=" Pogromca Szachownic :D"
MenuChoice=Sc.ButtonBox(MsgPrompt,vbDefaultButton1,ScriptName+" - Menu glowne","ATR","Scanuj klucze","Scanuj MK","Wyjscie")
Select Case MenuChoice
Case 1: ATR()
Case 2: Scankey()
Case 3: Scanmk()
End Select
Loop Until MenuChoice=4
End Sub
Function ATR()
dim ToWrite
Sc.Write("A1")
ToWrite="100e06018F"
SendGP(ToWrite)
sc.delay(300)
Sc.Print("ATR: ")
For i=0 to GPRLen-1
Sc.Print(HexInv(GPR(i),2) &" ")
Next
Sc.Print(vbCr)
End function
Function Scankey()
Dim ins,ToWrite,ii,jj,t(8)
dim trova
dim eepromkey
dim mkeycriptata
call atr
trovamk=0
trovak=1
mkok=0
keyok=0
jj="80FC20032420000aFE"
ins="10F70E06C4" & SendSeca("C11a000008") & jj
Sc.Print("Glitch: " & jj & vbCr)
'Sc.Print("Glitch: " & ins & vbCr)
ToWrite="100e06018F"
SendGP(ToWrite)
sc.delay 300
SendGPST(ins)
For jj=0 to 8
t(jj)=GPR(jj)
Next
GetTimer()
For jj=0 to 8
GPR(jj)=t(jj)
Next
RISPOSTA=""
For jj=0 to GPRLen-1
'Sc.Print(HexInv(GPR(jj),2))' & " ")
risposta = risposta & HexInv(GPR(jj),2)
Next
Sc.print(risposta & vbcr)
Sc.print(risposta & vbcr)
'SCHEDA OK ''''''''''''''''''''''''''''''''''''''''''''''''''''''''
'UA SHOW'''''''''''''''''''''''''''''''''''''''''''''''
jj="80FC20032420000aFE"
ins="10F70E06C4" & SendSeca("C10e000308") & jj
Sc.Print("Glitch: " & jj & vbCr)
'Sc.Print("Glitch: " & ins & vbCr)
ToWrite="100e06018F"
SendGP(ToWrite)
sc.delay 300
SendGPST(ins)
For jj=0 to 8
t(jj)=GPR(jj)
Next
GetTimer()
For jj=0 to 8
GPR(jj)=t(jj)
Next
'Sc.Print(vbCr)
Risposta=""
For jj=0 to GPRLen-1
'Sc.Print(HexInv(GPR(jj),2))' & " ")
risposta = risposta & HexInv(GPR(jj),2)
Next
ua=mid(risposta,9,8)
scrivi=("Numer seryjny karty to : " & ua & vbcr)
Sc.print(scrivi & vbcr)
'call savefile
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''
'UA SHOW'''''''''''''''''''''''''''''''''''''''''''''''
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''
trovamk=0
trovak=1
mkok=0
keyok=0
trova = "008064"
jj="80FC2003240a20000a0aFE"
ins="10F70E06C4" & SendSeca("C10e0003ff") & jj
Sc.Print("Glitch: " & jj & vbCr)
for ii=0 to &h5000 step 1
'Sc.Print("Glitch: " & ins & vbCr)
ToWrite="100e06018F"
SendGP(ToWrite)
sc.delay 300
SendGPST(ins)
For i=0 to 8
t(i)=GPR(i)
Next
GetTimer()
For i=0 to 8
GPR(i)=t(i)
Next
call res
IF II MoD 1 = 0 THEN
if keyok then
sc.print("key ok" & vbcr)
else
sc.print("NO key " & vbcr)
end if
if mkok then
sc.print("mk ok" & vbcr)
else
sc.print("NO MK " & vbcr)
end if
SC.PRINT(risposta)
sc.print(vbcr)
end if
for i = 1 to len(risposta) step 2
if trova = "008064" and i > 20 then
if mid(risposta,i,4) = "0080" or mid(risposta,i,4) = "0081" or mid(risposta,i,4) = "0082" or mid(risposta,i,4) = "0083" or mid(risposta,i,4) = "0084" then
if mid(risposta,i-20,2) = "F0" or mid(risposta,i-20,2) = "F2" or mid(risposta,i-20,2) = "F3" or mid(risposta,i-20,1) = "6" then
Sc.print("Klucz " & mid(risposta,i-20,2) & " Prov 0" & mid(risposta,i+3,1) & "= " & mid(risposta,i-18,16) & vbcr & "Pelny Record to = " & mid(risposta,i-20,24) & vbcr)
jj = "80FC2003240a200000092000060a20004B0aFE"
Sc.Print("Glitch: " & jj & vbCr)
trova = "DBDB03"
ins="10F70E06C4" & SendSeca("C10e0003ff") & jj
trovamk=1
trovak=0
mkok=0
keyok=1
call atr
sc.write("A0")
exit function
end if
end if
end if
next
next
End function
Function Scanmk()
Dim ins,ToWrite,ii,jj,t(8)
dim trova
dim eepromkey
dim mkeycriptata
call atr
trovamk=1
trovak=0
mkok=0
keyok=0
jj="80FC2003245200009FE"
ins="10F70E06C4" & SendSeca("C11a000008") & jj
Sc.Print("Glitch: " & jj & vbCr)
'Sc.Print("Glitch: " & ins & vbCr)
ToWrite="100e06018F"
SendGP(ToWrite)
sc.delay 300
SendGPST(ins)
For jj=0 to 8
t(jj)=GPR(jj)
Next
GetTimer()
For jj=0 to 8
GPR(jj)=t(jj)
Next
RISPOSTA=""
For jj=0 to GPRLen-1
'Sc.Print(HexInv(GPR(jj),2))' & " ")
risposta = risposta & HexInv(GPR(jj),2)
Next
Sc.print(risposta & vbcr)
Sc.print(risposta & vbcr)
'SCHEDA OK ''''''''''''''''''''''''''''''''''''''''''''''''''''''''
'UA SHOW'''''''''''''''''''''''''''''''''''''''''''''''
jj="80FC200325200009FE"
ins="10F70E06C4" & SendSeca("C10e000308") & jj
Sc.Print("Glitch: " & jj & vbCr)
'Sc.Print("Glitch: " & ins & vbCr)
ToWrite="100e06018F"
SendGP(ToWrite)
sc.delay 300
SendGPST(ins)
For jj=0 to 8
t(jj)=GPR(jj)
Next
GetTimer()
For jj=0 to 8
GPR(jj)=t(jj)
Next
'Sc.Print(vbCr)
Risposta=""
For jj=0 to GPRLen-1
'Sc.Print(HexInv(GPR(jj),2))' & " ")
risposta = risposta & HexInv(GPR(jj),2)
Next
ua=mid(risposta,9,8)
scrivi=("Numer seryjny karty to : " & ua & vbcr)
Sc.print(scrivi & vbcr)
'call savefile
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''
'UA SHOW'''''''''''''''''''''''''''''''''''''''''''''''
trovamk=1
trovak=0
mkok=0
keyok=0
jj = 80FC20037A0A2000000830000B0A27FDFE
Sc.Print("Glitch: " & jj & vbCr)
trova = "DBDB03"
ins="10F70E06C4" & SendSeca("C10efefeff") & jj & vv
'Sc.Print("Glitch: " & jj & vbCr)
for ii=0 to &h5000 step 1
'Sc.Print("Glitch: " & ins & vbCr)
ToWrite="100e06018F"
SendGP(ToWrite)
sc.delay 300
SendGPST(ins)
For i=0 to 8
t(i)=GPR(i)
Next
GetTimer()
For i=0 to 8
GPR(i)=t(i)
Next
call res
IF II MoD 1 = 0 THEN
if keyok then
sc.print("key ok" & vbcr)
else
sc.print("NO key " & vbcr)
end if
if mkok then
sc.print("mk ok" & vbcr)
else
sc.print("NO MK " & vbcr)
end if
SC.PRINT(risposta)
sc.print(vbcr)
end if
for i = 1 to len(risposta) step 2
if trova = "008064" and i > 20 then
if mid(risposta,i,4) = "0080" or mid(risposta,i,4) = "0081" or mid(risposta,i,4) = "0082" or mid(risposta,i,4) = "0083" or mid(risposta,i,4) = "0084" then
if mid(risposta,i-20,2) = "F0" or mid(risposta,i-20,2) = "F2" or mid(risposta,i-20,2) = "F3" or mid(risposta,i-20,1) = "6" then
Sc.print("KLUCZ " & mid(risposta,i-20,2) & " Prov 0" & mid(risposta,i+3,1) & "= " & mid(risposta,i-18,16) & vbcr & "Pelny Record to = " & mid(risposta,i-20,24) & vbcr)
jj = "80FC2003250a200000092000040a20004B0aFE"
Sc.Print("Glitch: " & jj & vbCr)
trova = "DBDB03"
ins="10F70E06C4" & SendSeca("C10e0003ff") & jj
trovamk=1
trovak=0
mkok=0
keyok=1
end if
end if
else
if mid(risposta,i,6) = "DBDB03" then
eepromkey = mid(risposta,i+8,16)
sc.print(vbcr & "MasterKey = " & eepromkey)
MSGBOX("Znaleziono MASTERKEY Mistrzuniu moj :P ")
trovamk=0
trovak=0
mkok=1
keyok=1
exit function
call atr
sc.write("A0")
end if
end if
next
next
End function
Sub res
risposta = ""
For i=0 to GPRLen-1
' Sc.Print(HexInv(GPR(i),2))' & " ")
risposta = risposta & HexInv(GPR(i),2)
Next
End sub
Function SendSeca(str)
dim i
SendSeca=""
for i=0 to len(str)/2-1
SendSeca=SendSeca & HexInv("&h" & mid(str,2*i+1,2),2)
next
End Function
Function GetTimer()
Sc.Write("C0")
sc.delay(50)
If Sc.Read(5)=5 Then
GPR(0)=Sc.GetByte(4)
GPR(1)=Sc.GetByte(3)
GPR(2)=Sc.GetByte(2)
n=n+1
vv=GPR(0)*256*256+ GPR(1)*256+GPR(2)
st=st+vv
st2=st2+vv*vv
if vv0 Then Sc.Read(GPRLen0)
j=j+1
Do While (GPRLen0>i)
GPR(i)=Sc.GetByte(i)
i=i+1
Loop
sc.delay(50)
wend
sc.flush()
i=Sc.BytesInBuffer
if i>0 then sc.read(3)
sc.flush
if trovamk=1 then
For i=0 to GPRLen-1
BUFF=BUFF+(HexInv(GPR(i),2) &" ")
IF (HexInv(GPR(i),2) ="DB" AND HexInv(GPR(i+1),2) ="DB" AND HexInv(GPR(i+2),2) ="03" AND HexInv(GPR(i+3),2) ="04" AND HexInv(GPR(i+15),2) ="22" AND HexInv(GPR(i+16),2) ="00" ) THEN
masterk=HexInv(GPR(i+4),2) + " "+HexInv(GPR(i+5),2) + " "+HexInv(GPR(i+6),2) + " "+HexInv(GPR(i+7),2) + " "+HexInv(GPR(i+8),2) + " " + HexInv(GPR(i+9),2) + " "+ HexInv(GPR(i+10),2) + " "+ HexInv(GPR(i+11),2)
Sc.Print(vbCr)
scrivi=(ua & " # MASTERKEY = " & masterk)
call savefile
Sc.print(scrivi)
Sc.Print(vbCr)
mkok=1
EXIT SUB
END IF
Next
end if
IF trovak=1 THEN
For i=0 to GPRLen-1
BUFF=BUFF+(HexInv(GPR(i),2) &" ")
IF ((HexInv(GPR(i),2) ="F0" OR HexInv(GPR(i),2) ="F2" OR HexInv(GPR(i),2) ="F3") AND ( HexInv(GPR(i+10),2) ="00") AND (HexInv(GPR(i+11),2) ="80" OR HexInv(GPR(i+11),2) ="81" OR HexInv(GPR(i+11),2) ="82" OR HexInv(GPR(i+11),2) ="83" OR HexInv(GPR(i+11),2) ="84" )) THEN
keyk=HexInv(GPR(i+1),2) + " "+HexInv(GPR(i+2),2) + " "+HexInv(GPR(i+3),2) + " "+HexInv(GPR(i+4),2) + " "+HexInv(GPR(i+5),2) + " " + HexInv(GPR(i+6),2) + " "+ HexInv(GPR(i+7),2) + " "+ HexInv(GPR(i+8),2)
Sc.Print(vbCr)
scrivi=(ua & " # PROV ID : 0" & MID(HexInv(GPR(i+11),2),2,1) & " key " & HexInv(GPR(i),2) & " = " & keyk )
call savefile
Sc.print(scrivi)
Sc.Print(vbCr)
keyok=1
END IF
Next
IF keyok=1 THEN
Sc.Print(vbCr)
Sc.Print(vbCr)
MSGBOX("Znaleziono klucze konusie !!!")
END IF
END IF
End Sub
Function SendUL(ToSend)
Dim RetVal
Dim ULResponseTime
Dim BufferBytes
Const MaxULResponseTime=150000
Const MaxBufferBytes=1024
SendUL=0
ULResponseTime=0
BufferBytes=0
RetVal=Sc.Flush()
Sc.Write(ToSend)
Do While (BufferBytes=0 And ULResponseTime
Z - So mar 04, 2006 10:09 am
Tu jest programowanie ATMELA
http://upload.dvhk.pl/content.php?id=54477
Patryk - So mar 04, 2006 12:05 pm
Ja pindole to działa!
Gość - So mar 04, 2006 3:33 pm
Ja pierdole wszystkie 6 kart poszło w atr 4 i dupa blada teraz tylko podstawki pod piwo
... - So mar 04, 2006 6:34 pm
na DVHK jest takie coś
http://forum.dvhk.pl/index.php?showtopic=129493&st=780
i piszą ze ten "V7Genius" - TO WAŁEK
Option Explicit
Const ScriptName="MkBuster_by Matias_ver.no_public"
Dim RetValue
Dim Delay
Dim GPPLen,GPRLen
Dim GPR(1024)
Dim i
Dim MenuChoice
Dim MsgPrompt
Dim vv,St,St2,n,stmin
Dim risposta
Const fsoError = -1
Const fsoOpenRead = 0
Const fsoOpenWrite = 1
Const fsoOpenReadWrite = 2
Const fsoSEEK_SET = 0
Const fsoSEEK_CUR = 1
Const fsoSEEK_END = 2
Const FileFilter = "Oczytane dane (*.txt, *.out)|*.txt;*.out;|Wszystkie Pliki (*.*)|*.*|"
dim s
dim aaa,bbb
Dim DAC
Dim vec(1024)
dim iopt,extra
dim rom(16384)
dim itot,inew
Dim ToWrite
Dim OutFile
Dim Fileuse
dim filesize
dim scrivi
dim trovamk
dim trovak
dim mkok
dim keyok
dim t
dim ua
dim buff
dim keyk
dim masterk
Sub Main()
dim jj
Sc.Verbose=false
n=0
st=0
st2=0
If VerifyWinExplorer()=0 Then Exit Sub
If VerifyUnlooper()=0 Then Exit Sub
Do
MsgPrompt=" Pogromca Szachownic "
MenuChoice=Sc.ButtonBox(MsgPrompt,vbDefaultButton1,ScriptName+" - Menu glowne","ATR","Scanuj klucze","Scanuj MK","Wyjscie")
Select Case MenuChoice
Case 1: ATR()
Case 2: Scankey()
Case 3: Scanmk()
End Select
Loop Until MenuChoice=4
End Sub
Function ATR()
dim ToWrite
Sc.Write("A1")
ToWrite="100e06018F"
SendGP(ToWrite)
sc.delay(300)
Sc.Print("ATR: ")
For i=0 to GPRLen-1
Sc.Print(HexInv(GPR(i),2) &" ")
Next
Sc.Print(vbCr)
End function
Function Scankey()
Dim ins,ToWrite,ii,jj,t(8)
dim trova
dim eepromkey
dim mkeycriptata
call atr
trovamk=0
trovak=1
mkok=0
keyok=0
jj="80FC20032420000aFE"
ins="10F70E06C4" & SendSeca("C11a000008") & jj
Sc.Print("Glitch: " & jj & vbCr)
'Sc.Print("Glitch: " & ins & vbCr)
ToWrite="100e06018F"
SendGP(ToWrite)
sc.delay 300
SendGPST(ins)
For jj=0 to 8
t(jj)=GPR(jj)
Next
GetTimer()
For jj=0 to 8
GPR(jj)=t(jj)
Next
RISPOSTA=""
For jj=0 to GPRLen-1
'Sc.Print(HexInv(GPR(jj),2))' & " ")
risposta = risposta & HexInv(GPR(jj),2)
Next
Sc.print(risposta & vbcr)
Sc.print(risposta & vbcr)
'SCHEDA OK ''''''''''''''''''''''''''''''''''''''''''''''''''''''''
'UA SHOW'''''''''''''''''''''''''''''''''''''''''''''''
jj="80FC20032420000aFE"
ins="10F70E06C4" & SendSeca("C10e000308") & jj
Sc.Print("Glitch: " & jj & vbCr)
'Sc.Print("Glitch: " & ins & vbCr)
ToWrite="100e06018F"
SendGP(ToWrite)
sc.delay 300
SendGPST(ins)
For jj=0 to 8
t(jj)=GPR(jj)
Next
GetTimer()
For jj=0 to 8
GPR(jj)=t(jj)
Next
'Sc.Print(vbCr)
Risposta=""
For jj=0 to GPRLen-1
'Sc.Print(HexInv(GPR(jj),2))' & " ")
risposta = risposta & HexInv(GPR(jj),2)
Next
ua=mid(risposta,9,8)
scrivi=("Numer seryjny karty to : " & ua & vbcr)
Sc.print(scrivi & vbcr)
'call savefile
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''
'UA SHOW'''''''''''''''''''''''''''''''''''''''''''''''
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''
trovamk=0
trovak=1
mkok=0
keyok=0
trova = "008064"
jj="80FC2003240a20000a0aFE"
ins="10F70E06C4" & SendSeca("C10e0003ff") & jj
Sc.Print("Glitch: " & jj & vbCr)
for ii=0 to &h5000 step 1
'Sc.Print("Glitch: " & ins & vbCr)
ToWrite="100e06018F"
SendGP(ToWrite)
sc.delay 300
SendGPST(ins)
For i=0 to 8
t(i)=GPR(i)
Next
GetTimer()
For i=0 to 8
GPR(i)=t(i)
Next
call res
IF II MoD 1 = 0 THEN
if keyok then
sc.print("key ok" & vbcr)
else
sc.print("NO key " & vbcr)
end if
if mkok then
sc.print("mk ok" & vbcr)
else
sc.print("NO MK " & vbcr)
end if
SC.PRINT(risposta)
sc.print(vbcr)
end if
for i = 1 to len(risposta) step 2
if trova = "008064" and i > 20 then
if mid(risposta,i,4) = "0080" or mid(risposta,i,4) = "0081" or mid(risposta,i,4) = "0082" or mid(risposta,i,4) = "0083" or mid(risposta,i,4) = "0084" then
if mid(risposta,i-20,2) = "F0" or mid(risposta,i-20,2) = "F2" or mid(risposta,i-20,2) = "F3" or mid(risposta,i-20,1) = "6" then
Sc.print("Klucz " & mid(risposta,i-20,2) & " Prov 0" & mid(risposta,i+3,1) & "= " & mid(risposta,i-18,16) & vbcr & "Pelny Record to = " & mid(risposta,i-20,24) & vbcr)
jj = "80FC2003240a200000092000060a20004B0aFE"
Sc.Print("Glitch: " & jj & vbCr)
trova = "DBDB03"
ins="10F70E06C4" & SendSeca("C10e0003ff") & jj
trovamk=1
trovak=0
mkok=0
keyok=1
call atr
sc.write("A0")
exit function
end if
end if
end if
next
next
End function
Function Scanmk()
Dim ins,ToWrite,ii,jj,t(8)
dim trova
dim eepromkey
dim mkeycriptata
call atr
trovamk=1
trovak=0
mkok=0
keyok=0
jj="80FC2003245200004FE"
ins="10F70E06C4" & SendSeca("C11a000008") & jj
Sc.Print("Glitch: " & jj & vbCr)
'Sc.Print("Glitch: " & ins & vbCr)
ToWrite="100e06018F"
SendGP(ToWrite)
sc.delay 300
SendGPST(ins)
For jj=0 to 8
t(jj)=GPR(jj)
Next
GetTimer()
For jj=0 to 8
GPR(jj)=t(jj)
Next
RISPOSTA=""
For jj=0 to GPRLen-1
'Sc.Print(HexInv(GPR(jj),2))' & " ")
risposta = risposta & HexInv(GPR(jj),2)
Next
Sc.print(risposta & vbcr)
Sc.print(risposta & vbcr)
'SCHEDA OK ''''''''''''''''''''''''''''''''''''''''''''''''''''''''
'UA SHOW'''''''''''''''''''''''''''''''''''''''''''''''
jj="80FC200325200004FE"
ins="10F70E06C4" & SendSeca("C10e000308") & jj
Sc.Print("Glitch: " & jj & vbCr)
'Sc.Print("Glitch: " & ins & vbCr)
ToWrite="100e06018F"
SendGP(ToWrite)
sc.delay 300
SendGPST(ins)
For jj=0 to 8
t(jj)=GPR(jj)
Next
GetTimer()
For jj=0 to 8
GPR(jj)=t(jj)
Next
'Sc.Print(vbCr)
Risposta=""
For jj=0 to GPRLen-1
'Sc.Print(HexInv(GPR(jj),2))' & " ")
risposta = risposta & HexInv(GPR(jj),2)
Next
ua=mid(risposta,9,8)
scrivi=("Numer seryjny karty to : " & ua & vbcr)
Sc.print(scrivi & vbcr)
'call savefile
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''
'UA SHOW'''''''''''''''''''''''''''''''''''''''''''''''
trovamk=1
trovak=0
mkok=0
keyok=0
jj = "80FC2003240a2000080aFE"
Sc.Print("Glitch: " & jj & vbCr)
trova = "DBDB03"
ins="10F70E06C4" & SendSeca("C10efefeff") & jj & vv
'Sc.Print("Glitch: " & jj & vbCr)
for ii=0 to &h5000 step 1
'Sc.Print("Glitch: " & ins & vbCr)
ToWrite="100e06018F"
SendGP(ToWrite)
sc.delay 300
SendGPST(ins)
For i=0 to 8
t(i)=GPR(i)
Next
GetTimer()
For i=0 to 8
GPR(i)=t(i)
Next
call res
IF II MoD 1 = 0 THEN
if keyok then
sc.print("key ok" & vbcr)
else
sc.print("NO key " & vbcr)
end if
if mkok then
sc.print("mk ok" & vbcr)
else
sc.print("NO MK " & vbcr)
end if
SC.PRINT(risposta)
sc.print(vbcr)
end if
for i = 1 to len(risposta) step 2
if trova = "008064" and i > 20 then
if mid(risposta,i,4) = "0080" or mid(risposta,i,4) = "0081" or mid(risposta,i,4) = "0082" or mid(risposta,i,4) = "0083" or mid(risposta,i,4) = "0084" then
if mid(risposta,i-20,2) = "F0" or mid(risposta,i-20,2) = "F2" or mid(risposta,i-20,2) = "F3" or mid(risposta,i-20,1) = "6" then
Sc.print("KLUCZ " & mid(risposta,i-20,2) & " Prov 0" & mid(risposta,i+3,1) & "= " & mid(risposta,i-18,16) & vbcr & "Pelny Record to = " & mid(risposta,i-20,24) & vbcr)
jj = "80FC2003250a200000092000040a20004B0aFE"
Sc.Print("Glitch: " & jj & vbCr)
trova = "DBDB03"
ins="10F70E06C4" & SendSeca("C10e0003ff") & jj
trovamk=1
trovak=0
mkok=0
keyok=1
end if
end if
else
if mid(risposta,i,6) = "DBDB03" then
eepromkey = mid(risposta,i+8,16)
sc.print(vbcr & "MasterKey = " & eepromkey)
MSGBOX("Znaleziono MASTERKEY Mistrzuniu moj ")
trovamk=0
trovak=0
mkok=1
keyok=1
exit function
call atr
sc.write("A0")
end if
end if
next
next
End function
Sub res
risposta = ""
For i=0 to GPRLen-1
' Sc.Print(HexInv(GPR(i),2))' & " ")
risposta = risposta & HexInv(GPR(i),2)
Next
End sub
Function SendSeca(str)
dim i
SendSeca=""
for i=0 to len(str)/2-1
SendSeca=SendSeca & HexInv("&h" & mid(str,2*i+1,2),2)
next
End Function
Function GetTimer()
Sc.Write("C0")
sc.delay(50)
If Sc.Read(5)=5 Then
GPR(0)=Sc.GetByte(4)
GPR(1)=Sc.GetByte(3)
GPR(2)=Sc.GetByte(2)
n=n+1
vv=GPR(0)*256*256+ GPR(1)*256+GPR(2)
st=st+vv
st2=st2+vv*vv
if vv0 Then Sc.Read(GPRLen0)
j=j+1
Do While (GPRLen0>i)
GPR(i)=Sc.GetByte(i)
i=i+1
Loop
sc.delay(50)
wend
sc.flush()
i=Sc.BytesInBuffer
if i>0 then sc.read(3)
sc.flush
if trovamk=1 then
For i=0 to GPRLen-1
BUFF=BUFF+(HexInv(GPR(i),2) &" ")
IF (HexInv(GPR(i),2) ="DB" AND HexInv(GPR(i+1),2) ="DB" AND HexInv(GPR(i+2),2) ="03" AND HexInv(GPR(i+3),2) ="04" AND HexInv(GPR(i+15),2) ="22" AND HexInv(GPR(i+16),2) ="00" ) THEN
masterk=HexInv(GPR(i+4),2) + " "+HexInv(GPR(i+5),2) + " "+HexInv(GPR(i+6),2) + " "+HexInv(GPR(i+7),2) + " "+HexInv(GPR(i+8),2) + " " + HexInv(GPR(i+9),2) + " "+ HexInv(GPR(i+10),2) + " "+ HexInv(GPR(i+11),2)
Sc.Print(vbCr)
scrivi=(ua & " # MASTERKEY = " & masterk)
call savefile
Sc.print(scrivi)
Sc.Print(vbCr)
mkok=1
EXIT SUB
END IF
Next
end if
IF trovak=1 THEN
For i=0 to GPRLen-1
BUFF=BUFF+(HexInv(GPR(i),2) &" ")
IF ((HexInv(GPR(i),2) ="F0" OR HexInv(GPR(i),2) ="F2" OR HexInv(GPR(i),2) ="F3") AND ( HexInv(GPR(i+10),2) ="00") AND (HexInv(GPR(i+11),2) ="80" OR HexInv(GPR(i+11),2) ="81" OR HexInv(GPR(i+11),2) ="82" OR HexInv(GPR(i+11),2) ="83" OR HexInv(GPR(i+11),2) ="84" )) THEN
keyk=HexInv(GPR(i+1),2) + " "+HexInv(GPR(i+2),2) + " "+HexInv(GPR(i+3),2) + " "+HexInv(GPR(i+4),2) + " "+HexInv(GPR(i+5),2) + " " + HexInv(GPR(i+6),2) + " "+ HexInv(GPR(i+7),2) + " "+ HexInv(GPR(i+8),2)
Sc.Print(vbCr)
scrivi=(ua & " # PROV ID : 0" & MID(HexInv(GPR(i+11),2),2,1) & " key " & HexInv(GPR(i),2) & " = " & keyk )
call savefile
Sc.print(scrivi)
Sc.Print(vbCr)
keyok=1
END IF
Next
IF keyok=1 THEN
Sc.Print(vbCr)
Sc.Print(vbCr)
MSGBOX("Znaleziono klucze konusie !!!")
END IF
END IF
End Sub
Function SendUL(ToSend)
Dim RetVal
Dim ULResponseTime
Dim BufferBytes
Const MaxULResponseTime=150000
Const MaxBufferBytes=1024
SendUL=0
ULResponseTime=0
BufferBytes=0
RetVal=Sc.Flush()
Sc.Write(ToSend)
Do While (BufferBytes=0 And ULResponseTime
????????????????? - So mar 04, 2006 7:37 pm
Pewnie mają w tym interes.
SZARE - Śr mar 22, 2006 2:12 pm
Szukam skryptu do szarych kart
SZARE - Śr mar 22, 2006 2:24 pm
Szukam skryptu do szarych kart
hd45 - Cz mar 23, 2006 12:30 pm
Witam czy mozesz podac link lub przslac mi go na E-Mail? Dzieki Pozdrawiam Marek