This was published in the Diary of a reverse-engineer as a guest post:

Keygenning with KLEE