View Single Post
  #12  
Old 02-21-2018, 09:46
TempoMat TempoMat is offline
Friend
 
Join Date: Jan 2006
Posts: 87
Rept. Given: 10
Rept. Rcvd 6 Times in 6 Posts
Thanks Given: 4
Thanks Rcvd at 28 Times in 21 Posts
TempoMat Reputation: 6
Quote:
Originally Posted by cgrs View Post
Hey @TempoMat, I'm interested in your approach on that apps. Could you help me on my quest for a keygen?

URL: hxxps://www.alceingenieria.net/nutricion/descarga.htm
Sorry for the late reply

The routine @ 0076EB60 generates the UserID from the Registry Key "MachineGuid" read from the location HKLM\Software\Microsoft\Cryptography

It then PreCats "X" to the Hashed value from the MachineGuid and shows it as the UserID

For the InitRegCode:
1. HexDecode(HexString2HexBytes) the UserID without the preceding "X" and ByteSwap=>Res_UserID
2. Use the result of 1 above and the PrivateKey= "0DEBF4F725768E6195BD7A1226CC782C" which is correctly identified by "psgama" to ApplyModifierToKeyPrim=Key for Encryption/Decryption. That means EncryptionKey= ApplyModifierToKeyPrim(Res_UserID,PrivateKey)
3. ShrinkDate (BaseDate + ExpandedDate)
This software does not check for a specific BaseDate so you can use BaseDate=0XA4CB and the Date2Long of any date in the future as the ExpandedDate
=>Result=2Bytes=XX
4. RegCheckCode=0XD9F9 = 2 Bytes = YY
I believe this RegCheckCode is the only Magic Value the software checks after the decryption
5. HashElf(Any 16 CharString)
=>Result=4Bytes=ZZZZ
6. Encrypt=>MixBlock(XXYYZZZZ,EncryptionKey)
7. Serial=HexEncode(Result from 6)

Regards
Reply With Quote
The Following 2 Users Say Thank You to TempoMat For This Useful Post:
cgrs (04-04-2019), Indigo (07-19-2019)