Beginner with OnGuard Target

[TempoMat]

Originally Posted by cgrs

Hey @TempoMat, I'm interested in your approach on that apps. Could you help me on my quest for a keygen?

URL: hxxps://www.alceingenieria.net/nutricion/descarga.htm

Sorry for the late reply

The routine @ 0076EB60 generates the UserID from the Registry Key "MachineGuid" read from the location HKLM\Software\Microsoft\Cryptography

It then PreCats "X" to the Hashed value from the MachineGuid and shows it as the UserID

For the InitRegCode:
1. HexDecode(HexString2HexBytes) the UserID without the preceding "X" and ByteSwap=>Res_UserID
2. Use the result of 1 above and the PrivateKey= "0DEBF4F725768E6195BD7A1226CC782C" which is correctly identified by "psgama" to ApplyModifierToKeyPrim=Key for Encryption/Decryption. That means EncryptionKey= ApplyModifierToKeyPrim(Res_UserID,PrivateKey)
3. ShrinkDate (BaseDate + ExpandedDate)
This software does not check for a specific BaseDate so you can use BaseDate=0XA4CB and the Date2Long of any date in the future as the ExpandedDate
=>Result=2Bytes=XX
4. RegCheckCode=0XD9F9 = 2 Bytes = YY
I believe this RegCheckCode is the only Magic Value the software checks after the decryption
5. HashElf(Any 16 CharString)
=>Result=4Bytes=ZZZZ
6. Encrypt=>MixBlock(XXYYZZZZ,EncryptionKey)
7. Serial=HexEncode(Result from 6)

Regards