View Single Post
  #1  
Old 09-27-2015, 08:52
psgama psgama is offline
Friend
 
Join Date: Jul 2014
Posts: 101
Rept. Given: 0
Rept. Rcvd 6 Times in 6 Posts
Thanks Given: 12
Thanks Rcvd at 75 Times in 44 Posts
psgama Reputation: 6
Beginner with OnGuard Target

Hi everyone.

First off, I'm still learning and developing my skills. I'm not a Script kiddie per say, but I don't program applications for a living. I deal more with ladder logic and Function blocks in industry.

This is a hobby for me, I like puzzles and of course the feeling you get when you solve one, but I can't seem to generate a valid key for my application.

My target is using TurboPower Onguard as protection. When you open it in Ollydbg it closes itself opens another application and then re-opens itself as a new thread. I've been able to just patch one jump to keep it open as the same thread, but I've just been attaching to it after it runs, because I'm pretty sure it detects that the thread wasn't closed anyway.

Anyway, So far it's been too complicated for me, so I've resorted to downloading the onguard examples from sourceforge and trying to follow everything out in Ollydbg to see if I can create a key generator for either binary. By doing this, I think I discovered that the developer is using the same Key info as the HelloWorld Example....... Lazy developer?

However, modifiers are being used and there are several different versions of keys that can be generated for different packages of this application.

I've dumped Hello World exe while it's running and found my machine identifier integer in the dump. But I can't seem to do the same with my target.

Anyone want to point a beginner in the right direction, without completely giving things away? Either with my target, or with reversing the hello world exe from within the binary?

Code:
https://mega.nz/#!b19QWRCJ!rJef68-Wmli_fjuRMMj0gRNXIAOelbpM5Dde-B7gxew

Last edited by psgama; 09-27-2015 at 09:07.
Reply With Quote
The Following 2 Users Say Thank You to psgama For This Useful Post:
cgrs (05-20-2017), Indigo (07-19-2019)