elhacker.net cabecera Bienvenido(a), Visitante. Por favor Ingresar o Registrarse
¿Perdiste tu email de activación?.


 


+  Foro de elhacker.net
|-+  Programacin
| |-+  Ingeniera Inversa (Moderadores: Shaddy, karmany, .:UND3R:.)
| | |-+  Alguien capaz de Avanzar o hechar una mano????
0 Usuarios y 1 Visitante están viendo este tema.
Páginas: [1] 2 Ir Abajo Respuesta Imprimir
Autor Tema: Alguien capaz de Avanzar o hechar una mano????  (Leído 3,045 veces)
xivan25

Desconectado Desconectado

Mensajes: 58


Ver Perfil
Alguien capaz de Avanzar o hechar una mano????
« en: 26 Marzo 2013, 00:07 »

Aqui el programa a dejar full de manera que deje copiar la traduccion de Source code: https://www.dropbox.com/s/edmag4vj6p8qhkt/DeluxDemo.zip

Aqui la imagen:  https://www.dropbox.com/s/5cw66z360d4o1dk/PROGRAMA%20DELUXE%20A%20HACKEAR.jpg

Aqui el offset al que ataco sin mucho exito... :-[ :-[ :-[   
Código:
offset:004D0c0F
En línea

Flamer


Desconectado Desconectado

Mensajes: 586


crack, crack y mas crack...


Ver Perfil
Re: Alguien capaz de Avanzar o hechar una mano????
« Respuesta #1 en: 26 Marzo 2013, 04:08 »

aqui no se regalan pescados se ensea apescar   :silbar:

foro.elhacker.net/ingenieria_inversa/faq_iquesteres_nuevo-t345798.0.html


y toma aqui esta tu caa en piesa a pescar por aqui

saludos
En línea

Por Que Temes A La Muerte Si Una Eternidad Estubistes Muerto Ya...
tincopasan


Desconectado Desconectado

Mensajes: 426


Ver Perfil
Re: Alguien capaz de Avanzar o hechar una mano????
« Respuesta #2 en: 26 Marzo 2013, 05:06 »

para empezar deberas decir hasta donde has llegado, que limitaciones tiene, adems de la que pedis? tiene opcin de registro? lo vi y es un delphi, probaste analizarlo con dede o IDR que es mejor? No creo que alguien quiera hacer todo el trabajo por t, como dice flamer este foro pretende ayudar no hacer todo el trabajo. Para colmo tiene toda la pinta de ser DEMO, o sea no tiene las funciones faltantes implementadas.
« Última modificación: 26 Marzo 2013, 05:14 por tincopasan » En línea

xivan25

Desconectado Desconectado

Mensajes: 58


Ver Perfil
Re: Alguien capaz de Avanzar o hechar una mano????
« Respuesta #3 en: 26 Marzo 2013, 11:54 »

Hola ya se que no se regalan pescados,ya e hecho muchos crackmes con olly y tengo algo de experiencia,pero parece que no la suficiente la siguiente instruccion que e encontrado es esta:
Código:
OFFSET: 004C0E04      B8 D8104C00   MOV EAX,DeLuxDEM.004C10D8                ;  ASCII " ,ADODB.CursorTypeEnum.adOpenStatic, ADODB.LockTypeEnum.adLockReadOnly, (int)ADODB.CommandTypeEnum.adCmdText);"

Parece ser que es la encargada de evitar que permita hacer copy y paste en la traduccion del source en Deluxe,pero de momento no tengo suficiente abilidad para romper esa seguridad pero seguire intentandolo,y cuando lo logre compartire ese programa con su crack con todo el mundo para que puedan hacer uso de el,no todos podemos permitirnos gastar 300 en un programa,ademas sera una gran aportacion para todos aquellos que trabajais con codigos fuente para traducirlo a golpe de click a otro lenguaje
En línea

xivan25

Desconectado Desconectado

Mensajes: 58


Ver Perfil
Re: Alguien capaz de Avanzar o hechar una mano????
« Respuesta #4 en: 26 Marzo 2013, 11:58 »

Tambien esta limitado a 200 lineas de codigo,tambien se que esta diseado con: Borland Delphi 4.0 - 5.0
En línea

MCKSys Argentina
Colaborador
***
Desconectado Desconectado

Mensajes: 2.385


Divirte crackeando, que para eso estamos!


Ver Perfil
Re: Alguien capaz de Avanzar o hechar una mano????
« Respuesta #5 en: 26 Marzo 2013, 12:54 »

Si esta en delphi, usa IDR.

La linea que has puesto no dice nada. ADODB es para acceder a bases de datos.
En línea

MCKSys Argentina

"Si piensas que algo est bien slo porque todo el mundo lo cree, no ests pensando."

xivan25

Desconectado Desconectado

Mensajes: 58


Ver Perfil
Re: Alguien capaz de Avanzar o hechar una mano????
« Respuesta #6 en: 26 Marzo 2013, 13:05 »

gracias por responder,e intentado descargar IDR pero me dice cannot initialize
En línea

apuromafo


Desconectado Desconectado

Mensajes: 1.085


Ver Perfil WWW
Re: Alguien capaz de Avanzar o hechar una mano????
« Respuesta #7 en: 26 Marzo 2013, 18:01 »

gracias por responder,e intentado descargar IDR pero me dice cannot initialize
http://kpnc.org/idr32/en/

luego que se descarga tienes que cargar las firmas

La otra idea es usar dede, pexplorer de heaventools

ahora bien, digamos esto
hay eventos en delphi, intenta practicar y conocerlos antes de seguir editando variables en los form.

creo que si realmente encuentras todos los form, y logras asociar a los eventos como tal, no deberias tener mayores problemas, ya sea de importar los labels o bien de confirmar lo que ves...


saludos Apuromafo
En línea

Apuromafo
tincopasan


Desconectado Desconectado

Mensajes: 426


Ver Perfil
Re: Alguien capaz de Avanzar o hechar una mano????
« Respuesta #8 en: 26 Marzo 2013, 20:00 »

bien, si tienes algo de experiencia comienza como dijiste buscando las strings references como por ejemplo la de 200 lines, entonces en esa parte de cdigo vers
004DD9FA  |.  8138 C8000000 CMP DWORD PTR DS:[EAX],0C8       200
004DDA00     /7F 3C         JG SHORT DeLuxdem.004DDA3E            salta si es mayor
podras cambiarla por
004DD9FA      8138 A0860100 CMP DWORD PTR DS:[EAX],186A0     hace la conversin para ver si te alcanza
004DDA16  |.  8138 C8000000 CMP DWORD PTR DS:[EAX],0C8
004DDA1C     /75 11         JNZ SHORT DeLuxdem.004DDA2F             salta si es igual  
podras cambiarla por
004DDA1C     /EB 11         JMP SHORT DeLuxdem.004DDA2F      saltara siempre
quiz si vas paso a paso podrs resolverlo, tengo mucho laburo pero apenas pueda miro lo de la funcin de copiar, si es que no la has resuelto.
me olvide que la imagen que pusiste del mensaje de copiar es una constante y es la que copia al portapapeles, habra que pasar en esas lneas la variable del texto seleccionado, que no est implementado en la funcin.
« Última modificación: 26 Marzo 2013, 21:21 por tincopasan » En línea

xivan25

Desconectado Desconectado

Mensajes: 58


Ver Perfil
Re: Alguien capaz de Avanzar o hechar una mano????
« Respuesta #9 en: 26 Marzo 2013, 21:53 »

Hola gracias por vuestras respuestas,tengo un nuevo avance aqui esta el offset donde dice que de 200 Lineas no pasa en version demo (004EC6F8) la linea de codigo es la siguiente:
Código:
004EC6F8  |.  BA FCCB4E00   MOV EDX,DeLuxDEM.004ECBFC                ;  ASCII "Only the first 200 lines will be displayed in the Demonstration edition."


Lo malo es que no le encuentro cerca los saltos condicionales JMP,JNZ,JE... JMP  hay pero esta como a unas 8 o 10 lineas arriba   :-[ :-[ :-[
En línea

xivan25

Desconectado Desconectado

Mensajes: 58


Ver Perfil
Re: Alguien capaz de Avanzar o hechar una mano????
« Respuesta #10 en: 27 Marzo 2013, 01:23 »

Esto se complica un poco...a comparancia de los Crackmes que uno se los devora como si fueran Chetos  :xD :xD es la primera vez que me enfrento a este tipo de proteccion que no deja copiar  :( :(
En línea

xivan25

Desconectado Desconectado

Mensajes: 58


Ver Perfil
Re: Alguien capaz de Avanzar o hechar una mano????
« Respuesta #11 en: 27 Marzo 2013, 02:30 »

Hola aqui aporto una lista con todos los Strings conseguidos del Deluxe con el Win32 Dasm:
Código:
String Resource ID=65280: "Field '%s' cannot be modified"
 String Resource ID=65500: "Assertion failed"
 String Resource ID=65519: "Application Error"
 String Resource ID=65535: "Invalid numeric input"
"                              "
"              "
"            On"
"          end"
"          end>"
"          item"
"        "
"        left = "
"        procedure FormCreate( "
"        top = 10"
"      "
"      parameters = <"
"     "
"     { Code generation option "
"     AdoDB, Db, DBTables, ExtCtrls;"
"     private"
"     public"
"    "
"    // Module level (private) "
"    begin"
"    end"
"    end;"
"    Index : integer;"
"    object "
"    On"
"    Procedure Gosub"
"   "
"   // ----------------- End loading "
"   // Delux : Load controls into "
"   // Global or Public procs"
"   // Load controls into arrays"
"   end;"
"   height = 200"
"   left = 100"
"   QStdCtrls, Qmenus, Qextctrls, "
"   StdCtrls, menus, extctrls, "
"   SysUtils, Classes, QGraphics, "
"   T"
"   top = 100"
"   width = 250"
"   Windows, Messages, SysUtils, "
"  {"
"  A problem occurred on line - "
"  ADOHostfrm : TADOHostfrm;"
"  Application.CreateForm( T"
"  Application.Initialize;"
"  Application.Run;"
"  end"
"  End;"
"  end;"
"  Forms,"
"  height = 100"
"  left = 200"
"  object "
"  On"
"  Oncreate = FormCreate"
"  Private"
"  private"
"  public"
"  QForms,"
"  TADOHostfrm = class(TDataModule)"
"  TO"
"  top = 200"
"  width = 200"
"' '"
" ) do begin"
" );"
" ** A problem occurred with this "
" ,ADODB.CursorTypeEnum.adOpenStatic, "
" : "
" : array of "
" : T"
" : TDatamodule }"
" : TO"
" := "
" := ("
" := T"
" := TO"
" + ("
" + 1"
" = "
" = ( "
" = class(TDataModule)"
" = class(TForm)"
" = class(TObject)"
" = Class(TObject)"
" = record"
" -> "
" > ( "
" A problem occurred on line - "
" AMPM"
" Analysing "
" AND "
" ASC"
" at "
"' at "
" By Delux (c) on "
" Created ADOHost.pas/ADOHost.dfm"
" denyshare"
" DESC"
" do begin"
" Done "
" Done ADOHost.pas"
" Done code part. Lines - "
" Done DAO analysis. Lines - "
" Done form part, %d controls found"
" Done form."
" Form "
" in '"
" like "
" name "
" not found"
"' not found"
"' not found."
" not found</font>"
" not recognised"
" A"
" of"
" read Get"
" Recoding "
" Standard version does not translate "
" stdcall; external "
" to "
" will map to "
" Write F"
" Write Set"
" \W/"
" '
 ,./?;:`"<>[]{}-=\+|()%@&^$#!~*"
" EADOError9J"
" EExternal @"
" EOleErrorPE"
" EOverflowē@"
" TDLparams$"
" TDockZonẽ"
" TErrorRec"
" TExprData"
" TExprNode0"
" THintInfo@"
" TIntConstUtHM HMH t"
" TParaNodeSVQڋӋ "
" TStmtInfo "
" TUndoNodeL"
"
_RecordsetD6J"
"
EBitsError A"
"
EListError A"
"
EMenuError,C"
"
EReadErrorA"
"
String@"
"
TDLOptions4"
"
TExceptRec"
"
TFieldInfo "
"
TSearchRecX"
" EFilerErrorA"
" EFOpenErrorhA"
" EInOutErrorH@"
" EWin32Errorh@"
" EWriteErrorpA"
" TBufferList"
" TFileFormat"
" TGlyphCacheDE"
" TLookupList4G"
" TOvcIntlSupSVWtɶڋ(kO"
" TStringItem"
" TThreadList A"
"
OleVarianth@"
" EEditorError@"
" ENoResultSet@"
" EOleSysError@"
" EOutOfMemory@"
" EResNotFound@"
" EStreamError@"
" tagEXCEPINFO "
" TBDECallback@"
" TButtonGlyph@"
" TFontCharset"
" TOvcUserData@"
" TSessionList@"
" Variant@"
"
TVariantList"
"
EConvertError0@"
"
EFCreateErrorA"
"
TBlobByteData"
""
""
""
""
""
""
"" >"
"">Project file ...</a>"
"$$"
"$$comment"
"$$end"
"$$pascal"
"$A"
"$D"
"%%"
"%%%d"
"%%%-d"
"%-2.2d"
"%-20.20s  %-18s"
"%-20.20s  %-20.20s %-8.8s"
"%-3.3d"
"%d: %s"
"%i%: Editor paragraph. Tab."
"%s            %s "
"%s         end"
"%s         object %s : %s"
"%s        %s "
"%s     %s "
"%s     end"
"%s     object %s : %s"
"%s  %s "
"%s  end"
"%s  left = 10"
"%s  object %s : %s"
"%s  top = 10"
"%s (%s)"
"%s : array[%d..%d] of %s;   // "
"%s in line %d not recognised."
"%s%3.3d"
"%s%s,"
"%s%s:"%s";"
"%s.%s"
"%s..%s,"
"%s: %s"
"%s:"
"%s:%s"
"%s;%s"
"%s[%d]"
"%s[%s],"
"%s_%d"
"%s="
"%s=%s"
"%sdataset = %s"
"%sdatasource = %s"
"%send"
"%sleft = %s"
"%smenu=mainmenu1"
"%sobject %s : TPageControl"
"%sobject %s: %s"
"%sobject %s: TDataSource"
"%sobject dbnav%-2.2d: TDBNavigator"
"%sobject mainmenu1: TMainmenu"
"%stop = %s"
"( self )"
"( self)"
"( self, "
"(%s%s%s%s%2:s)"
"(%s)"
"(+D"
"(Sender : TObject )"
") = ("
") then begin"
") then F"
") then"
")-("
")) then break;"
"));"
").name) - 2;"
").name, Index, 3));"
").Value := "
"').Value := "
")->"
"*** Can't find file "
"*.*"
"*.dlx"
"*.frm;*.bas;*.cls;*.dsr"
"*.htm"
"*.vbp;*.mak"
", "", "", 0"
",'' );"
", sizeof("
",H"
"..."
"...\"
".\:"
".bas"
".bat"
".bin"
".Close;"
".cls"
".com"
".commandtext := "
".commandtext := ''"
".commandtype := cmdText;"
".connection := "
".connection := ADOHostfrm."
".connection := Not_Given;"
".connectionstring := '"
".connectionstring := 'Provider=Microsoft.Jet.O"
".count-1 do begin"
".create(self);"
".create;"
".Create;"
".create;"
".cursortype := "
".cursortype := ctUnknown;"
".Destroy;"
".dfm"
".dlx"
".dpr"
".dsr"
".exe"
".executeoptions := "
".executeoptions := eoAsynchFetch;"
".Fields.FieldByName("
".Fields.FieldByName('"
".Fields["
".Fields[x].Value := "
".FormCreate( Sender : TObject "
".free;"
".frm"
".frx"
".htm"
".locktype := "
".locktype := ltUnknown;"
".mak"
".open;"
".options := "
".pas"
".pas'"
".pif"
".recordset!"
".rs"
".vbp"
".wmf"
".xfm"
"// "
"// DB code not translated"
"// Delux added code to get index."
"// in which case the '>' below "
"// It may be necessary to change "
"// It will not be translated correctly "
"// Macro failed "
"// This file has been translated "
"// THIS IS THE Demonstration EDITION "
"// this line caused a problem "
"// This object was Static Sub "
"// Translated from : "
"// Translated SELECT clause"
"// VB static"
"// WARNING : Delux cannot tell "
"// WARNING : This procedure contains "
"/delux-hs.hlp"
"/N"
":mm"
":mm:ss"
"; // "
"; // static sub object"
";P<uÐSV؋C<tS8sƉC<tS8"
"@"
"@E"
"[%s]"
"[0]"
"[dl_k]"
"[Y]Í@"
"[Y]USVWE
֋E"
"[YY]3ÐxuO"
"\...\"
"\classmapP.bin"
"\classmapPL.bin"
"\D5keywords.txt"
"\DATABASES\%s"
"\DATABASES\%s\DB INFO"
"\DATABASES\%s\DB OPEN"
"\deluxrc.ini"
"\DRIVERS\%s\DB OPEN"
"\images\"
"\images\dl_logbanner.jpg"><p>"
"\samples"
"\VBKeyWords.txt"
"\VBkeywords.txt"
"] := "
"] of "
"].Value := "
""
"`GA"
"{$else if "
"{$else}"
"{$endif}"
"{$ifdef "
"{$R *.dfm}"
"{$R *.DFM}"
"{$R *.xfm}"
"L"
"YL"
"F"
"lr oSVbN8B"
"E"
"@"
""
"uËSV;s(t3C,qC(tӋQL"
""
"ËuU3UhF"
"D$@"
" C"
" {2"
"#N-"
"L"
"</a><br>"
"</b><br>"
"</body></html>"
"</font>"
"<a href=""
"<br>"
"<font color="black" size=2>"
"<font color="gray" size=2>"
"<font color="green" size=2>"
"<font color="green" size=2><b>"
"<font color="maroon" size=2>"
"<font color="navy" size=2>"
"<font color="navy" size=2><b>"
"<font color="navy" size=3><b>"
"<font color="Red"><b>This is the "
"<font color="Red"><b>You may view "
"<font color="red">Can't open file "
"<font color="red">Source file "
"<font face="Arial" size=3 color="black">"
"<html><body bgcolor="white" leftmargin=30>"
"<img src=""
"<Primary>"
"<RD"
"""
"t;PdtJI:HHu@LB ÐSVW<$؉S`"
""
"B"
"@"
""
"9C"
"0C"
"0adobjects"
"0daobjects"
"0default"
"0Lexical"
"0standardfns"
"0statements"
"0tabletypes"
"0types"
"C"
""
"1234567890ABCDEFGHIJKLMNOPQRSTUVWXYZ"
"1Ʌt-Rf;
t f;Jtf;Jtf;Jt"
"1M]yC"
"""
"3ÐUtff]"
"3ZYYdhjM"
"3ZYYdhRH"
"4@"
"8C"
"a ӯ>"
"*7Q"
"A/P"
"H"
"ÐUVWMUU+UU}"
"J"
"AAA"
"AAAA"
"access"
"activeconnectionname"
"add"
"adodc"
"ADOHost"
"ADOHost.frm"
"ADOHost.pas"
"ADOHostfrm"
"ADOHostfrm."
"JA"
"alias"
"All"
"allevent.txt"
"AM/PM"
"AMPM "
"AMPM"
"ANALYSIS"
"and"
"AND"
"t"
"t"
"append"
"append( "
"array ["
"array of "
"ASC"
"ASCENDING"
"assignfile( "
"attribute"
"AttributeSet"
"AUTO_UPDATE"
"aV
4k"
"AVG"
"y˕C"
"y˕C"
"bas"
"begin"
"beginproperty"
"BIGINFO"
"binary"
"Bitmap"
"bluedot.jpg"
"bmp"
"Boolean"
"break;"
"BUTTON"
"byref"
"Byte"
"byval"
"C++ Exception"
"Calculated"
"call"
"Cancelled by operator."
"Can't create directory "
"Can't find project"
"Can't open dsx file "
"Can't seek in dsx file "
"caption = "
"case "
"case"
"CAUTION"
"CDROM"
"checkbox"
"CJH"
"Class "
"Class map data imported."
"Class map data loaded."
"Class of "
"class"
"class_initialize"
"class_terminate"
"classmapP.bin"
"Close"
"close"
"Close;"
"CLOSEDFOLDER"
"closefile( "
"cls"
"Cls"
"cls"
"cls."
"cmdStoredProc"
"CoAddRefServerProcess"
"CoCreateInstanceEx"
"CODE"
"code.jpg"
"CoGetObjectContext"
"CoInitializeEx"
"COLUMN%d"
"COLUMN_NAME"
"columnheaders"
"comctl32.dll"
"command"
"CommandList"
"commandname"
"commandtext"
"CommandText"
"commandtype"
"commdlg_FindReplace"
"commdlg_help"
"connect"
"connection"
"connectionname"
"connectionsource"
"connectionstring"
"const"
"CONSTANT"
"Constructor Create;"
"constructor T"
"constructor"
"contents"
"Control Panel\International"
"control"
"ControlData"
"ControlOfs%.8X%.8X"
"CoReleaseServerProcess"
"CoResumeClassObjects"
"CoSuspendClassObjects"
"Couldn't import the Map file '"
"Couldn't load the Map file '"
"COUNT"
"count"
"COUNT(*)"
"create"
"create,"
"createdynaset"
"createsnapshot"
"Creating ADOhost form"
"Creating ADOhost.pas"
"ctDynamic"
"ctStatic"
"Currency"
"CURRENTFOLDER"
"cursortype"
"d:\delux\vb codes\"
"DF"
"Data Source="
"data"
"data"
"data"
"Data"
"database"
"datafield"
"datamember"
"datamodule"
"Datamodule"
"dataset"
"datasource  = "
"datasource"
"Datasource="
"datasrc"
"datatype"
"Date"
"DATE"
"DateTime"
"DAY"
"DbiExit"
"DbiInitFn"
"dbnav%-2.2d"
"dbopendynaset"
"ddd"
"dddd, MMMM dd, yyyy"
"debug"
"declare"
"DEFAULT DRIVER"
"Default"
"defbool"
"defbyte"
"defcur"
"defdate"
"defdbl"
"defint"
"deflng"
"defobj"
"defsng"
"defstr"
"defvar"
"Delphi Component"
"Delphi Picture"
"Delphi%.8X"
"Delux - Run log"
"Delux : "
"Delux : Classmap - "
"Delux : Open Project Failed"
"Delux : Processing Failure"
"Delux : Project file : "
"Delux : Source file : "
"Delux : Static procedure module "
"Delux can't find "
"Delux can't find eventprm.txt"
"Delux Demonstration"
"Delux Recoder : DEMONSTRATION"
"Delux Recoder : Pro Edition"
"DeLux"
"Delux"
"delux\"
"DeLuxLog.htm"
"Demo Pro Edition"
"DESC"
"DESCENDING"
"designer"
"DesignerData"
"Destructor Destroy; override;"
"destructor T"
"destructor"
"dim"
"direction"
"DISPLAY"
"DISTINCT"
"DL."
"dl_k"
"dll"
"DLLEXITFUNCTION"
"DLLEXITFUNCTION2"
"DLLINITFUNCTION"
"DLLPATH"
"Done analysis pass."
"Done code generation -"
"Done DAO analysis -"
"DONEOK"
"dosome"
"Double"
"dTL"
"Duplicate name - "
"DVCLAL"
"dynaset"
""
"*A"
",h"
"$8O"
""
"EAbort8@"
"EAbstractError@"
"EAccessViolation@"
"each"
"ËM"
"EAssertionFailed@"
"EClassNotFoundA"
"EComponentError
A"
"c3ҋEf#g"
"EDatabaseError4G"
"EDBEngineErrorI"
"EDuplicateCommandL"
"eeee"
"EExternalException"
"EInvalidFixedFontUj"
"EInvalidGraphicA"
"EInvalidGraphicOperation@"
"EInvalidLineOrColЇL"
"EInvalidLineOrPara0L"
"EInvalidOperationP A"
"EInvalidPointerx@"
"EJPEGS؋˲pA"
"else begin"
"else if ("
"else if( "
"else"
"elseif"
"emf"
"emptydot.jpg"
"ENABLE BCD"
"end"
"end."
"end;"
"endif"
"endproperty"
"ENoControllerAssignedL"
"ENoTimersAvailable4L"
"Enter Line Number (1 to "
"enum"
"EnumDisplayMonitors"
""
"EOutOfResources
A"
"q"
"ERegistryExceptionpUL"
"Error parsing line '"
"Error reading line or premature "
"error"
"ERROR"
"EStringListError@"
"ETableNotFoundL"
"ETpsStringResourceErrorLL"
"Event = Procedure"
"Event Read F"
"event"
"Event;"
"eventprm.txt"
"events"
"except"
"exe"
"EXECUTABLE"
"exit"
"exit;"
"q rO"
"false"
"FALSE"
"false"
"false"
"False"
"fHandle"
"field"
"FIELD"
"File : "
"FILE NAME="
"File not found"
"file"
"FileEditStyle"
"FileVariable"
"finalization"
"Finished everything."
"FlatSB_EnableScrollBar"
"FlatSB_GetScrollInfo"
"FlatSB_GetScrollPos"
"FlatSB_GetScrollProp"
"FlatSB_GetScrollRange"
"FlatSB_SetScrollInfo"
"FlatSB_SetScrollPos"
"FlatSB_SetScrollProp"
"FlatSB_SetScrollRange"
"FlatSB_ShowScrollBar"
"Float"
"FOOTER"
"for "
"for dl_k := 0 to "
"for"
"for"
"FOR"
"Form"
"form"
"form"
"form"
"Form"
"form"
"form_load"
"FPUMaskValue"
"freefile"
"frm"
"frminvoicedisplay"
"FROM"
"ftunknown"
"function "
"function"
"Get"
"get"
"GETDATE"
"GetDiskFreeSpaceExA"
"GetLongPathNameA"
"GetMonitorInfo"
"GetMonitorInfoA"
"GetMonitorInfoW"
"GetObjectContext"
"GetSystemMetrics"
"ggg"
"Global subs"
"global"
"Go to Line Number"
"gosub"
"Gosub"
"gosub"
"goto"
"greendot.jpg"
"grid"
"GROUP"
"halt;"
"HARD"
"HAVING"
"HEADER"
"HN@"
"HOUR"
"IA"
"ico"
"iCurrDigits"
"iCurrency"
"IDAPI32.DLL"
"if ("
"If Assigned(F"
"IgnoreFontProperty"
"A"
"B N"
"Image"
"IMM32.DLL"
"ImmGetCompositionStringA"
"ImmGetContext"
"ImmGetConversionStatus"
"ImmIsIME"
"ImmNotifyIME"
"ImmReleaseContext"
"ImmSetCompositionFontA"
"ImmSetCompositionWindow"
"ImmSetConversionStatus"
"ImmSetOpenStatus"
"implementation"
"Index := length((sender as "
"Index := StrToInt(copy((sender "
"index"
"INDEX_NAME"
"iNegCurr"
"INFO"
"inherited;"
"InitCommonControlsEx"
"initialization"
"InitializeFlatSB"
"input"
"integer"
"Integer"
"integer"
"Integer"
"interface"
"intl"
"IsControl"
"iTLZero"
"IUnknown"
"j)DO"
"jGO"
"jdEO"
"jpeg"
"jpg"
"JumpID("","%s")"
"kernel32.dll"
"L,J"
"label"
"label"
"Label"
"label"
"last height"
"last left"
"last project %1.1d"
"last top"
"last width"
"lastopenpath"
"layout text"
"LCID"
"left"
"Left"
"len"
"let"
"LIBLDRMUX"
"Library "
"LIKE"
"line"
"LISTBOX"
"load"
"Loading mapping data ..."
"local"
"Long"
"longint"
"Lookup"
"loop"
"LOWER"
"lset"
"m/d/yy"
"Magellan MSWHEEL"
"MAINICON"
"Mainmenu1"
"MAPOVER"
"Margin"
"MAX"
"MDICLIENT"
"mdiform"
"menu"
"Message"
"method->"
"methods"
"MIN"
"MINUTE"
"ML"
"MM/dd/yy"
"MMM"
"mmmm d, yyyy"
"MMSDASQL"
"MMSDASQL.1"
"Mode="
"Module subs"
"module"
"MonitorFromPoint"
"MonitorFromRect"
"MonitorFromWindow"
"MONTH"
"MouseZ"
"Move( "
"MSH_SCROLL_LINES_MSG"
"MSH_WHEELSUPPORT_MSG"
"MSWHEEL_ROLLMSG"
"MTS CONTEXT OBJECT"
"mtxex.dll"
"name"
"name"
"Name"
"NETWORK"
"new"
"newclass"
"NEWCODE"
"newcode.jpg"
"newDname"
"newVBname"
"next"
"nil"
"no mapping for method-> "
"Not Enough Memory"
"not used"
"not"
"NOT"
"nothing"
"Null"
"NULL"
"NULL"
"NULL"
"Null"
"@ u"
"F"
"H"
"object "
"object ADOHostfrm : TADOHostfrm"
"Object"
"object"
"
C"
"OLD_"
"ole32.dll"
"OleCreateFontIndirect"
"OleCreatePictureIndirect"
"OleCreatePropertyFrame"
"OleLoadPicture"
"olepro32.dll"
"MA"
"Oncreate = FormCreate"
"Only the first 200 lines will "
"@"
"open"
"open"
"Open"
"open"
"opendatabase"
"OPENFOLDER"
"openrecordset"
"optional"
"OPTIONS"
"ORDER"
"ORDINAL_POSITION"
"ORLINECURSOR"
"ORMARKERS"
"ORPHEUS3_STRINGS_ENGLISH"
"output"
"OvcController1"
"OVCSRMGR_STRINGS"
"Owner"
"PARADOX"
"Param"
"parameters"
"PASSWORD"
"Password="
"PATH"
"pC"
"PixelsPerInch"
"PLAN"
"preserve"
"PRIMARY_KEY"
"print"
"Private subs"
"private"
"procedure "
"procedure T"
"Program "
"Project Logfile for : "
"properties"
"Property "
"property"
"property/method("
"Public subs"
"public"
"put"
"query"
"raiseevent"
"RAM"
"random"
"RDSServer.DataFactory"
"read"
"read( "
"readln( "
"readwrite"
"realname"
"recents"
"RECODE"
"recordset"
"recordsettype"
"RecordsetType"
"recordsettype"
"recordsource"
"reddot.jpg"
"redim"
"refresh"
"RegisterAutomation"
"rem"
"repeat"
"Required"
"reset( "
"resume"
"return"
"rewrite( "
"RRDSServer.DataFactory"
"rset"
"S"
"SAO"
"SءqO"
"S؋VQ"
"S؋@"
"SCtcdO"
"Sغ"
"SڋJt JtJr#"
""
"s1159"
"s2359"
"SafeRef"
"SBLEFT"
"SBLEFTDIS"
"SBLEFTDN"
"SBRIGHT"
"SBRIGHTDIS"
"SBRIGHTDN"
"scalemode"
"sCountry"
"sCurrency"
"sDate"
"Search string '"
"SECOND"
"select"
"SELECT"
"self"
"Set"
"set"
"setlength( "
"ShortCutText"
"Single"
"single-file"
"sList"
"sLongDate"
"SMALLDONE"
"smalldone.jpg"
"SMBuffer"
"snapshot"
"Software\Borland\Database Engine"
"Software\Borland\Delphi\Locales"
"SOFTWARE\Borland\Delphi\RTL"
"Something went wrong on line "
"Something went wrong while processing "
"sql"
"SQL.Strings = ("
"sql.text"
"squaredot.jpg"
"sShortDate"
"sstab"
"STANDARD"
"Start analysis pass -"
"Start code generation -"
"Start DAO analysis -"
"Started on : "
"startup"
"Static module "
"static"
"static"
"static"
"static"
"static"
"STATIC"
"step"
"sThousand"
"stop"
"STR0"
"String"
"string"
"String"
"string*"
"stringarray"
"Strings"
"sTTime"
"sub"
"SUBSTRING"
"SUM"
"SV"
"SV؋"
"SV؋)CN^[Ð@NFËUE@@ "
"SV؋&Ћ"
"SV؋7fC^[SV؋#fC^[@"
"SV؋X"
"SV؋t j^[Í@"
"SV3atuO"
"SVQ$3ۋ"$t"j"
"SVW L"
"SVWUQo3$3]@t%;"
"SVW؋J2|"
"SVW؋{tT$@MWT$@ı?DS"
"SVW$w<$"
"SVWU33ɉ$$"
"SVWU3ɉ$$]"
"System\CurrentControlSet\Control\Keyboard "
"T~A"
"T=C"
"tab"
"tabcaption"
"table"
"TableList"
"TabOrder"
"TabSheet"
"TabSheet%-d"
"TabStop"
"TActiveThreadArray"
"TAdapterNotifier@"
"TADO"
"TADOCommand"
"tadoconnection"
"TADOConnection"
"TADODataset"
"tadoquery"
"TADOQuery"
"TADOTable"
"tB"
"TBits` A"
"TClipboardFormatsSVt`ڋ A"
"TColor"
"TConversionFormat "
"TCursor"
"TDatasource"
"TDBNavigator"
"TEdit"
"temprstype"
"TEventDispatch́D$j2"
"Text"
"textbox"
"textfile"
"TextHeight"
"TFieldDescList>"
"TFieldsG"
"The Demo is limited to 200 lines "
"then"
""
"TIDData("
"TIdentMapEntry"
"TIME"
"TLookupListEntry "
"TMainmenu"
"tmainmenu"
"TMonitor@"
"TMousert"
"top left width height scalewidth "
"top"
"Top"
"TPacketAttribute "
"tpagecontrol"
"TPatternManagerSVtڋFPeƄ"
"TRecInfo"
"TResourceManager@"
"TRIM"
"TRIMLEFT"
"TRIMRIGHT"
"true"
"true"
"True"
"try"
"TSQLConnection"
"TSQLDataset"
"TSQLQuery"
"TSQLTable"
"ttab"
"TTabSheet"
"TA"
"txt"
"t@"
"Type '"
"type"
"type"
"Type"
"TYPE"
"#H"
"܄O"
"U,O"
"UE3҉]"
"UUJURR(e3]ÐUSEEXd"
"USVWM]"
"USVW3ɉMډE3UhH"
"UXSVW6"
"U1Puuu A X]"
"U3QQQQQQQQSV3Uh|E"
"UĸSVW3ɉM3UhA"
"UĸSVW3ɉMډE3Uh-C"
"UİSV"
"USVWME]E"
"USVWu }=O"
"USVWu }=O"
"USVWu }=O"
"USEu3URURURURP.؋Em"
"USVEE3UEU]UEKE"
"USVMUȋEPUԋ"
"U3ɉMUE3Uh$>A"
"USV] u=O"
"USVW} u=O"
"USVW3UhB"
"USVWMUU"
"USVW3ɉMUE3UhJAA"
"Uj"
"UQEEg3UhTM"
"UQSVWMst@ "
"UQSVWډEE3UhE"
"UQSVWEE"
"UQSVWE3UhCD"
"UQSVWE3Uhr\E"
"UQSVWM؋uj"
"UQSVWEWEEU "
"US];IO"
"US]=O"
"US]1PPPPPEPP3CPu C]$="
"USVf9u
f8fZ"
"USV؀}"
"USV3"
"USVW} ]=O"
"USVW}=O"
"USVWu]VE PSO"
"UninitializeFlatSB"
"UNION"
"UNIQUE"
"unit "
"unit ADOHost;"
"Unknown class->"
"unknown"
"unknown"
"unknown"
"unknown"
"Unknown"
"UNKNOWNFILE"
"unload"
"UnNamed"
"unquote"
"until ("
"until not ("
"until"
"UPDATE"
"UPPER"
"UseDefault"
"USER ID="
"USER NAME"
"USER32"
"UserID="
"username"
"uses Windows, SysUtils, Classes, "
"uses"
"C"
"v3.07"
"VŖe:"
"Value"
"var "
"var"
"variant"
"Variant"
"vb_name"
"vcltest3.dll"
"version"
"wend"
"WHERE"
"while ("
"while not ("
"while true do begin"
"while"
"who cares"
"WINNLSEnableIME"
"with "
"with"
"withevents"
"wmf"
"WndProcPtr%.8X%.8X"
"write"
"write( "
"writeln( "
"Writing Delphi <a href=""
"www.deluxsoftware.com"
"www.deluxsoftware.com/upgrade.html"
"x B"
"X@"
"X@"
"XiE"
"xB"
"@"
"Y"
"YEAR"
"You cannot copy text in the Demonstration "
"You have changed the mappings. "
"yyyy"
""
""
""
""
""
"zcommtypes"
"zparamdir"
"ZZ"

Alguien tiene idea de que string deberia seguir para atacar atraves del offset en olly dbg??
yo sospecho de este: You cannot copy text in the Demostration Offset=
Código:
004D0C0F


y de estos:
Código:
width= 200     004DA073

top= 200     004DA07D
que opinan?    :xD :xD :xD :xD :xD
En línea

MCKSys Argentina
Colaborador
***
Desconectado Desconectado

Mensajes: 2.385


Divirte crackeando, que para eso estamos!


Ver Perfil
Re: Alguien capaz de Avanzar o hechar una mano????
« Respuesta #12 en: 27 Marzo 2013, 03:27 »

Opino que deberas leer el FAQ y hacer la introduccin a Ollydbg.

No todos los programas se atacan usando strings references.

Necesitas aprender a caminar antes de querer correr.

Saludos!
En línea

MCKSys Argentina

"Si piensas que algo est bien slo porque todo el mundo lo cree, no ests pensando."

tincopasan


Desconectado Desconectado

Mensajes: 426


Ver Perfil
Re: Alguien capaz de Avanzar o hechar una mano????
« Respuesta #13 en: 27 Marzo 2013, 03:38 »

xivan25 no lees? ya te dije como evitar lo de las 200 lineas! parchando los saltos muestra todas las lineas.
En línea

Páginas: [1] 2 Ir Arriba Respuesta Imprimir 

Ir a:  

Powered by SMF 1.1.19 | SMF © 2006-2008, Simple Machines