Mensajes

Pues eso,¿como podria hacer para que cuando lo ejecuteis con Olly Dbg no este visible en el String references?  Normalmente los programo en VB6

Hola,tenia una duda,la cuestion es en un programa que evita que se copie el texto que muestra,ni pulsando Ctrl+C ni con el raton,y si lo abro desde su origen (donde esta instalado)con Olly y pongo un Breakpoint cuando le doy a play llega un momento que me lleva a una instruccion llamada Leave,como si el programa no quisiera detenerse en el Brelpoint,¿que me aconsejais para saber en que punto da la orden de evitar ser copiado? Gracias.

Me falto ponerle el mensage...jejeje

Hola a todos aqui teneis mi aportacion un Crackme que impide el Copy y paste con las teclas Ctrl+C y Ctrl+V haber si somos capaces de hacer un tutorial de Olly :
http://www.mediafire.com/?x8ewkq710bzl167   

Hola aqui ohs presento un Crackme el cual la proteccion es que no puedes copiar de una caja de texto a otra con las teclas Ctrl+C,Ctrl+V yo ya estoy intentando descifrarlo con Olly Dbg haber si alguien puede y hace un Tute 
Aqui el link de descarga:  http://www.mediafire.com/?x8ewkq710bzl167

hola e empezado otra vez los crackmes para refrexcar ya voy por el 15 con exito hasta el 58 aun me queda por recorrer,namas termine seguire el proyecto,perdon por las molestias.

Perdon por las molestias,me estoy repasando todos los ejercicios de crackmes ya voy por el 15 hasta ahora con exito,hasta el 58 me queda camino,cuando los termine seguire con este proyecto.

Hola aqui aporto una lista con todos los Strings conseguidos del Deluxe con el Win32 Dasm:

Código [Seleccionar] Expandir

String Resource ID=65280: "Field '%s' cannot be modified"
String Resource ID=65500: "Assertion failed"
String Resource ID=65519: "Application Error"
String Resource ID=65535: "Invalid numeric input"
"                              "
"              "
"            On"
"          end"
"          end>"
"          item"
"        "
"        left = "
"        procedure FormCreate( "
"        top = 10"
"      "
"      parameters = <"
"     "
"     { Code generation option "
"     AdoDB, Db, DBTables, ExtCtrls;"
"     private"
"     public"
"    "
"    // Module level (private) "
"    begin"
"    end"
"    end;"
"    Index : integer;"
"    object "
"    On"
"    Procedure Gosub"
"   "
"   // ----------------- End loading "
"   // Delux : Load controls into "
"   // Global or Public procs"
"   // Load controls into arrays"
"   end;"
"   height = 200"
"   left = 100"
"   QStdCtrls, Qmenus, Qextctrls, "
"   StdCtrls, menus, extctrls, "
"   SysUtils, Classes, QGraphics, "
"   T"
"   top = 100"
"   width = 250"
"   Windows, Messages, SysUtils, "
"  {"
"  A problem occurred on line - "
"  ADOHostfrm : TADOHostfrm;"
"  Application.CreateForm( T"
"  Application.Initialize;"
"  Application.Run;"
"  end"
"  End;"
"  end;"
"  Forms,"
"  height = 100"
"  left = 200"
"  object "
"  On"
"  Oncreate = FormCreate"
"  Private"
"  private"
"  public"
"  QForms,"
"  TADOHostfrm = class(TDataModule)"
"  TO"
"  top = 200"
"  width = 200"
"' '"
" ) do begin"
" );"
" ** A problem occurred with this "
" ,ADODB.CursorTypeEnum.adOpenStatic, "
" : "
" : array of "
" : T"
" : TDatamodule }"
" : TO"
" := "
" := ("
" := T"
" := TO"
" + ("
" + 1"
" = "
" = ( "
" = class(TDataModule)"
" = class(TForm)"
" = class(TObject)"
" = Class(TObject)"
" = record"
" -> "
" > ( "
" A problem occurred on line - "
" AMPM"
" Analysing "
" AND "
" ASC"
" at "
"' at "
" By Delux (c) on "
" Created ADOHost.pas/ADOHost.dfm"
" denyshare"
" DESC"
" do begin"
" Done "
" Done ADOHost.pas"
" Done code part. Lines - "
" Done DAO analysis. Lines - "
" Done form part, %d controls found"
" Done form."
" Form "
" in '"
" like "
" name "
" not found"
"' not found"
"' not found."
" not found</font>"
" not recognised"
" ÔA"
" of"
" read Get"
" Recoding "
" Standard version does not translate "
" stdcall; external "
" to "
" will map to "
" Write F"
" Write Set"
" \¥ËWн/"
" '
,./?;:`"<>[]{}-=\+|()%@&^$#!~*"
" EADOError‹À¼9J"
" EExternal‹À @"
" EOleError‹ÀP¦E"
" EOverflow‹ÀÄ"@"
" TDLparams$"
" TDockZone‹À̃ÀŒéÿ²"
" TErrorRec"
" TExprData
"
" TExprNode0"
" THintInfo@"
" TIntConst‹ÀU‹ì,,ÒtƒÄðèÁÿÿ‰H‹M‰H‹M‰H,,Òt"
" TParaNode‹ÀSVQ‹Ú‹ð‹Ó‹Æè "
" TStmtInfo"
" TUndoNode‹Àð½L"
"
_RecordsetD6J"
"
EBitsErrorØ A"
"
EListError€ A"
"
EMenuError,íC"
"
EReadErrorA"
"
Stringð@"
"
TDLOptions4"
"
TExceptRec"
"
TFieldInfo"
"
TSearchRecX
"
"EFilerErrorÀA"
"EFOpenErrorhA"
"EInOutErrorH@"
"EWin32Errorh˜@"
"EWriteErrorpA"
"TBufferList"
"TFileFormat"
"TGlyphCacheD,E"
"TLookupList4ãG"
"TOvcIntlSupSVW,,ÒtƒÄðèɶóÿ‹Ú‹ø¾(kO"
"TStringItem"
"TThreadListA"
"
OleVarianth@"
"EEditorError@"
"ENoResultSet@"
"EOleSysError@"
"EOutOfMemory@"
"EResNotFound@"
"EStreamError@"
"tagEXCEPINFO "
"TBDECallback@"
"TButtonGlyph@"
"
TFontCharset
"
"TOvcUserData@"
"TSessionList@"
"Variant@"
"
TVariantList"
"
EConvertError‹À0•@"
"
EFCreateError‹ÀA"
"
TBlobByteData
"
""
"
"
""
""
""
""
"" >"
"">Project file ...</a>"
"$$"
"$$comment"
"$$end"
"$$pascal"
"$A"
"$
D"
"%%"
"%%%d"
"%%%-d"
"%-2.2d"
"%-20.20s  %-18s"
"%-20.20s  %-20.20s %-8.8s"
"%-3.3d"
"%d: %s"
"%i%: Editor paragraph. Tab."
"%s            %s "
"%s         end"
"%s         object %s : %s"
"%s        %s "
"%s     %s "
"%s     end"
"%s     object %s : %s"
"%s  %s "
"%s  end"
"%s  left = 10"
"%s  object %s : %s"
"%s  top = 10"
"%s (%s)"
"%s : array[%d..%d] of %s;   // "
"%s in line %d not recognised."
"%s%3.3d"
"%s%s,"
"%s%s:"%s";"
"%s.%s"
"%s..%s,"
"%s: %s"
"%s:"
"%s:%s"
"%s;%s"
"%s[%d]"
"%s[%s],"
"%s_%d"
"%s="
"%s=%s"
"%sdataset = %s"
"%sdatasource = %s"
"%send"
"%sleft = %s"
"%smenu=mainmenu1"
"%sobject %s : TPageControl"
"%sobject %s: %s"
"%sobject %s: TDataSource"
"%sobject dbnav%-2.2d: TDBNavigator"
"%sobject mainmenu1: TMainmenu"
"%stop = %s"
"( self )"
"( self)"
"( self, "
"(%s%s%s%s%2:s)"
"(%s)"
"(+D"
"(Sender : TObject )"
") = ("
") then begin"
") then F"
") then"
")-("
")) then break;"
"));"
").name) - 2;"
").name, Index, 3));"
").Value := "
"').Value := "
")->"
"*** Can't find file "
"*.*"
"*.dlx"
"*.frm;*.bas;*.cls;*.dsr"
"*.htm"
"*.vbp;*.mak"
", "", "", 0"
",'' );"
", sizeof("
",...H"
"..."
"...\"
".\:"
".bas"
".bat"
".bin"
".Close;"
".cls"
".com"
".commandtext := "
".commandtext := ''"
".commandtype := cmdText;"
".connection := "
".connection := ADOHostfrm."
".connection := Not_Given;"
".connectionstring := '"
".connectionstring := 'Provider=Microsoft.Jet.O"
".count-1 do begin"
".create(self);"
".create;"
".Create;"
".create;"
".cursortype := "
".cursortype := ctUnknown;"
".Destroy;"
".dfm"
".dlx"
".dpr"
".dsr"
".exe"
".executeoptions := "
".executeoptions := eoAsynchFetch;"
".Fields.FieldByName("
".Fields.FieldByName('"
".Fields["
".Fields[x].Value := "
".FormCreate( Sender : TObject "
".free;"
".frm"
".frx"
".htm"
".locktype := "
".locktype := ltUnknown;"
".mak"
".open;"
".options := "
".pas"
".pas'"
".pif"
".recordset!"
".rs"
".vbp"
".wmf"
".xfm"
"// "
"// DB code not translated"
"// Delux added code to get index."
"// in which case the '>' below "
"// It may be necessary to change "
"// It will not be translated correctly "
"// Macro failed "
"// This file has been translated "
"// THIS IS THE Demonstration EDITION "
"// this line caused a problem "
"// This object was Static Sub "
"// Translated from : "
"// Translated SELECT clause"
"// VB static"
"// WARNING : Delux cannot tell "
"// WARNING : This procedure contains "
"/delux-hs.hlp"
"/N"
":mm"
":mm:ss"
"; // "
"; // static sub object"
";P<uèÊøÿÿÐSV‹ò‹Ø‹C<...Àt‹S8ès¨ÿÿ‹Æ‰C<...Àt‹S8è"
"@"
"@¼E"
"[%s]"
"[0]"
"[dl_k]"
"[Y]Í@"
"[Y]ÃU‹ìƒÄôSVW‹ò‰Eüë
‹Ö‹EüèÞ"
"[YY]Ã3ÀЋxuO"
"\...\"
"\classmapP.bin"
"\classmapPL.bin"
"\D5keywords.txt"
"\DATABASES\%s"
"\DATABASES\%s\DB INFO"
"\DATABASES\%s\DB OPEN"
"\deluxrc.ini"
"\DRIVERS\%s\DB OPEN"
"\images\"
"\images\dl_logbanner.jpg"><p>"
"\samples"
"\VBKeyWords.txt"
"\VBkeywords.txt"
"] := "
"] of "
"].Value := "
"ˆ²–±´º¶œ"
"`GA"
"{$else if "
"{$else}"
"{$endif}"
"{$ifdef "
"{$R *.dfm}"
"{$R *.DFM}"
"{$R *.xfm}"
"¸ÚL"
"˜YL"
"'F"
",l,r ,oƒSƒVƒbƒN8B"
""¿E"
",,˜@"
",,²–±´º¶œ"
",,ÉuèãÿÿÿËÀSV‹ò‹Ø;s(t3C,èq'õÿ‹C(...Àt‹Ó‹ÿQL‹"
"‹¶
"
"‹Âè¹ßúÿËÂèuÖúÿÃU‹ì3ÀUháF"
"‹D$÷@"
"¤C"
"€ ø{2¿‹»"
"€#ÕN®-"
"ۖL"
"</a><br>"
"</b><br>"
"</body></html>"
"</font>"
"<a href=""
"<br>"
"<font color="black" size=2>"
"<font color="gray" size=2>"
"<font color="green" size=2>"
"<font color="green" size=2><b>"
"<font color="maroon" size=2>"
"<font color="navy" size=2>"
"<font color="navy" size=2><b>"
"<font color="navy" size=3><b>"
"<font color="Red"><b>This is the "
"<font color="Red"><b>You may view "
"<font color="red">Can't open file "
"<font color="red">Source file "
"<font face="Arial" size=3 color="black">"
"<html><body bgcolor="white" leftmargin=30>"
"<img src=""
"<Primary>"
"<RD"
"±Ì"Áщà"
"...Òt;Pdt‹JŠI:HHu‹@L
B ÐSVWƒÄø‹ñ<$¥¥‹Ø‰S`"
"†"
"°B"
"@"
"²–±´º¶œ"
"9C"
"0äC"
"0adobjects"
"0daobjects"
"0default"
"0Lexical"
"0standardfns"
"0statements"
"0tabletypes"
"0types"
"¼ˆC"
"¼û›ñï,,í"
"1234567890ABCDEFGHIJKLMNOPQRSTUVWXYZ"
"1É...Òt-Rf;
t f;Jtf;Jtf;JtƒÂëäƒÂƒÂƒÂ‰Ñ"
"1M]y×CО'"
"²Í"Áщà"
"3ÀÐU‹ì,,Òtf¸ôÿëf¸óÿ]"
"3ÀZYYd‰h¨jM"
"3ÀZYYd‰hRH"
"4ÿ@"
"8ûC"
"aÓ¯ÍЊ>"
"à*7QçÊϾ"
"A/P"
"à¯H"
"АU‹ìƒÄôVW‰Mø‰Uü‹U+Uø‰Uôƒ}ô"
"àJ"
"AAA"
"AAAA"
"access"
"activeconnectionname"
"add"
"adodc"
"ADOHost"
"ADOHost.frm"
"ADOHost.pas"
"ADOHostfrm"
"ADOHostfrm."
"äJA"
"alias"
"All"
"allevent.txt"
"AM/PM"
"AMPM "
"AMPM"
"ANALYSIS"
"and"
"AND"
"àö¾t¨‹º"
"àö¾t¨‹º"
"append"
"append( "
"array ["
"array of "
"ASC"
"ASCENDING"
"assignfile( "
"attribute"
"AttributeSet"
"AUTO_UPDATE"
"aùVˆ
4Щk"
"AVG"
"áy˜Ë•CПü"
"ây˜Ë•CПü"
"bas"
"begin"
"beginproperty"
"BIGINFO"
"binary"
"Bitmap"
"bluedot.jpg"
"bmp"
"Boolean"
"break;"
"BUTTON"
"byref"
"Byte"
"byval"
"C++ Exception"
"Calculated"
"call"
"Cancelled by operator."
"Can't create directory "
"Can't find project"
"Can't open dsx file "
"Can't seek in dsx file "
"caption = "
"case "
"case"
"CAUTION"
"CDROM"
"checkbox"
"CJH"
"Class "
"Class map data imported."
"Class map data loaded."
"Class of "
"class"
"class_initialize"
"class_terminate"
"classmapP.bin"
"Close"
"close"
"Close;"
"CLOSEDFOLDER"
"closefile( "
"cls"
"Cls"
"cls"
"cls."
"cmdStoredProc"
"CoAddRefServerProcess"
"CoCreateInstanceEx"
"CODE"
"code.jpg"
"CoGetObjectContext"
"CoInitializeEx"
"COLUMN%d"
"COLUMN_NAME"
"columnheaders"
"comctl32.dll"
"command"
"CommandList"
"commandname"
"commandtext"
"CommandText"
"commandtype"
"commdlg_FindReplace"
"commdlg_help"
"connect"
"connection"
"connectionname"
"connectionsource"
"connectionstring"
"const"
"CONSTANT"
"Constructor Create;"
"constructor T"
"constructor"
"contents"
"Control Panel\International"
"control"
"ControlData"
"ControlOfs%.8X%.8X"
"CoReleaseServerProcess"
"CoResumeClassObjects"
"CoSuspendClassObjects"
"Couldn't import the Map file '"
"Couldn't load the Map file '"
"COUNT"
"count"
"COUNT(*)"
"create"
"create,"
"createdynaset"
"createsnapshot"
"Creating ADOhost form"
"Creating ADOhost.pas"
"ctDynamic"
"ctStatic"
"Currency"
"CURRENTFOLDER"
"cursortype"
"d:\delux\vb codes\"
"D"F"
"Data Source="
"data"
"data"
"data"
"Data"
"database"
"datafield"
"datamember"
"datamodule"
"Datamodule"
"dataset"
"datasource  = "
"datasource"
"Datasource="
"datasrc"
"datatype"
"Date"
"DATE"
"DateTime"
"DAY"
"DbiExit"
"DbiInitFn"
"dbnav%-2.2d"
"dbopendynaset"
"ddd"
"dddd, MMMM dd, yyyy"
"debug"
"declare"
"DEFAULT DRIVER"
"Default"
"defbool"
"defbyte"
"defcur"
"defdate"
"defdbl"
"defint"
"deflng"
"defobj"
"defsng"
"defstr"
"defvar"
"Delphi Component"
"Delphi Picture"
"Delphi%.8X"
"Delux - Run log"
"Delux : "
"Delux : Classmap - "
"Delux : Open Project Failed"
"Delux : Processing Failure"
"Delux : Project file : "
"Delux : Source file : "
"Delux : Static procedure module "
"Delux can't find "
"Delux can't find eventprm.txt"
"Delux Demonstration"
"Delux Recoder : DEMONSTRATION"
"Delux Recoder : Pro Edition"
"DeLux"
"Delux"
"delux\"
"DeLuxLog.htm"
"Demo Pro Edition"
"DESC"
"DESCENDING"
"designer"
"DesignerData"
"Destructor Destroy; override;"
"destructor T"
"destructor"
"dim"
"direction"
"DISPLAY"
"DISTINCT"
"DL."
"dl_k"
"dll"
"DLLEXITFUNCTION"
"DLLEXITFUNCTION2"
"DLLINITFUNCTION"
"DLLPATH"
"Done analysis pass."
"Done code generation -"
"Done DAO analysis -"
"DONEOK"
"dosome"
"Double"
"dTL"
"Duplicate name - "
"DVCLAL"
"dynaset"
"ðÿÿÿðëÿÿ"
"è*A"
"é,ñÿh"
"é,,$ñÿ•8úÿÿ¡ðO"
"é‹öÿ
"
"EAbort8@"
"EAbstractError´—@"
"EAccessViolation@"
"each"
"èÃòÿÿËÀ±
èM"
"EAssertionFailed@"
"EClassNotFoundÌA"
"EComponentError"
A"
"écöÿ3Ò‹EüèÉþÿÿèÔföÿè#göÿé­"
"EDatabaseError4ÓG"
"EDBEngineError...I"
"EDuplicateCommand‹À¸†L"
"eeee"
"EExternalException"
"EInvalidFixedFont‹ÀU‹ìj"
"EInvalidGraphic¼‡A"
"EInvalidGraphicOperation@"
"EInvalidLineOrCol‹ÀЇL"
"EInvalidLineOrPara0ˆL"
"EInvalidOperation‹ÀPA"
"EInvalidPointerx"@"
"EJPEG‹ÀS‹Ø‹Ë²
¡p‡A"
"else begin"
"else if ("
"else if( "
"else"
"elseif"
"emf"
"emptydot.jpg"
"ENABLE BCD"
"end"
"end."
"end;"
"endif"
"endproperty"
"ENoControllerAssigned‹Àø...L"
"ENoTimersAvailable4...L"
"Enter Line Number (1 to "
"enum"
"EnumDisplayMonitors"
"èó÷ÿÿ¸
"
"EOutOfResourcesð
A"
"èq¹¦ãѪ±"
"ERegistryExceptionpUL"
"Error parsing line '"
"Error reading line or premature "
"error"
"ERROR"
"EStringListError@"
"ETableNotFound‡L"
"ETpsStringResourceErrorÈLL"
"Event = Procedure"
"Event Read F"
"event"
"Event;"
"eventprm.txt"
"events"
"except"
"exe"
"EXECUTABLE"
"exit"
"exit;"
"éýqòÿ• ýÿÿ¡ìrO"
"false"
"FALSE"
"false"
"false"
"False"
"fHandle"
"field"
"FIELD"
"File : "
"FILE NAME="
"File not found"
"file"
"FileEditStyle"
"FileVariable"
"finalization"
"Finished everything."
"FlatSB_EnableScrollBar"
"FlatSB_GetScrollInfo"
"FlatSB_GetScrollPos"
"FlatSB_GetScrollProp"
"FlatSB_GetScrollRange"
"FlatSB_SetScrollInfo"
"FlatSB_SetScrollPos"
"FlatSB_SetScrollProp"
"FlatSB_SetScrollRange"
"FlatSB_ShowScrollBar"
"Float"
"FOOTER"
"for "
"for dl_k := 0 to "
"for"
"for"
"FOR"
"Form"
"form"
"form"
"form"
"Form"
"form"
"form_load"
"FPUMaskValue"
"freefile"
"frm"
"frminvoicedisplay"
"FROM"
"ftunknown"
"function "
"function"
"Get"
"get"
"GETDATE"
"GetDiskFreeSpaceExA"
"GetLongPathNameA"
"GetMonitorInfo"
"GetMonitorInfoA"
"GetMonitorInfoW"
"GetObjectContext"
"GetSystemMetrics"
"ggg"
"Global subs"
"global"
"Go to Line Number"
"gosub"
"Gosub"
"gosub"
"goto"
"greendot.jpg"
"grid"
"GROUP"
"halt;"
"HARD"
"HAVING"
"HEADER"
"HN@"
"HOUR"
"IA"
"ico"
"iCurrDigits"
"iCurrency"
"IDAPI32.DLL"
"if ("
"If Assigned(F"
"IgnoreFontProperty"
"ÌîA"
"ïìÃB¶®÷ N÷ÂÑ"
"Image"
"IMM32.DLL"
"ImmGetCompositionStringA"
"ImmGetContext"
"ImmGetConversionStatus"
"ImmIsIME"
"ImmNotifyIME"
"ImmReleaseContext"
"ImmSetCompositionFontA"
"ImmSetCompositionWindow"
"ImmSetConversionStatus"
"ImmSetOpenStatus"
"implementation"
"Index := length((sender as "
"Index := StrToInt(copy((sender "
"index"
"INDEX_NAME"
"iNegCurr"
"INFO"
"inherited;"
"InitCommonControlsEx"
"initialization"
"InitializeFlatSB"
"input"
"integer"
"Integer"
"integer"
"Integer"
"interface"
"intl"
"IsControl"
"iTLZero"
"IUnknown"
"j)¹DO"
"j¹ÀGO"
"j¹dEO"
"jpeg"
"jpg"
"JumpID("","%s")"
"kernel32.dll"
"L,J"
"label"
"label"
"Label"
"label"
"last height"
"last left"
"last project %1.1d"
"last top"
"last width"
"lastopenpath"
"layout text"
"LCID"
"left"
"Left"
"len"
"let"
"LIBLDRMUX"
"Library "
"LIKE"
"line"
"LISTBOX"
"load"
"Loading mapping data ..."
"local"
"Long"
"longint"
"Lookup"
"loop"
"LOWER"
"lset"
"m/d/yy"
"Magellan MSWHEEL"
"MAINICON"
"Mainmenu1"
"MAPOVER"
"Margin"
"MAX"
"MDICLIENT"
"mdiform"
"menu"
"Message"
"method->"
"methods"
"MIN"
"MINUTE"
"ML"
"MM/dd/yy"
"MMM"
"mmmm d, yyyy"
"MMSDASQL"
"MMSDASQL.1"
"Mode="
"Module subs"
"module"
"MonitorFromPoint"
"MonitorFromRect"
"MonitorFromWindow"
"MONTH"
"MouseZ"
"Move( "
"MSH_SCROLL_LINES_MSG"
"MSH_WHEELSUPPORT_MSG"
"MSWHEEL_ROLLMSG"
"MTS CONTEXT OBJECT"
"mtxex.dll"
"name"
"name"
"Name"
"NETWORK"
"new"
"newclass"
"NEWCODE"
"newcode.jpg"
"newDname"
"newVBname"
"next"
"nil"
"no mapping for method-> "
"Not Enough Memory"
"not used"
"not"
"NOT"
"nothing"
"Null"
"NULL"
"NULL"
"NULL"
"Null"
"ö@
uè©
"
"ôˆF"
"ØÀH"
"object "
"object ADOHostfrm : TADOHostfrm"
"Object"
"object"
"œ
C"
"OLD_"
"ole32.dll"
"OleCreateFontIndirect"
"OleCreatePictureIndirect"
"OleCreatePropertyFrame"
"OleLoadPicture"
"olepro32.dll"
"ØMA"
"Oncreate = FormCreate"
"Only the first 200 lines will "
"øŒ@"
"open"
"open"
"Open"
"open"
"opendatabase"
"OPENFOLDER"
"openrecordset"
"optional"
"OPTIONS"
"ORDER"
"ORDINAL_POSITION"
"ORLINECURSOR"
"ORMARKERS"
"ORPHEUS3_STRINGS_ENGLISH"
"output"
"OvcController1"
"OVCSRMGR_STRINGS"
"Owner"
"PARADOX"
"Param"
"parameters"
"PASSWORD"
"Password="
"PATH"
"pÏC"
"PixelsPerInch"
"PLAN"
"preserve"
"PRIMARY_KEY"
"print"
"Private subs"
"private"
"procedure "
"procedure T"
"Program "
"Project Logfile for : "
"properties"
"Property "
"property"
"property/method("
"Public subs"
"public"
"put"
"query"
"raiseevent"
"RAM"
"random"
"RDSServer.DataFactory"
"read"
"read( "
"readln( "
"readwrite"
"realname"
"recents"
"RECODE"
"recordset"
"recordsettype"
"RecordsetType"
"recordsettype"
"recordsource"
"reddot.jpg"
"redim"
"refresh"
"RegisterAutomation"
"rem"
"repeat"
"Required"
"reset( "
"resume"
"return"
"rewrite( "
"RRDSServer.DataFactory"
"rset"
"S"
"S¡"AO"
"S‹Ø¡ÀqO"
"S‹Ø‹ÃVQ¹"
"S‹Ø‹ƒ@"
"S‹ØöCt€cý¡d†O"
"S‹ØºØ"
"S‹Ú‹ÐJtJtJƒêrë#¡"
"Š€à"
"s1159"
"s2359"
"SafeRef"
"SBLEFT"
"SBLEFTDIS"
"SBLEFTDN"
"SBRIGHT"
"SBRIGHTDIS"
"SBRIGHTDN"
"scalemode"
"sCountry"
"sCurrency"
"sDate"
"Search string '"
"SECOND"
"select"
"SELECT"
"self"
"Set"
"set"
"setlength( "
"ShortCutText"
"Single"
"single-file"
"sList"
"sLongDate"
"SMALLDONE"
"smalldone.jpg"
"SMBuffer"
"snapshot"
"Software\Borland\Database Engine"
"Software\Borland\Delphi\Locales"
"SOFTWARE\Borland\Delphi\RTL"
"Something went wrong on line "
"Something went wrong while processing "
"sql"
"SQL.Strings = ("
"sql.text"
"squaredot.jpg"
"sShortDate"
"sstab"
"STANDARD"
"Start analysis pass -"
"Start code generation -"
"Start DAO analysis -"
"Started on : "
"startup"
"Static module "
"static"
"static"
"static"
"static"
"static"
"STATIC"
"step"
"sThousand"
"stop"
"STR0"
"String"
"string"
"String"
"string*"
"stringarray"
"Strings"
"sTTime"
"sub"
"SUBSTRING"
"SUM"
"SV‹ðƒê
‹ž¢
"
"SV‹ò‹Ø‹Ãèç"
"SV‹ò‹Ø‹Æè‹)þÿˆCN^[Њ@N'èFþÿËÀU‹ì‹E‹@ü‹@ "
"SV‹ò‹Ø‹Æè§&ùÿ‹Ð‹ÃèÊ"
"SV‹ò‹Ø‹Æè7êÿÿf‰C^[ÃSV‹ò‹Ø‹Æè#êÿÿf‰C^[÷@'è"
"SV‹ò‹Ø‹ÆèÉüÿ‰ƒX"
"SV‹ò‹Ø‹Æèû¿üÿ,,Àt ²
‹Ãèj...þÿ^[Í@"
"SV‹Ø3öèa´öÿ‹tuO"
"SVQˆ$‹ð3Û‹Æè˜ýÿ"$t"j"
"SVW‹ò‹ø‹Çèºÿÿÿ‹ÆèÉôÿë ²
¡œŒL"
"SVW‹øUQ‹o3À‰$3ö‹]@...Ût%ƒ;"
"SVW‹ú‹Ø‹ÇèJ2ôÿ‹ð‰³|"
"SVWÄÀþÿÿ‹ò‹Ø‹{...ÿtT$@‹èMWþÿT$@‹Ä±?èDSþÿë"
"SVWƒÄô‰$‹ø‹wƒ<$"
"SVWUƒÄÐ3Ò3ɉ$‹$‹€²
"
"SVWUƒÄÜ3ɉ$‹$‹]
"
"System\CurrentControlSet\Control\Keyboard "
"T~A"
"T=C"
"tab"
"tabcaption"
"table"
"TableList"
"TabOrder"
"TabSheet"
"TabSheet%-d"
"TabStop"
"TActiveThreadArray"
"TAdapterNotifier@"
"TADO"
"TADOCommand"
"tadoconnection"
"TADOConnection"
"TADODataset"
"tadoquery"
"TADOQuery"
"TADOTable"
"tB"
"TBits‹À`A"
"TClipboardFormats‹ÀSV,,ÒtƒÄðèÆ`þÿ‹Ú‹ð²
¡A"
"
TColor"
"TConversionFormat"
"
TCursor"
"TDatasource"
"TDBNavigator"
"TEdit"
"temprstype"
"TEventDispatchÌD$Èýÿÿéj2"
"Text"
"textbox"
"textfile"
"TextHeight"
"TFieldDescList>"
"TFieldsáG"
"The Demo is limited to 200 lines "
"then"
"þÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿþÿÿÿÿÿÿÿÿÿÿÿÿÿ"
"TIDData("
"TIdentMapEntry"
"TIME"
"TLookupListEntry "
"TMainmenu"
"tmainmenu"
"TMonitor@"
"TMouseŠ€ê
rtëÆ"
"top left width height scalewidth "
"top"
"Top"
"TPacketAttribute "
"tpagecontrol"
"TPatternManagerSV,,ÒtƒÄðè'þÿ‹Ú‹ðFPè•eþÿ‹Æ,,"
"TRecInfo"
"TResourceManager@"
"TRIM"
"TRIMLEFT"
"TRIMRIGHT"
"true"
"true"
"True"
"try"
"TSQLConnection"
"TSQLDataset"
"TSQLQuery"
"TSQLTable"
"ttab"
"TTabSheet"
"TÙA"
"txt"
"tý@"
"Type '"
"type"
"type"
"Type"
"TYPE"
"ü#H"
"Ü,,O"
"U‹ì¡,‰O"
"U‹ì‹E3Ò‰]"
"U‹ì‹UŠJû‹U‹Rü‹R(èeýÿÿ3À]ÐU‹ìƒÄøS‰Eü‹Eü‹Xd...Û"
"U‹ìÄäþÿÿSVW‰Mü‹€]
"
"U‹ìÄè÷ÿÿSVW3ɉè÷ÿÿ‰Mð‹Ú‰Eü3ÀUh³H"
"U‹ìÄXÿÿÿSVW‹€6
"
"U‹ì1ÀPÿuÿuÿu‰‹AÿƒÄX]"
"U‹ì3ÉQQQQQQQQSV‹ò‹Ø3ÀUh|¬E"
"U‹ìƒÄ¸SVW3ɉM¸‹ò‹Ø3ÀUh³×A"
"U‹ìƒÄ¸SVW3ɉM¸‹Ú‰Eü3ÀUh-¾C"
"U‹ìƒÄ°SV‹˜¾
"
"U‹ìƒÄÄSVW‰Mø‰Eü‹]‹Eü‹€¶
"
"U‹ìƒÄðSVW‹u‹}€=í†O"
"U‹ìƒÄðSVW‹u‹}€=ì†O"
"U‹ìƒÄðSVW‹u‹}€=î†O"
"U‹ìƒÄèS‹E...Àu3ÀUðRUôRUøRUüRPè.Ûÿÿ‹Ø‹Eü÷mø"
"U‹ìƒÄìSV‰Eü‹E‹3À‰Uø‰Eô‹Uø‹]ôš‰Uì‰EðëK‹E"
"U‹ìƒÄÌSV‰Mø‰Uü‹È‹Eü‹PÁâ‰UÔ‹Ý"
"U‹ìƒÄô3ɉMô‰Uø‰Eü3ÀUh$>A"
"U‹ìƒÄÔSV‹]‹u€=é†O"
"U‹ìƒÄÔSVW‹}‹u€=ï†O"
"U‹ìƒÄøSVW‹Ú3ÀUh¯ôB"
"U‹ìƒÄØSVW‰Mø‰Uü‹U
"
"U‹ìƒÄôSVW3ɉMô‰Uø‰Eü3ÀUhJAA"
"U‹ìj"
"U‹ìQ‰Eü‹Eüè™gòÿ3ÀUhTÚM"
"U‹ìQS‹ØVW‹ú‰Müƒÿ
‹st‹Ç@"
"U‹ìQSVW‹Ú‰Eü‹EüèÔøÿÿ3ÀUhÌéE"
"U‹ìQSVW‰Eü‹Eü‹˜¢
"
"U‹ìQSVW‰Eü3ÀUhºCD"
"U‹ìQSVW‰Eü3ÀUhr\E"
"U‹ìQSVW‰Mü‹Ø‹uj"
"U‹ìQSVW²‹EèWÁþÿˆEþ‹E‹U‰Œ
"
"U‹ìS‹];ôIO"
"U‹ìS‹]€=è†O"
"U‹ìS‹]1ÀPPPP‰àPEPPÿ3CPÿuèõþÿÿ¶C‹]ÿ$...="
"U‹ìSV‹ðfƒ9u
‹Æf»Íÿè8ßúÿëfƒ¾Z
"
"U‹ìSV‹ñ‹Ø€}"
"U‹ìSV3ö»
"
"U‹ìSVW‹}‹]€=ê†O"
"U‹ìSVW‹}€=ë†O"
"U‹ìSVW‹u‹]V‹EPS¡ð‡O"
"UninitializeFlatSB"
"UNION"
"UNIQUE"
"unit "
"unit ADOHost;"
"Unknown class->"
"unknown"
"unknown"
"unknown"
"unknown"
"Unknown"
"UNKNOWNFILE"
"unload"
"UnNamed"
"unquote"
"until ("
"until not ("
"until"
"UPDATE"
"UPPER"
"UseDefault"
"USER ID="
"USER NAME"
"USER32"
"UserID="
"username"
"uses Windows, SysUtils, Classes, "
"uses"
"üžC"
"v3.07"
"VÅ–½£eИ:"
"Value"
"var "
"var"
"variant"
"Variant"
"vb_name"
"vcltest3.dll"
"version"
"wend"
"WHERE"
"while ("
"while not ("
"while true do begin"
"while"
"who cares"
"WINNLSEnableIME"
"with "
"with"
"withevents"
"wmf"
"WndProcPtr%.8X%.8X"
"write"
"write( "
"writeln( "
"Writing Delphi <a href=""
"www.deluxsoftware.com"
"www.deluxsoftware.com/upgrade.html"
"x B"
"X'@"
"X@"
"XiE"
"xõB"
"ÿ@"
"Yé‹À"
"YEAR"
"You cannot copy text in the Demonstration "
"You have changed the mappings. "
"yyyy"
"ýÿÿÿ"
"ÿÿÿÿ"
"ÿÿÿÿ
"
"ÿÿÿÿ"
"ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ"
"zcommtypes"
"zparamdir"
"ZZ"


Alguien tiene idea de que string deberia seguir para atacar atraves del offset en olly dbg??
yo sospecho de este: You cannot copy text in the Demostration Offset=

Código [Seleccionar] Expandir

004D0C0F

y de estos:

Código [Seleccionar] Expandir

width= 200     004DA073

top= 200     004DA07D
¿que opinan?   

Esto se complica un poco...a comparancia de los Crackmes que uno se los devora como si fueran Chetos  es la primera vez que me enfrento a este tipo de proteccion que no deja copiar 

Hola gracias por vuestras respuestas,tengo un nuevo avance aqui esta el offset donde dice que de 200 Lineas no pasa en version demo (004EC6F8) la linea de codigo es la siguiente:

Código [Seleccionar] Expandir

004EC6F8  |.  BA FCCB4E00   MOV EDX,DeLuxDEM.004ECBFC                ;  ASCII "Only the first 200 lines will be displayed in the Demonstration edition."



Lo malo es que no le encuentro cerca los saltos condicionales JMP,JNZ,JE... JMP  hay pero esta como a unas 8 o 10 lineas arriba