Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   Which tool would use you to crack a Delphi app? (https://forum.exetools.com/showthread.php?t=7896)

beachsun 08-09-2005 01:24

Which tool would use you to crack a Delphi app?
 
I'm trying to crack a Deplhi app, it ask for a serial.
First i want to Jump the check and the app thinks its regged.
Seconldy i want to get the algo and try to make a keygen...

Which tool would you use? IDA? oly?

Thanks Guys

iamritu 08-09-2005 01:32

DeDE
 
of course DEDE would do the job; Its best for Delphi applications

beachsun 08-09-2005 04:33

Thank you, i will try it!!

pluscontrol 08-09-2005 05:00

if your application is compiled with delphi 4 or 5 try "Revendepro" to decompile it

Warren 08-09-2005 05:11

i think DEDE+Ollydbg is the best combination to decompile and debug the DELPHI programms.

beachsun 08-09-2005 21:57

It's Delphi 7.
I've downloaded DeDe 3.50.02.1619, i dont know if its the latest, homepage seems to be down...
I tried Dede and i think it does a great work..., as Warren said i think i will need also to use a debugger like olly.
Now i just need a little more time to continue...

Thank you guys for your help!!

TQN 08-09-2005 22:58

My way with Delphi app:
- Load app with DeDe, export to the .map file to get the VCL event handler addresses.
- Load app in IDA, apply my Delphi Signature and b32vcl.sig.
- Load the exported map above with LoadMap plugin.
- Debug with IDA.
If you wish to debug with OllyDbg, use Mapgen great plugin for IDA of Servil (good job, Servil !) to export the IDA database to .map2 file, and load the .map2 file into OllyDbg with the modify MapConv plugin of Servil.
Sometime, Dede will not be able to decompile the unpacked Delphi app. So you should use "Dump Active Process" function of Dede, or use PE Explorer to decompile the unpacked app, and get the VCL event handle addresses.
As I known, the lastest version of Dede is v3.50.04 build 1635. You can download it from WASM.RU
Regards,
TQN


All times are GMT +8. The time now is 02:08.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX