Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 01-06-2008, 20:41
Git's Avatar
Git Git is offline
Old Git
 
Join Date: Mar 2002
Location: Torino
Posts: 1,116
Rept. Given: 220
Rept. Rcvd 265 Times in 157 Posts
Thanks Given: 110
Thanks Rcvd at 220 Times in 126 Posts
Git Reputation: 200-299 Git Reputation: 200-299 Git Reputation: 200-299
Dede

I've being searching around trying to clarify what the last version of Dede was and I'm more confused now than when I started.

The latest archive I can find is "DeDe3.50.04.1635.rar", but the versioninfo of the exe inside show it to be Version 3.1.0.1635 and Product Version 3.10b. Exe is dated 12 April 2003 and has size 2217984 bytes. Displays DeDe 3.50.04 in the titlebar.

The latest source code I can find is "DeDe.3.10b.realy.complete.src.zip" 525677 bytes 2004-01-30 and is for build 3.1.0.1534. Latest content file is 7 AUG 2002, so the source is quite a bit earlier than the latest release.

Most current symbol files are VCL7.DSF, D7.DOI from DEC 2002.

Can anybody verify if there are later versions than the above please and if so please post links. Aslo, has anybody worked on using DeDe with exes compiled with later versions of Delphi or CBuilder than D7 or CB6?

Git

Last edited by Git; 01-06-2008 at 20:44. Reason: addition
Reply With Quote
  #2  
Old 01-06-2008, 22:54
melatonin melatonin is offline
Friend
 
Join Date: Aug 2005
Posts: 19
Rept. Given: 1
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 10
Thanks Rcvd at 34 Times in 6 Posts
melatonin Reputation: 0
As far as I know, v3.50.04 build 1635 is the last stock version. I use an updated modified version called DeDeDark by DarkNess0ut which is latest that I know of.

Here is a link for DeDeDark:
Code:
http://www.zshare.net/download/624330643738c7/
Reply With Quote
  #3  
Old 01-07-2008, 03:42
ChupaChu's Avatar
ChupaChu ChupaChu is offline
Friend
 
Join Date: Dec 2007
Posts: 38
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 3 Times in 3 Posts
ChupaChu Reputation: 0
My version of DeDe.exe has md5: fd29e4b6fb8c2f8f5730bf3e993e23a6
You can download it here: h!!p://mihd.net/3ejy7c

It has different filesize than yours, but states the same version infos tough.

The resto of files you mention is same as in Dark edition someone posted.

md5: 21beece783e32d2dd0bd851c5fb6a33c D7.DOI
md5: ffefce997e3cdc13bad1ccee0e986654 VCL7.dsf

I have used This Dede to look at Delphi 10 files and most of the stuff gets recognizes, but there are alot of unknown functions also..

Hope it helps!

BR, ChupaChu!
Reply With Quote
  #4  
Old 01-07-2008, 17:07
Shub-Nigurrath's Avatar
Shub-Nigurrath Shub-Nigurrath is offline
VIP
 
Join Date: Mar 2004
Location: Obscure Kadath
Posts: 971
Rept. Given: 70
Rept. Rcvd 431 Times in 101 Posts
Thanks Given: 83
Thanks Rcvd at 405 Times in 127 Posts
Shub-Nigurrath Reputation: 400-499 Shub-Nigurrath Reputation: 400-499 Shub-Nigurrath Reputation: 400-499 Shub-Nigurrath Reputation: 400-499 Shub-Nigurrath Reputation: 400-499
I did a similar research before and the latest dede version I found was dededark and no updated dsf files..
__________________
Ŝħůb-Ňìĝùŕřaŧħ ₪)
There are only 10 types of people in the world: Those who understand binary, and those who don't
http://www.accessroot.com
Reply With Quote
  #5  
Old 01-07-2008, 20:19
Git's Avatar
Git Git is offline
Old Git
 
Join Date: Mar 2002
Location: Torino
Posts: 1,116
Rept. Given: 220
Rept. Rcvd 265 Times in 157 Posts
Thanks Given: 110
Thanks Rcvd at 220 Times in 126 Posts
Git Reputation: 200-299 Git Reputation: 200-299 Git Reputation: 200-299
DeDe

Thanks for your replies guys.

Melatonin - DeeDark, as far as I can tell, is a binary patch and has not been rebuilt from the source. Most of the changes are to ASCII strings, so I find it hard to believe the claims made for it, but I could be wrong. If I am wrong, it's an extremely clever bit of patching and cave making.

Chupa - I don't know what you have got there. It's a different size as you say so maybe it is a rebuild. If it is a rebuild then later source than 1534 must be available, as 1534 only supports up to Delphi 6.

Shub - we should be able to make our own DSF and DOI files. At least we could make latest VCL7 and D7, but if we make anything later we will have to tell DeDe they are D7 for now.

I think it would not be possible to extend DeDe to work properly with all later Delphi versions, but I would prefer to start with latest source. 1535 is not the latest source because it only supports up to D6. I saw many reference to DeDe 3.50.02.1619 with Source, but all the links were dead. I think that the later D7 supporting source exists but it is possible it may be lost.

Now to try to find DaFixer...

Git
Reply With Quote
  #6  
Old 01-07-2008, 20:49
ChupaChu's Avatar
ChupaChu ChupaChu is offline
Friend
 
Join Date: Dec 2007
Posts: 38
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 3 Times in 3 Posts
ChupaChu Reputation: 0
I don��t know who rebuild it or even when, but i think its latest version, but i am not sure of it.

What��s building Delphi 9 support concerned i never tried to do something like that, but i have an idea.. Maybe one could use IDA sign file for Delphi 9 witch is common for reversing Delphi targets now days.. I just don��t know how to do it..

IMHO you should contact guys like TQN, BUBlic, kongfoo if DaFixier is nowhere to be found, as they all worked with (as mush as i know) Delphi sign files stuff..

IMHO it would be great if DeDe project revives once more, but it will be a lot to do, and without a person with a great persistence, knowledge of Delphi, and a lot of free time I��m afraid it will be impossible..

BR, ChupaChu!

Last edited by ChupaChu; 01-07-2008 at 20:55. Reason: corrected few typos..
Reply With Quote
  #7  
Old 01-07-2008, 21:10
melatonin melatonin is offline
Friend
 
Join Date: Aug 2005
Posts: 19
Rept. Given: 1
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 10
Thanks Rcvd at 34 Times in 6 Posts
melatonin Reputation: 0
Could you post links to where you found dead links to 3.50.02.1619 with source? All I could find were references to v3.50.04.1635 with v3.10b source.

You could make flirt signatures using Flair for IDA I think.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 22:40.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )