![]() |
|
#1
|
|||
|
|||
|
Trying to break on a WM_LBUTTONUP within a DELPHI app
Trying to catch a registration dialog so I can RE the keygen algo, but I cannot seem to be able to break on the dialog. It's a Delphi app, and using conventional methods in OllyDBG and/or x64DBG gets me nothing. I've tried hard-code BO in user32.dll and a windows message break point. Anyway, basically just you just load up the open windows handles in OllyDBG or X64DBG and break on the button command. Doesn't work though.
Any ideas? [edit] Tried using IDR and it crashes every single time. Thx Last edited by Stingered; 03-25-2018 at 11:56. |
|
#2
|
||||
|
||||
|
it s a fake delphi app
that was compiled this mode only to deceive reverser
__________________
Decode and Conquer |
| The Following User Says Thank You to niculaita For This Useful Post: | ||
Stingered (03-26-2018) | ||
|
#3
|
|||
|
|||
|
Quote:
https://www.davidesperalta.com/appbuilder/ |
|
#4
|
|||
|
|||
|
Quote:
|
| The Following User Says Thank You to ionioni For This Useful Post: | ||
Stingered (03-26-2018) | ||
|
#5
|
|||
|
|||
|
use IDA open analize and and export a map...
use idr, only open and export a map in x64dbg use (plugin https://github.com/x64dbg/x64dbg/wiki/Plugins) [Download] SwissArmyKnife by Nukem: x64dbg utility for linker map files, diff files, peid/ida signatures, and code signature generation. for import map in normal x64dbg, try to use labels for guide br, Apuromafo |
| The Following User Says Thank You to Apuromafo For This Useful Post: | ||
Stingered (03-30-2018) | ||
|
#6
|
|||
|
|||
|
Quote:
the rest is not required |
|
#7
|
|||
|
|||
|
You should try to locate address of VCL Component's procedure and break there (depend on which one you're looking for). IDA/IDR should be great, but i simply prefer PE Explorer because It's lightweight. Got success with old Delphi versions
__________________
My Personal Blog:http://ltops9.wordpress.com |
| The Following User Says Thank You to Levis For This Useful Post: | ||
Stingered (03-30-2018) | ||
|
#8
|
|||
|
|||
|
IDR has the brilliant feature - shows/locates any control handler routine like a charm.
|
| The Following User Says Thank You to sendersu For This Useful Post: | ||
Stingered (03-30-2018) | ||
![]() |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| why I can't break | zaratustra | General Discussion | 3 | 10-01-2004 17:28 |