----------------------------
- DeDe ver 1.05 by DaFixer -
----------------------------
What is DeDe?
-------------
DeDe is a very fast program that can analize executables compiled with Delphi 3,4,5 and give you the following:
- All dfm files of the target. You will be able to open and edit them with Delphi
- All published methods in well commented ASM code with references to strings, imported function calls, classes methods calls, components in the unit, Try-Except and Try-Finally blocks. By default DeDe retreives only the published methods sources, but you may also process another procedure in a executable if you know the RVA offset using the Tools|Disassemble Proc menu
- A lot of additional information.
- You can create a Delphi project folder with all dfm, pas, dpr files. Note: pas files contains the mentioned above well commented ASM code. They can not be recompiled !
You can also:
- View the PE Header of all PE Files and change/edit the sections flags
- Spy a program for WinAPI calls with the API Spy tool
- Use the opcode-to-asm tool for translating intel opcode to assembler
- Use RVA-to-PhysOffset tool for fast converting physical and RVA addresses
- Use the DCU Dumper (view dcu2int.txt for more details) to retreive near to pascal code of your DCU files
- Use BPL Dumper to see BPL exports and create symbol files to use with DeDe Disassembler
What are DeDe Symbol Files (DSF) ?
----------------------------------
DSF files contain the symbols of the exports from different BPL libraries. DeDe disassemble engine use this symbol files to comment the class members method calls in ASM source it generates. The ideology is very close to the IDA symbol files for VCL, MFC etc.
If you haven't loaded a symbol file for any BPL you'll not get references to calls to this BPL classes!
How to load DSF Files?
----------------------
You can load a DSF file using File|Load Symbol File menu selecting the dsf file. If you want some dsf files to be loaded automaticly each time DeDe is loaded use the View|Configuration menu and from Symbols tab manage the dsf that should be loaded at startup of DeDe. If you want to see the names of exports that are contained in a certain DSF file use the View|Symbols menu.
How to create DSF Files?
------------------------
You can create a DSF files from the BPL Dumber symbols tab. Choose the bpl (note that you should have all required bpl for the selected one, if any) then choose the dsf file name. Before generating you can select what should be done with the export names. You can fix their names and/or parameters. If you do this DeDe will change the default export names from the bpl with more readable ones. After creating the DSF you should load it in order to use it.
Why should I create DSF files?
------------------------------
Because if you deal with a program that uses custom components and you have the components BPLs if you create a DSF for these components DeDe will comment for you all the calls to those comonents. Nice uh? :) Also the creation of DSFs is very fast.
What is this "Show All Found DSF References" check box in the configuration form?
---------------------------------------------------------------------------------
Recognizing of a procedure calls is made by comparing bytes. Sometimes (depending how many DSFs you have loaded) there are more than one procedure with the same byte pattern. In this case DeDe is unable to determine exactly whitch one is called. If you check this option DeDe will show you all references if it finds more than one. If this is unchecked you will see only the first found reference. Note: The search orded is by the order of loaded DSFs and then alphabeticaly by unit name, class name, procedure name.
What is this "String References" option in configuration form?
--------------------------------------------------------------
Normaly programs like W32DASM for example search only for english string references. If you deal with a program that has other language strings then from here you can choose the set of chars DeDe disassemble engine will search string references. Note: You may have invalid referencec if you use the full set #32-#255. Note: delphi programs normaly do not use UNICODE strings and thats why this option is not included in string references configuration.
Can I save the processed target as a project I can later open with DeDe ?
-------------------------------------------------------------------------
Yes there is such an option. In general DeDe is very fast so you may not need this. After saving a project do not try to open it, if the same target is processed in DeDe. You will have problems. If you open a project file you will be able to disassemble and use all DeDe options except one - saving delph project space. If you want to do this you have to reprocess the target again!
Why DeDe says this is not a Delphi program when I am sure it is ?
-----------------------------------------------------------------
1-st make sure the target is not packed or crypted
2-nd if you have unpacked/dumped the target make sure it has a valid entry point and also valid section names. A normal delphi program has these sections: 'CODE', 'DATA', 'BSS', '.idata', '.tls', '.rdata', '.reloc', '.rsrc'. If it is a dll it will also have '.edata' section.
If you are sure the target is OK and it is a delphi program, then you are dealing with one of those delphi programs that are processes somehow to fool DeDe and other similar programs. I'm working over the engine to recognize such stupied tricks that make DeDe to fail (in a different way, exceptions). So I will appreciate if you send me a mail with your target name and problem description.
How can I register ?
--------------------
DeDe is a free software and you have no need to register it neither to crack it :) It has its full functionality!
How can I reach the author?
---------------------------
d_Fixer@hotmail.com
没有合适的资源?快使用搜索试试~ 我知道了~
DeDe+V3.5简体中文版
共39个文件
dsf:9个
doi:7个
lst:5个
4星 · 超过85%的资源 需积分: 10 93 下载量 161 浏览量
2010-09-03
10:47:23
上传
评论
收藏 6.67MB RAR 举报
温馨提示
最好的反编译DELPHI的工具,使用简单,可以反编译出.pas,.dfm文件,虽然反编译的代码基本是汇编级的,但是也能帮助分析,DELPHI做得程序要是不加密,真的很惨,基本界面反编译出来是没有任何问题的,就算代码也能被人看个50%
资源推荐
资源详情
资源评论
收起资源包目录
DeDe+V3.5简体中文版.rar (39个子文件)
dede V1.06b1
classes.lst 77KB
DeDe.exe 597KB
APISPY32.DLL 40KB
Api.lst 81KB
dcu2int.txt 13KB
readme.txt 6KB
DeDe V3.5简体中文版
DeDe.fls 177B
SU.LST 3KB
Dumps
debug.dat 4KB
LANGRES
ChineseGB.ini 12KB
DIY_ENG.ini 13KB
Readme.txt 2KB
Projects
Api.lst 81KB
DSF
DeDe_SDK.rtf 7KB
KOL.dsf 44KB
D7.DOI 43KB
VCL6.dsf 860KB
vcl3.dsf 245KB
d6.doi 46KB
VCL4.dsf 356KB
d4.doi 44KB
d2.doi 9KB
Vcl6_.dsf 866KB
vcl5.dsf 502KB
dede.sdk.v1.1.rar 6KB
DeDe_SDK.pas 7KB
VCL2.dsf 177KB
VCL7.dsf 886KB
d6clx.doi 18KB
D5.DOI 54KB
TObject_VCL4.ini 173B
CLX.dsf 185KB
Vcl6.log 100B
dasm_plgin.dll 127KB
d3.doi 17KB
DeDe.ini 442B
DEDE.exe 1.18MB
Classes.lst 77KB
DEDE.exe.bak 1.18MB
共 39 条
- 1
hujz198418
- 粉丝: 0
- 资源: 1
上传资源 快速赚钱
- 我的内容管理 展开
- 我的资源 快来上传第一个资源
- 我的收益 登录查看自己的收益
- 我的积分 登录查看自己的积分
- 我的C币 登录后查看C币余额
- 我的收藏
- 我的下载
- 下载帮助
安全验证
文档复制为VIP权益,开通VIP直接复制
信息提交成功
- 1
- 2
- 3
前往页