Section 3 Delphi anti-compilation tool
Reverse engineering has been considered to be technical and special art, need to be familiar with assembly language and debugger. The following Delphi anti-compiler allows anyone to compile most Delphi executables, even with limited technical knowledge.
If you are interested in the Delphi program, I suggest you see a few "anti-compiler":
Ded
DEDE is a very fast program that analyzes Delphi-compiled executables. After the anti-compilation, DEDE will provide the following information:
All target DFM files. You can open and edit them with Delphi;
All published methods for ASM code with good comments, which relate to strings, input function calls, class method calls, unit components, try-except, and try-finally blocks. By default, Dede only obtains the source code for the published method, but if you know the RVA offset by using the Tools | Disassemble Proc menu, you can also handle other processes in the executable.
A large number of additional information.
You can create a folder with the Delphi project with all DFMs, PAS, DPR files. Note: The PAS file contains good annotated ASM code mentioned above. They can't be compiled again!
Revendepro
Revendepro can find almost all structures in the program (class, type, process, etc.) and generate a PASCAL expression, which is written in the form of assembler. Due to certain limits of the assembler, the resulting results cannot be compiled. This anti-compiler source code is available free of charge. Unfortunately, this is the only anti-compiler I can't use - when trying to use it to refract some Delphi executable file, the total prompt is abnormal.
MRIP
This for use file splitters can be found from other files and extract files. MRIP segment more than 100 file formats. For us, the most important thing is that mripper can reflect any Delphi executable. This tool can take all resources from the Delphi application: Cursors, ICons, DFM files, PAS files, and other resources. The PAS file does not include an event process execution. MRIP is a DOS tool.
DFMEXPLORERERER
The following is a description of DFMEXPLORER (including original information):
Load the executable module (Exe / DLL / BPL / DPL) by calling the "LoadLibrary" or "LoadLibraryEx" function of Win32 API.
Look for RCDATA resources through the "EnumResourceName" function of Win32 API.
Loading each discovered DFM block, decoding it and stores in memory as a form of forms (including their name).
In the main window of the program we can visualize all DFMs that load the executable.
Finally, the program can be saved to the DFM selected disk, which is connected to the executable as a binary block (DAT) as a binary block (DAT).
EX2DPR
If you try to relax your project source code, this Delphi engineering source code rescue can save the lost source section. The rescue generates all project forms and data modules with allocated properties and events. The generated event does not have a master program (it is not a contraser), but the code address in the executable file. This tool does not have a gui-it uses the form of command line: 'EXE2DPR [-o] Exefile'. The project source code is created in the current directory. If you want to override any existing files of the current directory, you can use option '-o'.
