![]() ![]() Use the DCU Dumper (view dcu2int.txt for more details) to retrieve near to. ![]() Use RVA-to-PhysOffset tool for fast converting physical and RVA addresses.Use the opcode-to-asm tool for translating intel opcode to assembler.View the PE Header of all PE Files and change/edit the sections flags.Note: pas files contains the mentioned above well commented ASM code. You can create a Delphi project folder with all dfm,pas, dpr files.A lot of additional informationon the files.(By default DeDe retrieves only the published methods sources, but you may also process another procedure in a executable if you know the RVA offset using the Tools|Disassemble Proc menu.) All published methods in well commented ASM code with references to strings, imported function calls, classes methods calls, components in the unit, Try-Except and Try-Finally blocks.You will be able to open and edit them with Delphi. DeDe is a very fast application that allows you to analyze executables compiled with Delphi 2,3,4,5,6 Builder,Kylix and Kol and gives you the following: ![]()
0 Comments
Leave a Reply. |