Kris kaspersky was very active until his dead in Happy decoding! Originally Posted by phroyt. Originally Posted by sendersu. Tags decompiler , dede , delphi Thread Tools. The time now is Aaron's homepage - Top.
User Name. Remember Me? Mark Forums Read. Thread Tools. ReBirth Family. Join Date: Nov Posts: 79 Rept. Given: 12 Rept. Find all posts by ReBirth. CRC32 Friend. Follow Decompiler Decompiler Web Site. Mit einem Experten sprechen. User Ratings 4. User Reviews Filter Reviews: All. For 0. The Scanner function works well for recursively finding procedures as absolute and relative addressed calls. Next came strings. The procedure here was to search for 25 character or more strings first, then 20 character, 10 character, 6 character, and finally 3 character tedious.
Many zero terminated strings were completely missed, so I'm guessing this is a work in progress. The rest of the strings I marked manually as "sz" type, which was tedious but oddly satisfying. Marking Types: this version of Decompiler seems to not support any other type than character. If I try any other type, the types are saved to the. I'm hoping the 0. Delphi vftables are well documented.
Information for the latest version is available from Embarcadero. Unofficial documentation is available for Delphi see here. The source code for Free Pascal is also useful Github mirror. The first item in a vftable is vmtSelfPtr , which points to the start of the virtual function table. Note that the Delphi compiler aligns vftables to a 4 byte boundary for optimisation. For example, the following VA 0xE1C8 contains the offset 0xE , which is 0x4C ahead of the current location.
As shown in IDA:. This approach can generate false positives, therefore other fields in the vftable are checked for sensible values. On the whole, this software solution is very well equipped for the tasks it is set to to carry out and will surely prove a valuable helper for developers who need to work on a Delphi program.
Interactive Delphi Reconstructor. A powerful utility that is designed to provide programmers and developers a handy means of having EXE and DLL files decompiled on the fly. Interactive Delphi Reconstructor was reviewed by Olivian Puha.
0コメント