Log in

View Full Version : Help with RCData


b3ie
June 7th, 2004, 15:15
Hi
I have a software that i want to try to fully reverse engineer. I'm totaly newbie and guess i'll need atleast a year to be able to do that. I have searched and read, but I havent found anything that can help me. It is a delphi application. I dont quite understand everything i read, but I do my best. Anyway when i try to open it in a Resource Editor all i get in the RCData area is a binary dump (I think its a binary dump?). I want to make it work so that when i open a the RCData in a resource editor I can see the options and change them. This software actually needs a dongle, and I have a clone of the dongle, so some other guy patched it to work with the cloned dongle. The file is upx'd so I know I have to unpack it first, but it is the unpacked version I have the problem with. Could anyone help me?

dELTA
June 7th, 2004, 15:25
Quote:
I want to make it work so that when i open a the RCData in a resource editor I can see the options and change them

And exactly what "options" would that be?

Btw, luckily for you, external links are disabled in this forum... Don't post links to commercial software here!

b3ie
June 8th, 2004, 09:28
Quote:
[Originally Posted by dELTA]And exactly what "options" would that be?

Btw, luckily for you, external links are disabled in this forum... Don't post links to commercial software here!

Sorry for posting the link, how can I post the software then, or am I not allowed to do that either. I think I'm going to read the rules once again before posting anything else. Anyway I am not sure if its a binary dump or a hex dump. I hope I can still get some help !

b3ie
June 8th, 2004, 09:57
I hope I'm not breaking any rules if I post a screenshot (didnt find them to read) , if I am, just warn me and I will remove it right away. Anyway this is how it looks in Resource Hacker:

b3ie
June 8th, 2004, 10:00
Since I couldnt upload both files I am making a new reply (this is taken from another software). Heres how it should be in Resource Hacker:

+SplAj
June 9th, 2004, 05:58
change text from Unregistered to Registered.... hmm not quite that simple and effective.


Search for 'DaFixer' and 'DeDe' in goooooooooogle and you will find all you need.

eg http://www.woodmann.com/fravia/dafix_t1.htm

dELTA
June 9th, 2004, 19:55
Yep, that's a typical Borland/Delphi form resource in your dump, they don't use standard Windows resources for their GUIs, so you'll have to use special tools to edit them, like the one mentioned by +SplAj above for example. Just don't be too sure it will suffice with a simple edit of the resources to "solve your problem"...

b3ie
June 10th, 2004, 18:30
Actually the to screenshots I uploaded are from the same software, but the first screenshot is a small update of the software, nothing big. The second screenshot is the previous version. I dont need to make it register, that is already done. What I want is to disable some of the functionality (illegal), but keep the legal. I managed to do it with the prevouse version with just a resource editor. Now I want to use the updated version but I have to do everything again with the resource editor which wouldnt be too bad if I actually managed to get access. I tried DeDe, it worked on the old version, but on this version it just stops responding and exits. I have tried many protectors finders (PEiD, etc...) but they doesnt find anything. What can I do?