PDA

View Full Version : Full Delphi 6 and Delphi 7 Signature For IDA


TQN
September 14th, 2004, 04:10
Hi all !
I am very glad to say with you: Wow, at the end, I have finished creating the full IDA signatures for Delphi 6 and Delphi 7 (RTL/VCL/BDE/CLX...). I want to share them with all members of our community: Woodmann forum and ExeTools forum.
It take me two weeks to write two IDA plugins, a renew, fast IDB2Sig plugin and a new, very fast LoadMap plugin.
The IDB2SIG plugin I rewrote base on the orginal source code and idea of:
- Quine (quine@blacksun.res.cmu.edu)
- Darko
- IDB2PAT of J.C. Roberts <mercury@abac.com>
Thanks all of you very much. I think all of you will allow me to public the new source code.
The LoadMap plugin I wrote base on the idea of Toshiyuki Tega. It will supports loading and parsing VC++, Borland (Delphi/BC++/CBuilder) and DeDe map files.
And with two plugins, I need only two days to create two signature file for Delphi 6/7. Very fast and convenience. Hereafter, we can use two above plugins to create signature files, load map symbols...
The total size of .PAT files of Delphi 6 is 14.9 MB, of Delphi 7 is 17.2 MB. If you need them (and .bat file, .exc file), you can send a PM to me.
I attached here with two .sig files, two plugins and their source code.
I only wish I will receive many thanks for my hard work.
Hope for your interest !
Best regards,
TQN

TQN
September 14th, 2004, 04:12
The Delphi 6 signature file

TQN
September 14th, 2004, 04:15
The Delphi 7 Signature file

TQN
September 14th, 2004, 04:19
Two plugins and source code

Aimless
September 14th, 2004, 05:41
Aw Crap!

I thought someone was posting links to full version of Delphi 6 and Delphi 7 (looks that way if you read the forum room consolidations at the first page).

Bluurbb!

Have Phun

dELTA
September 14th, 2004, 05:50
Really nice work TQN, thanks! Maybe you should submit the plugin to Datarescue too? They might publish it for you, but just make sure they don't sue you if you don't have a valid IDA license, they can be like that sometimes.

mYeXcKsN
September 14th, 2004, 06:12
nice work! thanks a lot.

Ari Benta
September 14th, 2004, 07:36
nice job dude, i also appreciate the plugins!

monguz
September 14th, 2004, 08:19
very good work TQN !! thanks a lot.
btw. 'The Ida Palace' http://www.sport-und-event.de/backtrace.de is a good plugin /signature collector, just for the case of datarescue don't is your favorite option...
regards monguz

Darren
September 14th, 2004, 16:44
Nice work! TQN

Solomon
September 14th, 2004, 21:01
great work

TQN
September 15th, 2004, 23:29
Thanks all of you !
Thank dELTA and monguz for suggestion. But I afraid Ifak will do not receive my small contribution. I have a story which I would like to retell.
When I public my D6RTL and D7RTL, I received a PM on this forum, sent by sporaw. He say he want to contact me. And he just asked Ilfak Guilfanov to add my signatures to installation package of IDA. Ilfak asked sporaw to contact me and request me permission for this. Then I send a mail to Ilfak, said I willing and glad to public my signature files and share them with IDA users, and consider them as a my small contribution to IDA. Ilfak reply immediately, and ask: Are you a our customer. If you are, send the key file to him. If not, he can not accept my contribution. Then I reply: Sorry, but I am a Vietnamese, and IDA is too expensive in comparison with averagely incomming of all Vietnameses. And if I rich, I can not buy it directly. I was using a free IDA version 4.31, public on Simtel. Ilfak was not reply anymore, and it is the end.
What do you think about this. I think Ilfak was very strong stick with his principle. He think IDA do not need any contributions from geniality mans whose do not have condition to become a right, legal user of IDA.
Sorry for my bad English !
TQN

daxia2002
September 16th, 2004, 00:51
good.

naides
September 16th, 2004, 05:58
yes

dELTA
September 16th, 2004, 10:11
TQN, yeah, I think Ilfak and Pierre are way too anal about the whole thing for their own good... Oh well, their loss.

123112
September 17th, 2004, 11:18
3ks!

JMI
September 17th, 2004, 11:28
One would wonder how Ilfak could complain that you are using a "free" copy he distributes of his software. Anyway TQN, we appreciate your efforts.

Regards,

SHaG
September 20th, 2004, 15:53
Thanks TQN, this one's really useful!

TQN
September 20th, 2004, 22:53
Thanks JMI and SHaG !
SHaG, your OllyScript is always great and number 1 !
Good luck to you. Hope you will have more free times to continue developping OllyScript.
Did you finish your project at work ?
----------------------
To others which already have IDA Pro 4.6, I have compiled two plugins LoadMap and IDB2SIG
with SDK 4.6, and attach binary files (.plw) here.
Regards,
TQN

Silver
September 21st, 2004, 07:51
Exactly what I was after, thanks for your work (and your post in my thread). Can I suggest you put a more noob-friendly description of your tool in the thread? I'd never have guessed your plugin could do what I needed, as I'm not a Delphi coder.

TQN
September 28th, 2004, 03:14
Yesterday, I downloaded the new service pack of MASM32, and manual installing it. After rebuilt the MASM32 lib, suddently I think: Why we not create a MASM32 signature for IDA. Many crackers/coders here and on ExeTools forum uses MASM32 to write keygen, crackme, unpackme... So I create the MASM32 signature immediately, with MASM32.lib and FPU.lib. After 10 minutes, I have finished, and collisions are zero. The size of MASM32.sig is small, about 6K. And I have aplied it with dUP 1.08, found dUP used about 8 functions in MASM32.lib.
Hope you will enjoy with this small signature.
Best regards,
TQN

JMI
September 28th, 2004, 03:36
Another great effort. Thanks again TQN.

Regards,

dELTA
September 28th, 2004, 07:28
Hehe, cool TQN, keep 'em coming.

aka
October 1st, 2004, 12:16
Thank you very much.

aka

verilog_crack
October 4th, 2004, 07:14
It's great but is there any tools that can convert delphi exe file to the form format so that we can change the code and recompile it.
regards

JMI
October 4th, 2004, 12:31
Why not just write the author of the code you want to, err "borrow" and ask them if they won't give their work to you for "free"? That way you won't have to do any hard work of "clicking" on someone's "converter" program.

Regards,

disavowed
October 4th, 2004, 22:02
Quote:
[Originally Posted by verilog_crack]It's great but is there any tools that can convert delphi exe file to the form format so that we can change the code and recompile it.
regards

you don't need the "form format" to change the code
that's the whole point of this website

hkbyest
June 25th, 2007, 07:41
Thank you very much,I really want the Delphi7.sig.
nice work TQN

seven
June 25th, 2007, 11:20
TQN, thanx so much , perfect work .