View Full Version : DConsoleapplication?
venom925
January 24th, 2005, 23:27
I recently tried to use DeDe to work out a crack me but I came across a small problem. When I hit Process I get "DConsoleapplication compiled with runtime packages found !". Then I get nothing, no forms, no code. So I guess what I'm asking is, is there some sort of anti DeDe code I should look for? I have searched here , google, and dare I say it even Yahoo

All point to nothing. Can anybody offer any help with this?
Formal
January 25th, 2005, 02:02
You get no forms, as the application is Delphi console application - that means it uses the console and it has NO forms. The RTTI is also not available for this kind of application. 'Compiled with runtime packages' means that the VCL it uses is not included in the executable, but is expected to be found in the .dll search path. Can you run the application? If you can, this is an indication that you have those DLL-s (they are with extension .bpl). DeDe is designed to be run upon Delphi GUI Applications, so it might be better to use generic disassembler in this case.
Kayaker
January 25th, 2005, 02:03
Hi
You could check in a hex editor to see if the "TPF0" header is missing from the RCDATA resources.
In Delphi, an Rcdata resource normally begins with "TPF0"
0004E3E8 54 50 46 30 06 54 46 6F 72 6D 31 05 46 6F 72 6D TPF0.TForm1.Form
But this could be changed to 1234.TForm1.Form for example and the app will still run. DeDe of course is looking for "TPF0" and will not recognize the resource.
Also, the PackageInfo structure (which DeDe uses to get its Unit List), can also be modified. The app will run but DeDe misses in its analysis of it.
These little tricks came out a couple of years ago in response to a post about Asprotect. A search for "TPF0" (TPF-zero) will find the pertinent threads, if this is indeed the problem.
Kayaker
Kayaker
January 25th, 2005, 02:12
Quote:
[Originally Posted by Formal]You get no forms, as the application is Delphi console application - that means it uses the console and it has NO forms. DeDe is designed to be run upon Delphi GUI Applications, so it might be better to use generic disassembler in this case. |
Oops, My explanation is apparently not valid in this case then. We posted at the same time, I never picked up on the significance of DConsoleapplication and forms. You learn something new every day. The tricks still could apply with a gui app though.
Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.