PDA

View Full Version : Delphi program crasehes olly and cant see register form in DeDE


gimmee
04-14-2007, 08:27 PM
Hi all

I am trying to reverse a program called EFiLive V4 Eval. It boots up and checks its .ini file for your registration information and if evaluation code and key it starts in Evaluation mode. You can then goto register and put in your details to register and a messagebox pops up good guy or bad guy.

Its Delphi 7. Have dissassembled it with DeDe and also WDasm and exported extra info from DeDe to WDasm.

The trouble I am having is:

1) When loading efilive into olly, olly evnetually crashes with a access violation when executing [00000000], a messagebox saying Don't know how to continue because memory at address [00000000] is not readable.

So I never get to where it loads the info out of the ini file and does the checking.

2) If I run the program byitself without olly it is fine. But I can find no reference to the Registration form in DeDe and thus I am blindly trying to put breakpoints on code to try and break into anywhere around the registration delphi form.

Can someone give me some guidance on this please.

I am using olly 1.10 with the anti debugging plugins.

<-- link edited from post -->

Look forward to any help you can give me on this

Gimmee :):)

Devine9
04-15-2007, 08:38 PM
just a note, visitors will find their way to the software themselves, no need to post the link directly to the trail.

Thanks,

-DR

fileoffset
04-22-2007, 04:35 AM
Have you tried setting the Exceptions tab in the OllyDbg Options to ignore all errors? (check all the checkboxes).

Its probably a try { } finally { } block thats triggering on some kind of parsing error in the ini file.