Want to Join Us ?

you'll be able to discuss, share and send private messages.


Discussion in 'Tools of the Trade.' started by storm shadow, Feb 9, 2013.

Share This Page

  1. storm shadow

    Techbliss Owner Admin Ida Pro Expert Developer

    DeDe is a very fast program that can analyze executables compiled with Delphi 2,3,4,5 and Builder and give you the following:

    - All dfm files of the target. You will be able to open and edit them with Delphi.
    - All published methods in well commented ASM code with references to strings, imported function calls, classes methods calls, components in the unit, Try-Except and Try-Finally blocks. (By default DeDe retrieves only the published methods sources, but you may also process another procedure in a executable if you know the RVA offset using the Tools|Disassemble Proc menu.)
    - A lot of additional information.
    - You can create a Delphi project folder with all dfm, pas, dpr files. Note: pas files contains the mentioned above well commented ASM code. They can not be recompiled !

    You can also:

    - View the PE Header of all PE Files and change/edit the sections flags.
    - Use the opcode-to-asm tool for translating intel opcode to assembler.
    - Use RVA-to-PhysOffset tool for fast converting physical and RVA addresses.
    - Use the DCU Dumper (view dcu2int.txt for more details) to retrieve near to pascal code of your DCU files.
    - Use BPL(DPL) Dumper to see BPL exports and create symbol files to use with DeDe disassembler.
    - Disassemble a target EXE directly from memory in case of a packed exe.