DarkDe4.exe是DEDE 3.50.4的修改版(超強版:P) by DarkNess0ut
01.修改了Title和ClassName "DeDe"->"DarK",絕大部分的Anti檢測都沒有用了
02.DIY原DEDE,使得可以反匯編得到非標準程序的Forms格式和Procedures的事件(^_^)
03.直接反匯編功能的選項,原DEDE就提供了
"When this is checked DeDe will try to load the target and will read some valueable
information from the new process memory that will be used later on.
I do recommend this option to be ALWAYS checked! If it is not,DeDe will work little faster,
but you will not have global var references, no unit inforamati on, DOI engine will work no
more than 40% of its potential and many more *bad* things."
Caption = 'Dump extra data and search for obj/prop references'
04.增加對特殊處理過的PACKAGEINFO的Uint List的顯示,設定GetSectionIndexByRVA默認返回值是-1or2
選項在Option->configuration->Preferences->General->
Not Special Program And PACKAGEINFO,No Warn Saving
選擇,將提供缺省功能;
不選,則增加對PACKAGEINFO的搜索功能和GetSectionIndexByRVA函數的默認返回值=2.
(通常應該采用缺省模式,當反匯編有錯誤或PackageInfo有錯時,嘗試使用)
原有的"Do not allow report to be saved in existing folder"功能,繼續保留,借雞生蛋而已:)
使用原有english.ini的話,
選項將顯示"Do not allow report to be saved in existing folder",請自行修改
05.修改原有的"Open With DEDE"的注冊鍵錯誤&BUG,可以使用右鍵運行DEDE反匯編Delphi/BCB
06.去處NAG顯示
07.修復原有Dump Active Process的BUG
可以
使用Shift+Alt+Ctrl+D Dump Process ->Dump.dmp文件
使用Shift+Alt+Ctrl+I Dump Info ->procinf_dmp.txt
08.Enable Dump按鈕(畫蛇添足:P)
09.修復拖放處理程序時,確認對話框的BUG!
10.修復Forms下將DFM保存為RES文件的BUG!
11.Enable Procedures下右鍵的Analize Class功能
12.修復Forms下DFM的"Open With NotePad"功能
13.heXer提供修復反匯編引擎的代碼,修復后,爽歪歪啊:P
主要是解決了反匯編的錯誤