Delphi源码级动态反汇编调试

        OllyDbg是一个动态反 汇编调试工具,由于功能非常强大,常常被黑客用来破解软件。但是一般情况下用它反汇编出来的程序是非常难理解的汇编形式,只有系统api调用部份可以看出函数名称,其它的函数调用都是以地址形式出现,这使我们很难分析程序的功能。经过反复试验,我终于解决了源码级调试这一难题。这样就可以使我们更好的理解delphi程序的执行流程。下面是实现方法。

        比如我们有一个工程是test.dpr,我们可以这样在dos下手工编译dcc32 test.dpr,这样产生的是一个正常的test.exe文件,大小可能是几百K,但是如果我们这样dcc32 -V test.dpr,在看生成的test.exe变成有两三M大小,这时我们再用ollydbg调入看一下,菜单->查看->源码,直接就可以看到源码了,在汇编窗口也可以看到源码,而且在源码窗口也可以正常设置断点。

注意:工程的路径中不能包括汉字,否则看不到源码,delphi类库是开源的,如果想看到系统文件的源码,只要将相应的系统文件加入工程,重新编译就行了。

  • 1
    点赞
  • 1
    收藏
    觉得还不错? 一键收藏
  • 1
    评论
News 26.03.2015 Knowledge base file for Delphi XE3 freely available. 23.03.2015 Knowledge base file for Delphi XE and Delphi XE2 freely available. 16.03.2015 Latest version is available for download. What is IDR? IDR (Interactive Delphi Reconstructor) – a decompiler of executable files (EXE) and dynamic libraries (DLL), written in Delphi and executed in Windows32 environment. The program firstly is intended for the companies, engaged by development of anti-virus software. It can also help programmers to recover lost source code of programs appreciably. The current version of the program can process files (GUI and console applications), compiled by Delphi compilers of versions Delphi2 – Delphi XE3. Final project goal is development of the program capable to restore the most part of initial Delphi source codes from the compiled file but IDR, as well as others Delphi decompilers, cannot do it yet. Nevertheless, IDR is in a status considerably to facilitate such process. In comparison with other well known Delphi decompilers the result of IDR analysis has the greatest completeness and reliability. Moreover interactivity does work with the program comfortable and (we shall not be afraid of this word) pleasant. IDR make static analysis (analyzed file is not loaded to memory and executed) that allows to safely investigate viruses, trojans and other malware applications, those which executing is dangerous or is not desirable. The program does not require any installation activity and does not do any records in Windows registry. Below screenshot of IDR main window is shown. You can find examples of IDR working results on separate page. For detailed acquaintance with opportunities IDR there is a help file in format CHM which can be downloaded on page of download or directly from this link.

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论 1
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值