提起这个话题，主要是从前不久自己的一次实际dcu逆向编译经历而来的。
题记：f-in-box控件是个delphi下进行flash播放的优秀控件，其能从内存中载入ocx，从内存中载入flash等优秀特性。但是很可惜，网上只能找到3.1.2版本的full source版本。之后版本一直到最新版3.5.3之间都只有破解版存在。full source版本苦等不来，后来看f-in-box控件源码结构也比较简单，只有一个pas文件。正好我们都知道dcu中含有不少pas中的原始结构和类型信息，因此尝试在3.1.2源码的基础上对3.5.3进行逆向编译。至于为何在3.1.2的基础上，不在3.1.2的基础上行不行？这个我可以说的是，即使没有3.1.2，也是可行的，3.1.2的存在只是为中间逆向省去了很多麻烦而已。
下面，就对我在逆向f-in-box dcu的过程中的经验做下总结。 阅读全文…
VGScene speeds the development of all graphical application, providing: a graphical editor integrated in IDE, graphical objects, simplify animation, advanced windows and controls, maximum performance, skinning engine, bitmap effects. VGScene can be used as development tools for SCADA, GIS, CAD and KIOSK applications.
- Powerful vector engine like Adobe Flash or Microsoft WPF
- Fast realtime anti-aliased vector graphics, resolution independent, alpha blending, gradient and special visual filling
- WYSIWYG design-time and run-time designer and property editors
- Advanced GUI engine – window, button, textbox, numberbox, memo, anglebox, list box and much much more
- Advanced skinning engine based on vector graphics styles. Cool exists styles – Dark, Modern, Vista.
- VGScene provides shape primitives for 2D graphics along with a built-in set of brushes, pens, geometries, and transforms
- Advanced animations techniques calculated in background thread. Easy to use, accuracy, minimal CPU usage and automatic FPS correction
- VGScene provides for bitmap effects, however, they are rendered in software. Special effects such as dropshadows and blurring are built in.
- VGScene can be used as development tools for SCADA, GIS, CAD and KIOSK applications
- Path object have SVG, WPF path data format
- Very easy to use and powerful layouts. The child elements are recursively arranged by their parents.
- Layered forms, unicode enabled
- Jpeg, Png, Tiff and Gif format read/write support on Windows and Mac OS X
- Fast thumbnail creation and image processing
- Cross-platform solution available on Microsoft Windows and Apple Mac OS
DXScene is 3D hardware accelerated graphics library Delphi/C++ Builder/Lazarus.
- Hardware accelerated graphics on Windows and Mac OS X
- 3D and 2D graphical editor integrated in IDE
- Powerful 3D layer containing items such as Cube, Sphere, Cone, Plane, Mesh, free Camera and Lights
- Mesh object have WPF mesh data format and 3DS, MD3 file export tool
- Powerful 2D vector engine like Adobe Flash or Microsoft WPF includes high quality shapes and controls like window, label, button, checkbox, textbox and more
- Advanced GUI engine – window, button, textbox, numberbox, memo, anglebox, list box and much much more
- Advanced skinning engine based on vector graphics styles. Cool exists styles – Dark, Modern, Vista.
- DXScene can be used to create hardware accelerated 2D applications with cool animation like CoverFlow, layer and more
- Easy to use time-based animation and transition effects
- Layered windows, Jpeg, Png, Tiff and Gif format read/write support, fast thumbnail creation
- Realtime mode for games and realtime simulations
- DXScene can be used as development tools for SCADA, GIS, CAD and KIOSK applications
- Physics simulation using Newton Game Dynamics
- Cross-platform solution available on Microsoft Windows and Apple Mac OS X
本来这贴在旧blog上已经备份过的，不过由于那个blog所在的服务器归期无望，我还是从新备份一份吧。
在破解用Delphi写的软件时，经常会碰到一些诸如System.@LStrCmp、System.@LStrAddRef之类的函数。实际上它们都是Delphi内部用来处理字符串的过程/函数。这些函数在System里都可以找到。但是它们的参数和返回值有点特别。于是抽空看了一下system.pas。
首先，这些函数名都有一定的格式：
_xStryyy
其中x可以是字符P、L、W。P代表该函数是处理传统Pascal字符串的，L代表该函数是处理长字符串的，W当然就是Unicode了。yyy就是表示函数的实际作用了。比如_PStrCat就是表示传统Pascal字符串的连接函数。大家可以查阅system.pas来验证一下。不过一般不大见到W开头的函数。
下面是经过整理的结果，算是为大家提供一个方便。说明一下，列表不全，但没列出来的函数完全可以见名知意。当然，前提是你看完列表。
另外，需要注意的是，对于在堆栈里的返回值，一般以EBP引用。如果你看到函数调用后下一条语句是MOV xxx,[EBP+yy]，那通常就是保存返回值了。特别是_LStrCopy。 阅读全文…
