PART I: Prepare
I. Basic tools needed
A.Debug:
-SoftICe 4.05 for 9x, NT --- Very powerful debugging tool,
-Numega SoftICE Driver Suite 2.6 for XP
-Smart Check 603 (601 also): debug for VB (runs well on 9x)
-Quaid Analyzer: debug for DOS
B.Debug add_on:
-BreakICE for SoftICe4.05: find breakpoints
-FrogsICE: create a virtual interrupt that detects softICE softICE does not detect SI ... Typically VK2000 build 10727 -not run on Nt, Xp
-SoftICe tools: SI support tools such as ICE-HIDE, ICE-SET, INT6TEST, TRACEME, UCF 2000
-Icedumpd
Virtual address to file offset: When Si finds the virtual offset, it will help Si find the real offset ...
C. HexEditor: edit hexa file
- HexaWorkShop3.0: edit the hexadecimal file quite strong
- Hacker View 602 (HIEW): very powerful hexa file editor (45% of software wants to crk evenly)
D. DeCompliers: Used to decompile source files like exe, dll to assembly
- WinDeAssembly893: quite powerful tool used to decompile the file (should find the fix to need to use HIEW, because it will add the EDIT menu on the toolbar, we can edit files directly on WDASM)
Attention; To WDASM running fine you need to get the patch file for it as follows:
* .SDR Enable for VB: WD893SDR.exe: help WDASM deassembly to be VB
* .W32Dasm V8.93 Permanent Patch Maker: This patcher will add a button to your W32Dasm CodePatcher screen which will allow you to save your patches directly into the program.
It will also also change the W32Dasm CreateFile call so that you can then edit and save the files while you have them open in W32Dasm.
* .Modifying pro loaded in WDASM: W32D-LaZ.exe: fix for WDASM
* .W32pp: add edit menu, change wallpaper for WDASM
-Including programs written in Delphi should use the following two programs to decompliers: EXE TO DPR, EIRE
-Install Shied decomplier: decomplier for Install Shied
-BorlandC, Turbo Pascal, Vb, VC, Win32Asm, MASm611:: used to create keygen
E. Equally important is the program used to pack, and unpack the soft.
-Procdump32: compression for many file types - suitable for pack files that do not know what pack it is
-DerShrink: use compression for Shrink
-Upx093w: UPX compression
-unpetite: compressed petite
-I5Comp: compressed file.cab
-Install Shied decompressor: Install Shied decompressor
-UnPEprot: compression for PE key
There are many other types of compression, such as ASP, Pklite ... depending on which you find unpacker for the appropriate
