Hi all!
I need lil' help.
I'm not gonna post code or anything like that, just, need advice from guys who seen this kind of a problem.

I have Delphi 6 app (D6), it was packed with AsProtect 1.2.X[New strain], anyway, it's unpacked now. PE sections have been fixed. I can run it and disassemble with W32Dasm with no problems.
But, since it's D6 app, DeDe will save me some time while reversing it. Problem is : DeDe can't disassemble it.
When i choose file and process, it's saying : "it's maybe packed or not Delphi app." Ok, np, i've tried to Dump Active Process when my unpacked program is running, so, ok, it's disassembled. But, no forms or procedures ?! So, i've look at .rsrc section and noticed there is no TPF0 signature before forms. I've added it. DeDe can find only 2 forms (but, not the ones that i need). And finaly seen that whole PackageInfo section is empty!Just 00 bytes in whole section. So, that's why DeDe can't find forms (??), except 2 useless that i dont need.It's maybe some kind of protection, but, i dont know how to 'rebuild' PackageInfo 'buffer' form that app ?!
Btw, if this helps, When i put TPF0 on all forms, i get sometimes ReadStream error ...

I hope someone has some advice or maybe solution for this kind of problems.
Thx.
Btw, sorry for bad english...

You don't like to search the board do you?
search the board you will find some clues about delphi forms.

1) search board

2) use IDA with Delphi6 FLIRT.

both will give you gr8 results.

The TPF0 issue came up recently. I think a manual fix is possible, if long and boring, if you really want DeDe...

Ok, sorry, i've just regged and second later posted this message. So, i'll try to search
thx guys ...

btw, squidge, thx on IDA hint, i didn't knew that there is support for Delphi 6.

Guys! There are no Delphi 6-7 signatures for IDA! Even for IDA 4.3!!!

then make your own. It's not exactly difficult.

Which files should I use to build VCL-sigs?

Whatever files the linker would bundle with the dynamically linked app. These normally end up in ".bpl" so just do all of those for now.

uhm... ever asking that question long ago, and no one replies. sorry, but i think you never doing it, isnt it, squide?

I'm not doing it no, but then again, I don't need to as I've not got a delphi prog I want to hack.