Extra Resource Protection

[remixtech]

Hello,

I have seen in the help that there is and 'Extra Resource Protection' but i can't find it in the last version ? Is this function ever exist ?

Another question : Is it possible to hide the fact that my application is written in delphi ? Is it possible to make believe that my application was compiled by Visual Studio compiler ? is it credible ?

Thanks a lot,
Rémi

[scorillo7]

Hello,
Another question : Is it possible to hide the fact that my application is written in delphi ? Is it possible to make believe that my application was compiled by Visual Studio compiler ? is it credible ?
Thanks a lot,
Rémi

Enigma has a feature named File analyzer deception from which can be altered some bytes as described in manual:
It provides hiding of protector signature from files analyzers like PEiD.
The Enigma Protector inserts a simple part of code in module entry point that allow to deceive file analyzers.
Name of the protection code section - the name of section in which loader code will be placed. The section name is a string of 8 characters length.
Hide protection code with - type of deception, it defines a code which will be used for analizer deception. Choose compiler type which will be determined in analyzers. If there is not need to use deception, set this option to "None".
Warning, using of "Microsoft Visual C++" deception type can cause unexpected errors for modules written in Visual Basic.


But this can be done until a point.even so protected by this feature when you look at classname of a window will see the real language of programmer.
Sure you can create a your own class but is not productive.
For example :
The native class of a Delphi is TMainForm(Enigma is built in Delphi)
The native class of a Visual Basic window is ThunderFormDC
in other part The Firefox has it's own classname like MozillaWindowClass
This subject can be discused more but is a point to start.

[Majid]

Hi remixtech

I have seen in the help that there is and 'Extra Resource Protection' but i can't find it in the last version ? Is this function ever exist ?

This function exists but in another looking! Open Enigma Protector,Go To PROTECTION FEATURES --> Resources Protection,there you can protect and hide your resources form restorator,reshacker etc.

Is it possible to hide the fact that my application is written in delphi ? Is it possible to make believe that my application was compiled by Visual Studio compiler ? is it credible ?

I think you want to hide delphi from protection analyzers ! Go To PROTECTION FEATURES --> File analyzer deception, in name filed type whatever you want, ".data" is good.no need to change. In "Hide protection code with" choose Microsoft Visual Basic. Then protect your app.
Now analyze it with PEiD , It will tell that your app protection is "Microsoft Visual Basic".

Hope My Answers Help you

[remixtech]

I agree, but it is for the protection code ? If my file is unpacked, we will see that it is compile with Delphi ?

By example :
- In the manifest
- in RCDATA/DVCLAL

Thanks for your answer

[Majid]

If my file is unpacked, we will see that it is compile with Delphi ?

If someone unpack enigma,then He can remove all limitations and protections. Do not think of unpacked file,of course it has no protection and you will see it is compile with Delphi.

I think you want to change Delphi without using enigma,is that right?

[remixtech]

This function exists but in another looking! Open Enigma Protector,Go To PROTECTION FEATURES --> Resources Protection,there you can protect and hide your resources form restorator,reshacker etc.

Hi,

So now, all the resource are encyphering and compressing ?
Just another question, is it possible to hide some name of ressource like RCDATA/DVCLAL (Delphi Visual Component Library Access License). Cause even if i had check the file deception analyser. In one clicke with reshacker i could that there is a RCDATA/DVCLAL, okay it is crypt and i can't read the value.... But it is here...

Thanks for your answer.

[remixtech]

I think you want to change Delphi without using enigma,is that right?

Even with enigma, I can tell you if the file packed is a delphi just in watching ressources name. (like the DVCLAL or the name of the Form)

[Majid]

Is it possible to hide some name of ressource like RCDATA/DVCLAL (Delphi Visual Component Library Access License). Cause even if i had check the file deception analyser. In one clicke with reshacker i could that there is a RCDATA/DVCLAL, okay it is crypt and i can't read the value.... But it is here...

Yes it is there but not readable and editable.It is well protected

But you're right it is better that the resources be in hidden mode.

I think we should wait for Enigma to answer if it is possible or not

[Enigma]

Hi,

Just another question, is it possible to hide some name of ressource like RCDATA/DVCLAL (Delphi Visual Component Library Access License). Cause even if i had check the file deception analyser. In one clicke with reshacker i could that there is a RCDATA/DVCLAL, okay it is crypt and i can't read the value.... But it is here...

No, it is impossible to hide names of resources. I agree that seeing the resource content you may determinate possible compiler.

But, if you are a cracker, what advantages gives you the name of compiler of protected file? I'm sure - just nothing.

[Majid]

Hi Enigma

Yes it is impossible to hide,but I have seen some apps that will do sth like that:

ThinApp,if you create an app portable with it then open it in rehack,you will see no resources, It seems the exe is compressed !

I think remixtech want sth like that