Exetools

Exetools (https://forum.exetools.com/index.php)
-   Community Tools (https://forum.exetools.com/forumdisplay.php?f=47)
-   -   IDA Script Function rename for Delphi VCL (x32 - x64) (https://forum.exetools.com/showthread.php?t=18781)

Coldzer0 05-12-2018 21:51

IDA Script Function rename for Delphi VCL (x32 - x64)
 
Hello all :cool:

this script will rename all unknown functions to it's real name

like CreateForm , CloseForm , OnButton1Click .. etc

it searchs for sig of Events manager (this one Construct the Functions names and address )

it will works only for Delphi with GUI (components)

the only issue here is it needs to run the file & the file to be unpacked :confused:

but if u can get the pattern address on unpacked file on memory it will work fine :D


https://github.com/Coldzer0/IDA-For-Delphi

i hope it will help reversing Delphi files ;)

Peace :rolleyes:


All times are GMT +8. The time now is 19:06.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX