Thread: IDA Script Function rename for Delphi VCL (x32 - x64)
View Single Post
  #1  
Old 05-12-2018, 21:51
Coldzer0 Coldzer0 is offline
Friend
  
Join Date: May 2013
Posts: 17
Rept. Given: 7
Rept. Rcvd 12 Times in 6 Posts
Thanks Given: 19
Thanks Rcvd at 64 Times in 14 Posts
Coldzer0 Reputation: 12
Cool IDA Script Function rename for Delphi VCL (x32 - x64)
Hello all

this script will rename all unknown functions to it's real name

like CreateForm , CloseForm , OnButton1Click .. etc

it searchs for sig of Events manager (this one Construct the Functions names and address )

it will works only for Delphi with GUI (components)

the only issue here is it needs to run the file & the file to be unpacked

but if u can get the pattern address on unpacked file on memory it will work fine

https://github.com/Coldzer0/IDA-For-Delphi

i hope it will help reversing Delphi files

Peace
Reply With Quote
The Following 12 Users Say Thank You to Coldzer0 For This Useful Post:
demon_da (05-13-2018), dimosdimos (04-25-2019), Dr.FarFar (11-20-2021), emo (05-13-2018), gsaralji (05-13-2018), kienmanowar (05-13-2018), niculaita (05-12-2018), ontryit (05-15-2018), sendersu (05-14-2018), Sir.V65j (11-27-2023), tonyweb (05-13-2018), zeuscane (05-13-2018)