View Single Post
  #1  
Old 05-12-2018, 21:51
Coldzer0 Coldzer0 is offline
Friend
 
Join Date: May 2013
Posts: 16
Rept. Given: 7
Rept. Rcvd 12 Times in 6 Posts
Thanks Given: 17
Thanks Rcvd at 56 Times in 11 Posts
Coldzer0 Reputation: 12
Cool IDA Script Function rename for Delphi VCL (x32 - x64)

Hello all

this script will rename all unknown functions to it's real name

like CreateForm , CloseForm , OnButton1Click .. etc

it searchs for sig of Events manager (this one Construct the Functions names and address )

it will works only for Delphi with GUI (components)

the only issue here is it needs to run the file & the file to be unpacked

but if u can get the pattern address on unpacked file on memory it will work fine


https://github.com/Coldzer0/IDA-For-Delphi

i hope it will help reversing Delphi files

Peace
Reply With Quote
The Following 10 Users Say Thank You to Coldzer0 For This Useful Post:
demon_da (05-13-2018), dimosdimos (04-25-2019), emo (05-13-2018), gsaralji (05-13-2018), kienmanowar (05-13-2018), niculaita (05-12-2018), ontryit (05-15-2018), sendersu (05-14-2018), tonyweb (05-13-2018), zeuscane (05-13-2018)