EXETOOLS FORUM  

Go Back   EXETOOLS FORUM > General > Community Tools

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 05-12-2018, 21:51
Coldzer0 Coldzer0 is offline
Friend
 
Join Date: May 2013
Posts: 13
Rept. Given: 7
Rept. Rcvd 6 Times in 4 Posts
Thanks Given: 15
Thanks Rcvd at 16 Times in 6 Posts
Coldzer0 Reputation: 6
Cool IDA Script Function rename for Delphi VCL (x32 - x64)

Hello all

this script will rename all unknown functions to it's real name

like CreateForm , CloseForm , OnButton1Click .. etc

it searchs for sig of Events manager (this one Construct the Functions names and address )

it will works only for Delphi with GUI (components)

the only issue here is it needs to run the file & the file to be unpacked

but if u can get the pattern address on unpacked file on memory it will work fine


https://github.com/Coldzer0/IDA-For-Delphi

i hope it will help reversing Delphi files

Peace
Reply With Quote
The Following 9 Users Say Thank You to Coldzer0 For This Useful Post:
demon_da (05-13-2018), emo (05-13-2018), gsaralji (05-13-2018), kienmanowar (05-13-2018), niculaita (05-12-2018), ontryit (05-15-2018), sendersu (05-14-2018), tonyweb (05-13-2018), zeuscane (05-13-2018)
Reply

Tags
delphi, ida pro, python, reverse engineering

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 15:20.


ICP05004977
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX