Go Back   EXETOOLS FORUM > General > Community Tools


Thread Tools Display Modes
Old 05-12-2018, 21:51
Coldzer0 Coldzer0 is offline
Join Date: May 2013
Posts: 13
Rept. Given: 7
Rept. Rcvd 6 Times in 4 Posts
Thanks Given: 15
Thanks Rcvd at 16 Times in 6 Posts
Coldzer0 Reputation: 6
Cool IDA Script Function rename for Delphi VCL (x32 - x64)

Hello all

this script will rename all unknown functions to it's real name

like CreateForm , CloseForm , OnButton1Click .. etc

it searchs for sig of Events manager (this one Construct the Functions names and address )

it will works only for Delphi with GUI (components)

the only issue here is it needs to run the file & the file to be unpacked

but if u can get the pattern address on unpacked file on memory it will work fine


i hope it will help reversing Delphi files

Reply With Quote
The Following 9 Users Say Thank You to Coldzer0 For This Useful Post:
demon_da (05-13-2018), emo (05-13-2018), gsaralji (05-13-2018), kienmanowar (05-13-2018), niculaita (05-12-2018), ontryit (05-15-2018), sendersu (05-14-2018), tonyweb (05-13-2018), zeuscane (05-13-2018)

delphi, ida pro, python, reverse engineering

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

All times are GMT +8. The time now is 15:20.

Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX