Exetools  

Go Back   Exetools > General > Community Tools

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 05-12-2018, 21:51
Coldzer0 Coldzer0 is offline
Friend
 
Join Date: May 2013
Posts: 17
Rept. Given: 7
Rept. Rcvd 12 Times in 6 Posts
Thanks Given: 19
Thanks Rcvd at 64 Times in 14 Posts
Coldzer0 Reputation: 12
Cool IDA Script Function rename for Delphi VCL (x32 - x64)

Hello all

this script will rename all unknown functions to it's real name

like CreateForm , CloseForm , OnButton1Click .. etc

it searchs for sig of Events manager (this one Construct the Functions names and address )

it will works only for Delphi with GUI (components)

the only issue here is it needs to run the file & the file to be unpacked

but if u can get the pattern address on unpacked file on memory it will work fine


https://github.com/Coldzer0/IDA-For-Delphi

i hope it will help reversing Delphi files

Peace
Reply With Quote
The Following 12 Users Say Thank You to Coldzer0 For This Useful Post:
demon_da (05-13-2018), dimosdimos (04-25-2019), Dr.FarFar (11-20-2021), emo (05-13-2018), gsaralji (05-13-2018), kienmanowar (05-13-2018), niculaita (05-12-2018), ontryit (05-15-2018), sendersu (05-14-2018), Sir.V65j (11-27-2023), tonyweb (05-13-2018), zeuscane (05-13-2018)
Reply

Tags
delphi, ida pro, python, reverse engineering

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
[C] Helper function to call arbitrary x86 Delphi functions zeffy Source Code 0 04-13-2018 10:25
IDA script function. Git General Discussion 6 09-24-2014 01:58
tag & rename and ASProtect asterikz General Discussion 0 08-22-2002 01:21


All times are GMT +8. The time now is 16:32.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )