Go Back   Exetools > General > Community Tools


Thread Tools Display Modes
Old 05-12-2018, 21:51
Coldzer0 Coldzer0 is offline
Join Date: May 2013
Posts: 17
Rept. Given: 7
Rept. Rcvd 12 Times in 6 Posts
Thanks Given: 19
Thanks Rcvd at 63 Times in 14 Posts
Coldzer0 Reputation: 12
Cool IDA Script Function rename for Delphi VCL (x32 - x64)

Hello all

this script will rename all unknown functions to it's real name

like CreateForm , CloseForm , OnButton1Click .. etc

it searchs for sig of Events manager (this one Construct the Functions names and address )

it will works only for Delphi with GUI (components)

the only issue here is it needs to run the file & the file to be unpacked

but if u can get the pattern address on unpacked file on memory it will work fine


i hope it will help reversing Delphi files

Reply With Quote
The Following 11 Users Say Thank You to Coldzer0 For This Useful Post:
demon_da (05-13-2018), dimosdimos (04-25-2019), Dr.FarFar (11-20-2021), emo (05-13-2018), gsaralji (05-13-2018), kienmanowar (05-13-2018), niculaita (05-12-2018), ontryit (05-15-2018), sendersu (05-14-2018), tonyweb (05-13-2018), zeuscane (05-13-2018)

delphi, ida pro, python, reverse engineering

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
[C] Helper function to call arbitrary x86 Delphi functions zeffy Source Code 0 04-13-2018 10:25
IDA script function. Git General Discussion 6 09-24-2014 01:58
tag & rename and ASProtect asterikz General Discussion 0 08-22-2002 01:21

All times are GMT +8. The time now is 20:40.

Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX
( 1998 - 2021 )