#1
|
|||
|
|||
IDA Script Function rename for Delphi VCL (x32 - x64)
Hello all
this script will rename all unknown functions to it's real name like CreateForm , CloseForm , OnButton1Click .. etc it searchs for sig of Events manager (this one Construct the Functions names and address ) it will works only for Delphi with GUI (components) the only issue here is it needs to run the file & the file to be unpacked but if u can get the pattern address on unpacked file on memory it will work fine https://github.com/Coldzer0/IDA-For-Delphi i hope it will help reversing Delphi files Peace |
The Following 12 Users Say Thank You to Coldzer0 For This Useful Post: | ||
demon_da (05-13-2018), dimosdimos (04-25-2019), Dr.FarFar (11-20-2021), emo (05-13-2018), gsaralji (05-13-2018), kienmanowar (05-13-2018), niculaita (05-12-2018), ontryit (05-15-2018), sendersu (05-14-2018), Sir.V65j (11-27-2023), tonyweb (05-13-2018), zeuscane (05-13-2018) |
Tags |
delphi, ida pro, python, reverse engineering |
Thread Tools | |
Display Modes | |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
[C] Helper function to call arbitrary x86 Delphi functions | zeffy | Source Code | 0 | 04-13-2018 10:25 |
IDA script function. | Git | General Discussion | 6 | 09-24-2014 01:58 |
tag & rename and ASProtect | asterikz | General Discussion | 0 | 08-22-2002 01:21 |