# IDA-For-Delphi

## IDA Python Script to Get All function names from Event Constructor 

# New Update
## Now it supports <b>x64</b>

<img src="images/DE_x64.png">

<br><br>
### + at first IDA didn't recognise it as Delphi file

<img src="images/DE_1.png">

### + now select the local debugger

<img src="images/DE_2.png">

### + then load the script file

<img src="images/DE_3.png">

### + it will load and Stop at EP

<img src="images/DE_4.png">

### + hit the Greeeen button or [F9] :p

<img src="images/DE_5.png">

### + now we have all the Functions named and have a BP [on] 

<img src="images/DE_6.png">

## the only issue here is it needs to run the file & the file to be unpacked :confused:

## but if u can get the pattern address on unpacked file on memory it will work fine .

# Peace