VB6 Tracer presentation by Jurriaan Bremer and Marion Marschalek.Microsoft P-Code Technology (msdn_c7pcode2.asp).Open source Semi-VbDecompiler by vbgamer45 ( home page, source, installer).VB6 IDA script by Reginald Wong ( local copy).VB6 runtime with debug symbols ( local copy, pcode mdb for offsets/disasm/etc).VB Wearing the Inside Out - Richard Marko Eset software ( pdf).General Detection of Internet Worms - VB 2002 ( pdf).DISASSEMBLING VISUAL BASIC APPLICATIONS II - Sanchit Karve ( link,.DISASSEMBLING VISUAL BASIC APPLICATIONS - Sanchit Karve ( link, local copy).VB P-code Information by Mr Silver ( local copy).VISUAL BASIC REVERSED - A decompiling approach - Andrea Geddon ( local copy).Visual Basic Image Internal Structure Format - Alex Ionescu ( local copy).If you want to really get to the core of it take a look at the following resources: In and figured a lot of its inner operations. While these structures are not documented by MS reverse engineers have stepped I am not aware of any vb6 pcode loaders for IDA yet so I would not recommend it for this case. IDA can have a hard time locating everything however the vb.idc by Reginald Wong helps a lot. On form, module and class structures passed into the vb runtimeĪt startup. The program flow is not linear from the entry point but is based VB6 can be compiled to either native or pcode.
So today we are going to cover some resources on reversing VB6. Note I have not virus scanned or tested all of the apps linked to in this page! user beware!
0 kommentar(er)
