Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   Visual Basic Program patching (https://forum.exetools.com/showthread.php?t=4019)

Shub-Nigurrath 04-22-2004 01:16

Visual Basic Program patching
 
Hi,
I'm managing for the first time a protected program written in VB.

h77p://www.davidco.com/productDetail.php?id=63&IDoption=21

Unfortunately IDA PRO also available in the FTP doesn't disassemble it regularly..

I haven't tried to use OllyDbg, because I wouldn't install the tool (I used a wise unpacker to extract things and IDA would be fine, doing things statically).

Anyone have any idea for this? Is there some files to add to IDA to make it working?

Any help would be appreciated.

sf42 04-22-2004 01:52

Well, you should get Smartcheck from NuMega, it's an invaluable tool for VB debugging.

hxxp://www.compuware.com/products/devpartner/visualbasic.htm

But if you want to try going deeper, CrackZ has some information about cracking p-code.

hxxp://66.98.132.48/crackz/Vb.htm

There's also a nice discussion board about vb decompiling:

hxxp://www.vb-decompiler.com/

Shub-Nigurrath 04-22-2004 17:44

Hi,
Smartcheck isn't anymore downloadable. Any1 could up on the ftp server?

Secondly, In the IDA documentation there's written that it's able to disassemble also Visual Basic progs, but the versions available here are all not able to do so. Much probably the Visual Basic *.d32, *.dll and *.w32 files (and all the others connected) are missing.

Can any1 up those files on the FTP??

sf42 04-22-2004 20:27

Here's a ed2k link to Devpartner 7.10 iso-image:

ed2k://|file|Compuware.Devpartner.Studio.Professional.7.1.0.iso|272893952|AF8DF2449F9F9147A1AD6501EC774E91|/

Sarge 04-22-2004 21:29

IDA and PCODE
 
There's an IDA plugin available that "disassembles" the PCode opcodes, but I don't know how comprehensive it is. If you like, I can dig through my notes and try to find the URL

Sarge

gabri3l 04-23-2004 03:13

For smartcheck go to hxxp://www.ctools.net/index.php?page=tools

sirius 04-23-2004 03:56

an old one, but very useful

http://66.98.132.48/fravia/project8.htm

good luck ;)

N0P 04-23-2004 04:42

Quote:

Originally Posted by Shub-Nigurrath
Hi,
Smartcheck isn't anymore downloadable. Any1 could up on the ftp server?

Secondly, In the IDA documentation there's written that it's able to disassemble also Visual Basic progs, but the versions available here are all not able to do so. Much probably the Visual Basic *.d32, *.dll and *.w32 files (and all the others connected) are missing.

Can any1 up those files on the FTP??

IDA is not primary used fo full VB dissasemblig because there is many differencis in VB code try look at IDA forum > there Ilfak G. talk about it ;)

P.s> sorru for my baad english ...

Shub-Nigurrath 04-23-2004 15:50

Sorry for being so lazy, but can you tell me an URL to that thing directly.
I never used the IDA forum, hence I also do not know where's it. :o

sf42 04-23-2004 21:12

hxzp://www.datarescue.com/ubb/ultimatebb.php

sf42 04-23-2004 21:23

Here's link that should contain a script for IDA which can parse Visual Basic. Unfortunately the download link gives an 404 error... I guess I'm going to mail the author as the script itself is pretty recent, 10/03/2004.

hxxp://mysite.mweb.co.za/residents/zasax99/vb6.htm

c1p8 04-23-2004 22:27

With Emule you can download the 6.2 RC2 version :rolleyes:

ed2k://|file|NUMega_SmartCheck_6.2rc2.exe|21837178|7814B942B52BB508D67F171AE5D4DC40|/

Shub-Nigurrath 04-24-2004 00:32

Unfortunately there are two drawbacks

1. from where I'm P2P is firewalled
2. installing devpartner for a small program would copromise the system (once uninstalled) for nothing !

IDA is great because has no installation, just an xcopy in the java phylosophy.

It seems to disassemble partially correctly, but all the resources as fucked up (gray color) and also I think some of the code that creates dialogs and so on..much probably the only part that IDA dissassembles is some C++ code inside a VB program..duh!?

Also Olly has the same problems (again the same non-setup wonderful feature).... :)

sf42 04-24-2004 03:20

I found the VB6 script for IDA from wasm.ru:

hxxp://www.wasm.ru/tools/20/vb6.zip

WobblyBottom 04-24-2004 14:23

There used to be a group on Yahoo called 'ActxLic' or something like that (witout the quotes). Have a dig around it may still be there. From what I remember it was excellent.


All times are GMT +8. The time now is 08:15.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX