View Single Post
  #7  
Old 10-02-2015, 04:40
TechLord TechLord is offline
Banned User
 
Join Date: Mar 2005
Location: 10 Steps Ahead of You
Posts: 759
Rept. Given: 384
Rept. Rcvd 247 Times in 112 Posts
Thanks Given: 789
Thanks Rcvd at 2,022 Times in 571 Posts
TechLord Reputation: 200-299 TechLord Reputation: 200-299 TechLord Reputation: 200-299
Thank you Beowulf for the suggestion..

I have intentionally not suggested dnSpy as it sometimes crashes when VB6 executables are involved.
On the other hand, Reflector is rather "mature" in the sense that it has been around for quite a while...

The approach I would suggest here would be to DECOMIPLE the VB6 dll with the VB Decompiler (available on this forum), identify the important areas of interest in the decompiled code, and then note down the RVAs of those portions, so that you can again identify them in the debugger, at runtime.

Place BP on those VAs and then check them out.

Another approach would be to change the "characteristics" of the dll to that of an EXE file and then load and debug it in olly.

Do remember that VB6 uses a"runtime" and hence DIRECTLY debugging it is rather messy, as you would getting a lot of "VM-like code of the runtime...

So, its BEST to DECOMPILE it first using the VB Decompiler before embarking on your quest ...

Good Luck
Reply With Quote
The Following User Says Thank You to TechLord For This Useful Post:
psgama (10-02-2015)