Go Back   Exetools > General > Source Code


Thread Tools Display Modes
Old 11-06-2022, 06:30
FireFox FireFox is offline
Join Date: Aug 2019
Posts: 17
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 6
Thanks Rcvd at 22 Times in 11 Posts
FireFox Reputation: 0
Thumbs up Sandsprite VB Decompiler Source Code

This is the Sandsprite VB Decompiler Source Code which used to be on Github but is no longer available.

The original repo used to be at:
but the source code is not available from the past few years.

This is a copy of the FORK from github before it was removed. It is not mine. It was found on the internet.
It is very useful to check this source code to learn about p-code and decompiling VB in general.

Official details from its readme:

VbDec is a free VB6 P-Code Disassembler and debugger.

  • List structs, api, function names and offsets for all Vb6 binaries
  • Generate IDA scripts for functions and structures
  • Determine prototypes for public members
  • Properly disassemble and resolve most common VB6 P-code
  • Powerful search UI for code, funcs, strings, opcodes, and structures.
  • Live debugging of P-Code exes w/ single stepping, breakpoints etc.
  • Live stack display with diffing to highlight changes
  • Data viewer for Variant, Date, Array, etc
  • Memory window displays data for multiple types with click navigation
  • Ability to persistently patch memory, nop instructions
  • Modify stack values and reset EIP in the debugger.
  • Disassembly viewer supports renaming functions, adding comments
  • Click to navigate functions in disasm and esc go back in history
  • Ability to resolve class names from live object pointers in debugger
  • COM aware: dynamically lookup libraries and resolve function names
  • Export disassembly to database
  • Explore VB6 internal structures, calculate offsets
  • Constant pool viewer to manually explore data
  • Can be automated through a plugin framework or Javascript
  • Script editor supports syntax highlighting and basic intellisense.
  • Supports command line execution

Reply With Quote
The Following 8 Users Say Thank You to FireFox For This Useful Post:
bashan (11-20-2022), chessgod101 (11-06-2022), niculaita (11-07-2022), NoneForce (11-06-2022), traf0 (11-07-2022), user_hidden (11-06-2022), wilson bibe (11-06-2022), yoza (11-06-2022)
Old 11-06-2022, 18:40
Zeocrack Zeocrack is offline
Join Date: Sep 2022
Posts: 17
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 54
Thanks Rcvd at 0 Times in 0 Posts
Zeocrack Reputation: 0
Anyone have any Tutorial using VbDec as debugger and decompiler?

Reply With Quote
Old 11-06-2022, 19:56
Join Date: Mar 2017
Posts: 63
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 6
Thanks Rcvd at 70 Times in 35 Posts
JMP-JECXZ Reputation: 0
Youtube playlist
Reply With Quote
The Following User Says Thank You to JMP-JECXZ For This Useful Post:
Zeocrack (11-07-2022)
Old 11-07-2022, 07:05
LordGarfio LordGarfio is offline
Join Date: Jan 2005
Posts: 47
Rept. Given: 7
Rept. Rcvd 2 Times in 2 Posts
Thanks Given: 73
Thanks Rcvd at 46 Times in 17 Posts
LordGarfio Reputation: 2
Semi-VB-Decompiler v0.09 Build 1.0.65 source code by VBGAMER45


Reply With Quote
The Following 2 Users Say Thank You to LordGarfio For This Useful Post:
niculaita (11-07-2022), Zeocrack (11-07-2022)
Old 12-01-2022, 08:46
dzzie dzzie is offline
Join Date: Dec 2022
Posts: 1
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 0
Thanks Rcvd at 0 Times in 0 Posts
dzzie Reputation: 0
I actually do hope to open source the full build some day. I would like to give it time to collect some donations first though.

The initial push on this project was about 8 months full time while I
was unemployed and living out of my bank account.

This fork is maybe a month in. The full tool is completely free. Not a single
feature is held back from the structure dumps, pcode debugger, script automation, command line support, ida scripts etc.

I also continue to publish a bunch of in depth articles and vids on vb reversing

VB6 P-Code Disassembly

Writing a VB6 P-Code Debugger

VB6 P-Code Obfuscation

Binary Reuse of VB6 PCode Functions

Recovery of VB6 function prototypes

It would be cool if this old fork was kept private until I get around to releasing the full thing in my own time though.
Reply With Quote

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On

All times are GMT +8. The time now is 11:31.

Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2022 )