Visual Basic Program patching
 

Hi,
I'm managing for the first time a protected program written in VB.

h77p://www.davidco.com/productDetail.php?id=63&IDoption=21

Unfortunately IDA PRO also available in the FTP doesn't disassemble it regularly..

I haven't tried to use OllyDbg, because I wouldn't install the tool (I used a wise unpacker to extract things and IDA would be fine, doing things statically).

Anyone have any idea for this? Is there some files to add to IDA to make it working?

Any help would be appreciated.

Well, you should get Smartcheck from NuMega, it's an invaluable tool for VB debugging.

hxxp://www.compuware.com/products/devpartner/visualbasic.htm

But if you want to try going deeper, CrackZ has some information about cracking p-code.

hxxp://66.98.132.48/crackz/Vb.htm

There's also a nice discussion board about vb decompiling:

hxxp://www.vb-decompiler.com/

Hi,
Smartcheck isn't anymore downloadable. Any1 could up on the ftp server?

Secondly, In the IDA documentation there's written that it's able to disassemble also Visual Basic progs, but the versions available here are all not able to do so. Much probably the Visual Basic *.d32, *.dll and *.w32 files (and all the others connected) are missing.

Can any1 up those files on the FTP??

Here's a ed2k link to Devpartner 7.10 iso-image:

ed2k://|file|Compuware.Devpartner.Studio.Professional.7.1.0.iso|272893952|AF8DF2449F9F9147A1AD6501EC774E91|/

IDA and PCODE
 

There's an IDA plugin available that "disassembles" the PCode opcodes, but I don't know how comprehensive it is. If you like, I can dig through my notes and try to find the URL

Sarge

For smartcheck go to hxxp://www.ctools.net/index.php?page=tools

an old one, but very useful

http://66.98.132.48/fravia/project8.htm

good luck ;)

IDA is not primary used fo full VB dissasemblig because there is many differencis in VB code try look at IDA forum > there Ilfak G. talk about it ;)

P.s> sorru for my baad english ...

Sorry for being so lazy, but can you tell me an URL to that thing directly.
I never used the IDA forum, hence I also do not know where's it. :o

hxzp://www.datarescue.com/ubb/ultimatebb.php

Here's link that should contain a script for IDA which can parse Visual Basic. Unfortunately the download link gives an 404 error... I guess I'm going to mail the author as the script itself is pretty recent, 10/03/2004.

hxxp://mysite.mweb.co.za/residents/zasax99/vb6.htm

With Emule you can download the 6.2 RC2 version :rolleyes:

ed2k://|file|NUMega_SmartCheck_6.2rc2.exe|21837178|7814B942B52BB508D67F171AE5D4DC40|/

Unfortunately there are two drawbacks

1. from where I'm P2P is firewalled
2. installing devpartner for a small program would copromise the system (once uninstalled) for nothing !

IDA is great because has no installation, just an xcopy in the java phylosophy.

It seems to disassemble partially correctly, but all the resources as fucked up (gray color) and also I think some of the code that creates dialogs and so on..much probably the only part that IDA dissassembles is some C++ code inside a VB program..duh!?

Also Olly has the same problems (again the same non-setup wonderful feature).... :)

I found the VB6 script for IDA from wasm.ru:

hxxp://www.wasm.ru/tools/20/vb6.zip

There used to be a group on Yahoo called 'ActxLic' or something like that (witout the quotes). Have a dig around it may still be there. From what I remember it was excellent.

Hi all,
I found my way through this tool, really useful

_http://members.v3space.com/blackfenix/wktvbdebug/

it seems to be the ollydbg of VB..

Yes wktvb iz good tool ,but sometime frooze my PC >>> for non p-code cracking iz good prog called VBspy it iz somenthing like SmartCheck ...

You can use IDAPRO to dissasemble a VB Application.
There is no problem if you have a VB file that is compiled in "native-EXE" Form , but if the file is compiled in PCode Format then you must self
tranlsate the code , or you can use the WKT-Debugger.

The best way to use IDAPRO is to find a plugin , if you have a PCoded VB EXE File...


VD