VB Decompiler

vbgamer45 · Posted: Fri Aug 27, 2004 1:43 pm Post subject: Rest of P-Code?

I understand where all the subs, functions, and events are stored.

Now I am begining to wonder where the global variables, Udt's and are stored at? Any ideas?

4694 · Posted: Wed Sep 01, 2004 2:34 am Post subject:

seems to me that the best way is to simply code a program that uses said UDT / Global vars / etc, Dump to pcode, eliminate what you allready understand, and what must be left is what you dont... no?

MrUnleaded · Posted: Wed Sep 01, 2004 2:49 am Post subject:

thats how i always did it
_________________
-MrU

4694 · Posted: Wed Sep 01, 2004 5:30 pm Post subject:

Wow, considering I know nothing about this pcode thing, I wasn't exactly expecting to be right. but hey, VB6 is like encryption, in fact, its pretty weak encryption if you think about it. Its simple monoalphabetic substitution, no? All you should have to do to identify what pcodes mean is locate them in a known source, because VB6 allways encodes with the same "key" doesn't it? the hard part is getting the stuff you dont particularly 'see' or think about when you code, the addresses of variables, pointers, suchlike. otherstuff like basic commands such as if and for should be easy. then theoreticly you just need to look nearby for a pointer to the variable thats stored somewhere. you locate the pointer, follow it to the variable, figure out where you are, and badaboom, now you know where var's are stored in memory...