VB Decompiler

MrUnleaded · Posted: Tue Dec 03, 2002 7:46 pm Post subject: josephCo's Idea

What do you guys think of a small script to bring all of the structs out into one file to view in a row...?
_________________
-MrU

sarge · Moderator Joined: 24 Sep 2002 Posts: 194

Well, that's sort of the idea I mentioned a while back, in which you show the relationships between the structs --- I see that you have done that graphically via an indented listing. But there is still more detail that should be added, like showing that an Object struct will appear multiple times, that it may or may not have the optional info, etc. I would eventually like to see a format of some kind that lets you almost visually "map" the hex dump of your target program to a flowchart (or whatever). There would be areas in the flowchart where you can insert the addresses of interest; the end result would be an annotated flow chart of what struct has what procedure, and who calls it. This is probably a lot of work, though, and we may be too deep into learning and analyzing to get around to documentating anything more than the bare necessities as we are now. But wow, think of the possibilities!

Just my 2 cents worth...

Sarge

MrUnleaded · Posted: Tue Dec 03, 2002 11:04 pm Post subject:

[="sarge":3b74rim8].........

Just my 2 cents worth...

Sarge[/:3b74rim8]

ive already done this to a cerain degree....the p6.commonApp.exe.html....

./viewtopic.php?t=33

i was more speaking of a script similar to the opcode.php.....it gets all the first posts(topicsopcodes) and puts them in a columnar(sp?) format that is easily readable.....

ps sarge...you are more then welcome to create a script for us....if you need a "playground" let me know....my server supports php/perl/unix-cgi/mysql
_________________
-MrU

Anonymous · New User Joined: 10 Feb 2008 Posts: 0

I can build on this good idea...

sarge · Moderator Joined: 24 Sep 2002 Posts: 194

Good questions, all of them. And, I don't have a clear answer yet, either.

But I would wonder if, even with a really clean/clear protocol for defining and explaining the structures in a "strictly data" manner , we would also want a "comments" type section that allows some free text relavent to the specific program target.
(I'm just shooting from the hip, here; I'm not sure what I wrote comes across as what I meant...hell, I'm not even sure I meant what I meant!)

This looks like a big job, if you want to have the tree automatically analyze the program in relation to the structures, as well as allow user data input/comments for analysis; can the user input BE linked to the particular tree data that it is related to? Is this tool worth the effort?
Or, maybe this might be easier, just make the tree display with sufficient blank space in it, then print it out and write in the applicable notes and comments.

And should we go further, and maybe make a graphic linked flow chart?

Wow, all of this and we still want to keep up with the structure definitions and new discoveries?

Yet again another 2 cents worth...

Thanks to all for listening.

sarge

_aLfa_ · Posted: Sun Dec 08, 2002 2:07 pm Post subject:

in my decompiler i ve a tool to c all (almost all, cuz im a bit ocupied) of this structures in a treeview, just like the example moog gave

ill give it to mru so he can post it here, so we can use and xplore

btw: i want u to gimme feedback on my work. stay tuned in the next days
_________________
One thing only I know, and that is that I know nothing. (Socrates)

_aLfa_ · Posted: Sun Aug 01, 2004 11:47 pm Post subject:

I was 2 years dead on this decompiling stuff, I'll try to recover the lost time...

I will make something like moog said in the next days (web based).
_________________
One thing only I know, and that is that I know nothing. (Socrates)

MrUnleaded · Posted: Mon Aug 02, 2004 3:21 pm Post subject:

[="_aLfa_":fuz2zuio]I was 2 years dead on this decompiling stuff, I'll try to recover the lost time...

I will make something like moog said in the next days (web based).[/:fuz2zuio]

If it does anything to decode pcode you are welcome t use the "opcode" database onthis site.

php/perl/cgi
_________________
-MrU

_aLfa_ · Posted: Mon Aug 02, 2004 4:19 pm Post subject:

No, it's not for decompiling, it's just for showing structures in a more readable way
_________________
One thing only I know, and that is that I know nothing. (Socrates)

MrUnleaded · Posted: Mon Aug 02, 2004 4:42 pm Post subject:

[="_aLfa_":2c8czc7g]No, it's not for decompiling, it's just for showing structures in a more readable way [/:2c8czc7g]

Alright thats cool. it would be cool to be able to update it...and then have a version that generates php code....then use that as an include so that the code base is dynamic.
_________________
-MrU