Skip to main content
Reverse Engineering

Questions tagged [visual-basic]

Ask Question

an event-driven programming language and IDE from Microsoft for its COM programming model. The precursor to VB.NET.

19 questions
Newest Active Bountied Unanswered
0 votes
0 answers
76 views

I decompiled a VB application using VB Decompiler pro. It contains the following call statements: Call {EEF18FCD-D67D-4E3C-AA21EC9AF56F90E9}.Method_arg_B8 (global_248, CStr(var_98)) Can you please ...
Krill's user avatar
  • 1
2 votes
0 answers
2k views

According to the README in https://github.com/bontchev/pcodedmp : "As each VBA line is entered into the VBA editor, it is immediately compiled into p-code" "when you open the source of a macro ...
hyk's user avatar
  • 21
1 vote
0 answers
308 views

I am reverse engineering some malware that is written in VB6. I found this tool which tried to decompile the .exe, but I noticed that the image that is being loaded by the .exe is suspicious and I ...
LUser's user avatar
  • 793
0 votes
1 answer
800 views

I am trying to add another button into windows form using dnSpy. Is it possible to add another? I want the end result be like this one. Any help will be highly appreciated.Thanks
Cloud Automation's user avatar
  • 3
1 vote
2 answers
248 views

I am analyzing a malicious JS file, which is obfuscated in a way that I could not de-obfuscate. When I executed it in a virtual machine and spectated process changes, I noticed that a new executable ...
skooog's user avatar
  • 197
2 votes
2 answers
605 views

A friends company uses an old VB6 application to generate encoded strings to then use in their also old and out of date database system. They have the application running in standalone mode so I can ...
Landmine's user avatar
  • 51
1 vote
2 answers
4k views

I am a beginner and I am doing a few crackme stuff, I'm pretty okay when it comes to system calls such as user32. But there is one crackme which uses msvbvm50.dll (Visual Basic) and it has weird ...
Atply's user avatar
  • 21
10 votes
1 answer
648 views

I am analyzing some Visual Basic 6.0 malware(before .NET) and I have several questions regarding the internal structure of the format. The samples I have are both p-code or native code compiled(...
ubnix's user avatar
  • 1,083
0 votes
1 answer
3k views

I'm using a program that can pack/compile a folder with files into a single *.xyz file that only that program can decompile and read. In order for the program to create a compiled file the flag: [...
Alex Bridges's user avatar
  • 1
1 vote
1 answer
2k views

New to decompiling, and code generally. Trying to decompile a windows 3.1 game (text adventure), so I can build it up again. Because at the moment it doesn't work (even on windows 3.1). I decompiled ...
Ne Mo's user avatar
  • 111
2 votes
0 answers
144 views

I have reversed a program I found running on my computer, written in VB.NET using Microsoft Visual Studio. I'm pretty sure it is a keylogger. Now since I'm a very careful user, I'm 100% sure I did ...
user13646's user avatar
  • 21
2 votes
3 answers
3k views

I have to reverse-engineer a VB P-CODE mode program. I had the program's P-CODE, but I don't know what it means. For example: Proc: 421840 421100: 04 FLdRfVar local_0098 421103: 04 ...
soul chen's user avatar
  • 31
0 votes
2 answers
931 views

I am trying to debug an executable(PEID shows Visual Basic 5.0 - 6.0) using ollydbg v1.10. The exe is quiet big about 74 mb and olly is always crashing during the analysis process. I am on windows 7, ...
Arunabh Ray's user avatar
  • 71
2 votes
1 answer
5k views

I have downloaded a sample of a malware to analyze it. First, I opened it with PEiD to look if it is packed. PEiD gives me the following information: Microsoft Visual Basic 5.0/6.0 So, I assumed ...
user3097712's user avatar
  • 1,541
0 votes
1 answer
400 views

Where i can find a working link to this tutorial? I have searched a lot on the net but all links are broken. Could anyone upload it somewhere? Original link http://www.alex-ionescu.com/vb.pdf
RCECoder's user avatar
  • 314

15 30 50 per page
1
2