vbdec dbg updates


Author: David Zimmer
Date: 09.01.19 - 4:58pm



I have been working on the debugger and patch engine some more.
We can now reset eip anywhere we want and have multiple persistent patches.

Vbdec is now available and has its own product page

  • new opcode in debugger: 1 byte nop
  • right click: nop instruction
  • right click: new origin here
  • query typename of class pointer
  • right click: modify value in stack
  • persistent patches for code
  • ability to patch any memory with various primitives (date, long, byte())
  • demo of const pool viewer form
  • data viewer form
  • standalone viewer with syntax highlighting, code navigation, searches etc for sharing disassemblies
  • Javascript automation interface with intellisense and syntax highlighting (access to same internal API app uses)
  • Ability to search all structure fields
  • Ability to load damaged memory dumps and rebuild IAT from text file









Comments: (1)

On 09.28.19 - 8:15am Dave wrote:
Nice write up by sysenter-eip on VB leaking host info into compiled apps.

 
Leave Comment:
Name:
Email: (not shown)
Message: (Required)
Math Question: 1 + 85 = ? followed by the letter: U 



Twitter
RSS
About Me
More Blogs
Main Site
Posts: (All)
2020 ( 4 )
2019 (12)
     Yara WorkBench
     SafeArrayGetVartype
     vbdec dbg updates
     vb6 PCode NOP
     vb6 API and call backs
     how pcode works Pt1
     PrintFile
     ImpAdCallNonVirt
     Reversing PCode Args
     VB6 PCode Disassembly
     VB6 PCode Debugger
     UConnect Disable Cell Modem
2017 (5)
     IDA python over IPC
     dns wildcard blocking
     64bit IDA Plugins
     anterior lines
     misc news/updates
2016 ( 4 )
2015 ( 6 )
2014 ( 5 )
2013 ( 9 )
2012 ( 13 )
2011 ( 19 )
2010 ( 11 )
2009 ( 1 )