|
Over the years I have invested heavily in product R&D building a wide
assortment of new skills, and fostering a diverse background and understanding.
These are some of the papers I have developed along my journey that I make freely available to help others along. |
Sandsprite Papers
VB6 P-Code / Reversing
Scripting Arbitrary VB6 Apps
Recovery of VB6 prototypes
VB6 P-Code Disassembly
Writing a P-Code Debugger
VB6 P-Code Obfuscation
Binary Data Hiding in VB6
Binary Reuse of VB6 PCode
Parsing VB6 Form Controls
VB6 Variable Initilization
Reverse Engineering / Binary Analysis
Visual Basic 6
- Recovery of VB6 function prototypes - Avast 2022
VB6's IDispatch implementation reveals full function prototypes for internal forms and classes.
This article covers how to examine these internal structures and extract the information. Prototype extraction and structure dumping has already been added to vbdec.
This paper has been published on the Avast Decoded blog. (local copy)