VbDec is a VB6 P-Code Disassembler and debugger.
- Can Properly disassemble and resolve most common VB6 Pcode
- Live debugging of PCode exes w/ single stepping, breakpoints etc.
- Live stack display with diffing to highlight changes
- Memory window & data viewer for Variant, Date, Array, etc
- Ability to persistently patch memory, nop instructions
- modify stack values and reset EIP in the debugger.
- Disassembly viewer supports renaming functions, adding comments
- Click to navigate functions in disasm and esc go back in history
- Comprehensive search tools for strings, text, api references, etc.
- Ability to resolve class names from live object pointers in debugger
- COM aware: dynamically lookup libraries and resolve function names
- Export disassembly to database, or for standalone viewer app
- Standalone viewer to share disassemblies with non-licensed users.
- Explore VB6 internal structures, calculate offsets
- Constant pool viewer to manually explore data
- Script editor supports syntax highlighting and basic intellisense.
Screen shots (Click to enlarge)
Const Pool Viewer
Data Viewer w/Array
Data Viewer w/Date
VBDec is currently being reserved as an internal only tool. If you have
specific VB6 Reverse Engineering needs we can help. Contact us for more
There are several demo videos
and blog posts
showing vbdec in action. Sample output and the standalone viewer are available to verified parties on request.
Automation script examples can be found here.
If you are new to VB reversing I have setup a dedicated section
of the site to get you started. Special thanks goes out to VBGamer45 for his work on the open source Semi VB Decompiler
,Mr Silver & Mr Snow for their articles on WKTVB Debugger, all the reversers from the vb-decompiler.theautomaters.com
message board, and all the other reversers who contributed a ton of hard work to get us where we are today.