VB Decompiler

_aLfa_ · Posted: Fri Aug 27, 2004 1:31 pm Post subject: Object Descriptor

Parents:
Project Info 2

[vb:bmxx6dzl]

Type ObjectDescriptor
  lNull1      As Long '0x00 (00d)
  aObjectInfo As Long '0x04 (04d) Pointer to Object Info
  lConst1     As Long '0x08 (08d)
  lNull2      As Long '0x0C (12d)
  lFlag1      As Long '0x10 (16d)
  lNull3      As Long '0x14 (20d)
  aUnknown1   As Long '0x18 (24d)
  lNull4      As Long '0x1C (28d)
  aUnknown2   As Long '0x20 (32d)
  aUnknown3   As Long '0x24 (36d)
  aUnknown4   As Long '0x28 (40d)
  lNull5      As Long '0x2C (44d)
  lNull6      As Long '0x30 (48d)
  lNull7      As Long '0x34 (52d)
  lFlag2      As Long '0x38 (56d)
  fObjectType As Long '0x3C (60d) Flags for this Object
                      '0x40 (64d) <- Structure Size
End Type

[/vb:bmxx6dzl]

Notes:
* lNull1 links to another Heap during compilation and its nulled when releasing.
* lConst1 is set to -1 by the compiler (maybe some reserved value).
* lNull2, lFlag1, lNull3, lNull4, lNull5, lNull6 and lNull7 are probably temporary values only used in the IDE.
* All-in-all ignore this structure, because it can be deleted from the executable.

Pointers:
Object Info

Greetings to Alexandru Ionescu for helping finding this out.

_aLfa_ · Posted: Sun Aug 29, 2004 10:25 am Post subject:

Edited a bit, because some values were mis-aligned.
_________________
One thing only I know, and that is that I know nothing. (Socrates)

Welf Wiest · New User Joined: 15 Dec 2007 Posts: 4

I decoded aObjectDescriptor; //0x0C (12d)
I named it

[cpp:3m7lfn3k]

 
VBATypeInfo *pVBATypeInfo;
 
 
//Struktur aus VBAObjectInfo verwiesen
class VBATypeInfo
  { public:
      DWORD dw0;
      VBAObjectInfo *pVBAObjectInfo;
      DWORD dw1[2];
      unsigned short nCountVARDESC;
      DWORD dw2;
      VB6_FUNCDESC **ppFuncDesc; //Table of function descriptions (Count from VBAObject)
      DWORD dw3;
      VB6_VARDESC **ppVarDesc;
  };
 

[/cpp:3m7lfn3k]

it contains all Function and Variable Descriptions