Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 10-01-2003, 04:04
Sarge
 
Posts: n/a
Changing the name of an object in a VB proggie isn't going to affect the "ease" of decompiling that proggie; you don't need the name to find the related code (whether N or P). The name just makes it easier for us poor humans. The code blocks are related to the object by pointers and not the actual textual ASCII name.

P code is closer to the source, but a bit harder to learn. N code is simply disassembled opcodes, but it takes a lot of them to do a simple task. I would suspect N code is easier to analyze for the obvious reason that thousands of non-VB apps, when compiled, result in the same, well-known, machine code that so many disassemblers can disect; virtually every software reverse engineer has a working knowledge of machine opcodes and can "feel" what the code is doing. It's not necessary to re-create the exact source code, either.

There are a number of progs out there that are half-decompilers; you might want to check their operation and see just what data in a VB exe is really significant in its operation and what is not; at least, then, you could concentrate on the right stuff.

Sarge
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Wlscgen: Are "Vendor Id" and "Developer Id" different ? Numega Softice General Discussion 6 02-12-2007 18:12
I am Newbie and need Help about "Visual protect" Reversing Matrixx virus General Discussion 1 09-09-2003 04:22
IDA Question about db "? ; unexplored" kade General Discussion 6 06-02-2003 21:11


All times are GMT +8. The time now is 19:43.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )