PDA

View Full Version : Decompile DLL C/C++ and p-code


MaxCohen
July 25th, 2013, 16:07
Is this possible? I have read on the www that it is not especially if in C++.

I think the DLL is somehow modifying p-code using C/C++. The DLL is references in a VBA/VB6 project and then produces profiling stats on each function call.

Thanks for any insight into this.

Otherwise any suggestions how I can go about building a tool like this.

disavowed
July 26th, 2013, 21:07
Quote:
[Originally Posted by MaxCohen;95096]Is this possible?

Yes

Quote:
[Originally Posted by MaxCohen;95096]I have read on the www that it is not especially if in C++.

Whoever said that was wrong.

Quote:
[Originally Posted by MaxCohen;95096]Otherwise any suggestions how I can go about building a tool like this.

Why build a new tool? If it really is VB P-code, use a VB P-code decompiler like http://www.vb-decompiler.org/. If it's native code, use Hex-Rays.