Results 1 to 7 of 7

Thread: I know, VERY basic, but ... How do you identify a VB app?

  1. #1
    zeeman
    Guest

    I know, VERY basic, but ... How do you identify a VB app?

    Hi, all!
    I used to have a 1 1/2" 3-ring binder chock-full of tutorials and essays, but the durned thing's gone missing, so I gotta ask. (I'm sure if you had a lamer section, this would be moved there <g>.) This much I remember: view the .exe with Quick View, but I can't for the life of me recall what the identifying text is.

    Regards,
    Zee.

    ps I've looked, but it just escapes me.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    Brtascher
    Guest
    I don't know the text that Quick View would show if the exe file you are examining was written with Visual Basic. I know other methods instead:

    If you dissasemble the main exe file and look in the import section you will see one of the VB dlls: msvbvm50.dll or msvbvm60.dll, for versions 5 and six respectively, and the load of VB functions all named with a double underscore at the begining like __vbaStrComp.

    If you are tracing the file in question with SoftIce, sooner rather than later you will get into one of the MSVB dlls. You can tell such information, the file containing the code you are tracing, by reading the lower margin of the code window in Sice.
    The left upper margin of the code window contains the name of the exported function you are currently tracing.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  3. #3
    zeeman
    Guest
    Thank you for sharing, Brtascher. I could have sworn you could identify VB apps the way I mentioned, down and dirty, prior to disassembly ... I believe it was in an article written by Eternal Bliss ... you think I could lay my hands on it??? Nooooo. Sheesh, I'm drowning in paper. What a state to be in, in this, the computer age.<g>

    Regards,
    Zee.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  4. #4
    hz
    Guest
    Hi,
    Language 2000 (protools), identifies more executables than any other I have tried.

    regards
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  5. #5
    Bratsch
    Guest
    zeeman (02-20-2001 06:16):
    Thank you for sharing, Brtascher. I could have sworn you could identify VB apps the way I mentioned, down and dirty, prior to disassembly ... I believe it was in an article written by Eternal Bliss ... you think I could lay my hands on it??? Nooooo. Sheesh, I'm drowning in paper. What a state to be in, in this, the computer age.<g>

    Regards,
    Zee.
    I checked a VB app with Quick View Plus.
    It does give you a list of the import libraries and functions, so what I told you about dissasmbling applies to Quick View, it is only faster.
    Regards,
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  6. #6
    zeeman
    Guest
    Hello, hz.
    Language 2000 is a very nice tool indeed! I especially like the drag&drop feature. Thank you very much for pointing this one out to me.

    Regards,
    Zee.

    hz (02-20-2001 07:29):
    Hi,
    Language 2000 (protools), identifies more executables than any other I have tried.

    regards
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  7. #7
    Eternal Bliss
    Guest
    hz (02-20-2001 07:29):
    Hi,
    Language 2000 (protools), identifies more executables than any other I have tried.

    regards
    http://ebliss.cjb.net
    I think if you open it with a hex editor, you will see msvbvmXX.dll around the front part of the exe where XX is 50 or 60

    Regards
    EB
    8)
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. softice and visual basic
    By qmark in forum Tools of Our Trade (TOT) Messageboard
    Replies: 4
    Last Post: October 23rd, 2013, 02:02
  2. basic ollyDBG qyestions
    By undream in forum OllyDbg Support Forums
    Replies: 1
    Last Post: July 4th, 2009, 21:27
  3. The Simple Client :}... very basic..
    By BanMe in forum Advanced Reversing and Programming
    Replies: 0
    Last Post: June 14th, 2009, 20:42
  4. Very basic Olly question
    By Streebgreebling in forum OllyDbg Support Forums
    Replies: 2
    Last Post: November 25th, 2005, 19:58
  5. visual basic debugging
    By Anonymous in forum OllyDbg Support Forums
    Replies: 1
    Last Post: August 10th, 2003, 15:34

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •