Results 1 to 6 of 6

Thread: Finding Native/P-code compiled?

  1. #1
    yuvarar
    Guest

    Question Finding Native/P-code compiled?

    Hi,

    How do I find whether a VB application is Native code compiled or P-code compiled ?

    Is there a utility for it??

    Thanks in advance!
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    Naides is Nobody
    Join Date
    Jan 2002
    Location
    Planet Earth
    Posts
    1,647
    Yes and no. The most useful utility you will ever have for questions like this is Google. If you look at this link,

    http://kharneth.free.fr/_Tutorials_/CrackMe_Chronos02/index.html
    for instance you will see several refences to P-code.

    SmartCheck will tell you a file is assembled in P-Code

    More commonly, instead of using a tool, You disassemble the file with IDA or Win32dasm. when you disassemble a P-code file you see long stretches of "data" that the disassembler does not understand and cannot translate into regular opcodes.

  3. #3
    Look at some pure compiled binary files in a hex editor (ASCII view mode).
    Then look at a .NET compiled file.

    There is a difference in 'texture' that is very noticeable. Also the .NET version contains many references to .NET-related components etc. It's impossible to not notice the differences.

    Edit: Thought the OP meant .NET... but same thing: the texture is different.
    Last edited by LLXX; August 25th, 2006 at 01:39.

  4. #4
    Use P32Dasm :-)

    http://t4c.ic.cz/forum/showthread.php?t=67

    P32Dasm is a VB PCode Decompiler. It can generate String, Numbers, Objects, Import and Export function listing. There is also Jump calculator. For NCode events is here offset listing for setting BPX. You can generate .map files which you can import to DataRescue IDA (LoadMap plugin) or to Olly Debugger (MapConv plugin).

    It shows you also if it's PCode or NCode application.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  5. #5
    Naides is Nobody
    Join Date
    Jan 2002
    Location
    Planet Earth
    Posts
    1,647
    Nice Tool, Darker. I had a bothersome little game I wanted to "restore" and was going nowhere. Your Disassembler made it look easy

  6. #6
    yuvarar
    Guest

    Smile

    Thanks Everybody!!!
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. Reversing compiled perl files
    By seras in forum The Newbie Forum
    Replies: 4
    Last Post: January 10th, 2008, 11:00
  2. Change Startup Form of a compiled VB Exe
    By Nethacks in forum The Newbie Forum
    Replies: 2
    Last Post: July 14th, 2006, 21:27
  3. Finding code in a VC6 dll ?
    By bik78 in forum Malware Analysis and Unpacking Forum
    Replies: 2
    Last Post: June 3rd, 2002, 17:51
  4. Finding a button's code
    By pompeii in forum Malware Analysis and Unpacking Forum
    Replies: 2
    Last Post: September 9th, 2001, 10:08
  5. Reverse .mde (compiled Access database)
    By    in forum Advanced Reversing and Programming
    Replies: 1
    Last Post: July 5th, 2001, 05:49

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •