Archive for September 23, 2008

VB Decompiler

Posted: September 23, 2008 in RE Tools, VB Decompiler

VB Decompiler

Author: GPcH Soft

———

VB Decompiler is decompiler for programs (EXE, DLL or OCX) written in Visual Basic 5.0/6.0. As you know, programs in Visual Basic can be compiled into interpreted p-code or into native code.

Since p-code consists of high-level commands, there is a real possibility to decompile it into the source code (of course, the names of variables, functions, etc. will not be decompiled). VB Decompiler restores many p-code instructions and although there is a long way to the generation of the source code that can be compiled, the decompiler will make analyzing the program algorithm much easier and partially restore its source code.

If a program was compiled into the native code, restoring the source code from machine instructions is not possible. But VB decompiler can help to analyze the program even in this situation as well. It contains a powerful disassembler that supports Pentium Pro commands including MMX and SSE. It allows you to disassemble all functions. There is also a code analyzer that searches for all API function calls and string references in the disassembled code and changes them into comments for analyzed strings. In general, VB Decompiler is an ideal tool for analyzing programs and it is perfect if you lose the source code and need to partially restore the project.

VB Decompiler v5.0 has been released (14.06.08)

What’s new in this version:
– New unpacker engine
– OptionButton decompilation
– Russian help file rewriten
– New plugin functions: GetFrxIconCount, GetFrxIconOffset, GetFrxIconSize
– Address in String Reference window
– Strings editor in String Reference window
– Collapse and expand “If” and “For” constructions in text window
– BugFix: Parameters parser fixed
– BugFix: Resize in Windows Vista SP1

P-Code Example

Native Code Example

DE Decompiler

Posted: September 23, 2008 in RE Tools

DE Decompiler

Author: GPcH Soft

——-

DE Decompiler is the unique solution for decompiling the Delphi generated programs (EXE, DLL, OCX). As you know the Delphi programs is the native win32 executable files.

DE Decompiler restores most parts of the compiled code and helps you to recover most parts of the lost sources. It contans the powerful disassembler which supports Pentium Pro commands including MMX and SSE extensions. Also it has a useful smart assembler code emulation engine. The build-in disassembler allows you to disassemble a lots of functions and represents it in semi-decompiled mode. DE Decompiler has a wonderful code analyzer which makes your work easy and fast. In addition to all it can search for all the API function’s calls and the string references in the disassembled code and comment them out for analyzed strings.

If you lost your source codes – DE Decompiler save your time and helps you to restore it.

In general, DE Decompiler is the ideal tool for analyzing programs and it is perfect if you lose your source code and need to partially restore the project.