For IDAPython users, I have created a complete python script that handles Visual Basic written programs. Features are:

original code from Reginald Wong's IDC script, translated to python
my previous script for handling DllFunctionCall
type analysis helper: provides function prototypes for known visual basic functions. Although the list of this functions is pretty limited at this moment, it is very easy to add your own
no return helper: marks specific functions as "non-returning", to improve ida analysis. Again, so far the list of non returning functions is limited, but it's easy to add your own

Download is, as usual, available from my repository ("https://www.openrce.org/repositories/users/Paolo/vbpython.py"), and will soon be committed to openrce-snippets. Again as usual, comments and feedback are welcome.



Enjoy



PS: In order to use this script you need the latest IDAPython (0.9.55 and up), due to use of *aflags functions.*


http://reversingitout.blogspot.com/2008/01/again-on-visual-basic.html