Hi All,
1. When load a VB program in SIce, the entry point is always a call to "ThRUNtMain" or something similar. Then when I traceon, or continue to do F12 I never jump back to the program code..
Why??How can I break into the start-up code of a VB program??
2. How does a p-code compiled program gets interpreted in the system? Any method to convert it into native code??
3.I have a 19Mb VB program which fails Win32Dasm (maybe because of the size). Can you disassemble some part of a file in Win32Dasm??
4.How can you get string references of VB programs in IDA??
regards
and TIA
riPPadoGG

Hi, riPPadoGG!
1. I don't know how to use Soft-Ice, but try to use set breakpoint on execute to .text section of the image.
2. MethCallEngine function (from MSVBVM library) interpretates p-code. Example
MOV EDX, <address of the procedure>
PUSH <JMP.&MSVBVM60.MethCallEngine>
RET
3. Why not IDA?
4. Use P32Dasm to get string references.

Regards.

Thanks for reviving this 8 year old thread.

WOW! I didn't pay attension.

Hey !!

At least he was searching .

Woodmann