Log in

View Full Version : I know, VERY basic, but ... How do you identify a VB app?


zeeman
February 20th, 2001, 09:16
Hi, all!
I used to have a 1 1/2" 3-ring binder chock-full of tutorials and essays, but the durned thing's gone missing, so I gotta ask. (I'm sure if you had a lamer section, this would be moved there <g>.) This much I remember: view the .exe with Quick View, but I can't for the life of me recall what the identifying text is.

Regards,
Zee.

ps I've looked, but it just escapes me.

Brtascher
February 20th, 2001, 15:56
I don't know the text that Quick View would show if the exe file you are examining was written with Visual Basic. I know other methods instead:

If you dissasemble the main exe file and look in the import section you will see one of the VB dlls: msvbvm50.dll or msvbvm60.dll, for versions 5 and six respectively, and the load of VB functions all named with a double underscore at the begining like __vbaStrComp.

If you are tracing the file in question with SoftIce, sooner rather than later you will get into one of the MSVB dlls. You can tell such information, the file containing the code you are tracing, by reading the lower margin of the code window in Sice.
The left upper margin of the code window contains the name of the exported function you are currently tracing.

zeeman
February 20th, 2001, 17:16
Thank you for sharing, Brtascher. I could have sworn you could identify VB apps the way I mentioned, down and dirty, prior to disassembly ... I believe it was in an article written by Eternal Bliss ... you think I could lay my hands on it??? Nooooo. Sheesh, I'm drowning in paper. What a state to be in, in this, the computer age.<g>

Regards,
Zee.

hz
February 20th, 2001, 18:29
Hi,
Language 2000 (protools), identifies more executables than any other I have tried.

regards

Bratsch
February 20th, 2001, 22:28
Quote:
zeeman (02-20-2001 06:16):
Thank you for sharing, Brtascher. I could have sworn you could identify VB apps the way I mentioned, down and dirty, prior to disassembly ... I believe it was in an article written by Eternal Bliss ... you think I could lay my hands on it??? Nooooo. Sheesh, I'm drowning in paper. What a state to be in, in this, the computer age.<g>

Regards,
Zee.

I checked a VB app with Quick View Plus.
It does give you a list of the import libraries and functions, so what I told you about dissasmbling applies to Quick View, it is only faster.
Regards,

zeeman
February 21st, 2001, 11:38
Hello, hz.
Language 2000 is a very nice tool indeed! I especially like the drag&drop feature. Thank you very much for pointing this one out to me.

Regards,
Zee.

Quote:
hz (02-20-2001 07:29):
Hi,
Language 2000 (protools), identifies more executables than any other I have tried.

regards

Eternal Bliss
March 1st, 2001, 15:36
Quote:
hz (02-20-2001 07:29):
Hi,
Language 2000 (protools), identifies more executables than any other I have tried.

regards


http://ebliss.cjb.net
I think if you open it with a hex editor, you will see msvbvmXX.dll around the front part of the exe where XX is 50 or 60

Regards
EB
8)