📚 OpenRCE is preserved as a read-only archive. Launched at RECon Montreal in 2005. Registration and posting are disabled.








Flag: Tornado! Hurricane!

 Forums >>  Brainstorms - General  >>  Microsoft Visual C++ and a Microsoft Visual Basic x86 binary?

Topic created on: February 11, 2011 14:02 CST by niks06 .

Can anybody tell me what are the difference(s) between a Microsoft Visual C++ and a Microsoft Visual Basic x86 binary?

  prot0man   February 12, 2011 13:20.44 CST
Assuming you're already familiar with how Microsoft Visual C++ break down in disassembly, you can look at http://www.dreamincode.net/forums/topic/17436-disassembling-visual-basic-applications/ to see how visual basic is structured. The author also compares visual basic to C/C++ a few times.

Either way, the differences that I may list depend on whether the visual basic binary is compiled to p-code (pseudo code) or native. P-code compilation results in an executable that is interpreted at runtime by an interpreter. This means when you throw a p-code compiled visual basic executable in a disassembler, you'll see some sort of dispatch table translating p-code instructions into native code. In contrast, native code compiled visual basic binaries do not suffer the performance penalty of re-interpreting each instruction.

One obvious difference can be found if you throw a visual basic compiled binary into IDA. If it's a VB binary, normally you'll find a reference to msvbm60.dll. In contrast, Visual C++ executable tend to use msvcr**.dll, which is the C run time library.

Note: Registration is required to post to the forums.

There are 31,328 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Question about memor...
Dec/12


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit