OpenRCE Blog Entry

Paolo Palumbo (Paolo) <Ppalumbo1979

gmail

com>

Friday, January 18 2008 14:03.00 CST

For IDAPython users, I have created a complete python script that handles Visual Basic written programs. Features are:

original code from Reginald Wongs IDC script, translated to python
my previous script for handling DllFunctionCall
type analysis helper: provides function prototypes for known visual basic functions. Although the list of this functions is pretty limited at this moment, it is very easy to add your own
no return helper: marks specific functions as "non-returning", to improve ida analysis. Again, so far the list of non returning functions is limited, but its easy to add your own

Download is, as usual, available from my repository, and will soon be committed to openrce-snippets. Again as usual, comments and feedback are welcome.

Enjoy :)

PS: In order to use this script you need the latest IDAPython (0.9.55 and up), due to use of *aflags functions.�