Articles about our software, Visual Basic and .NET reversing and software protection
New features and improvements in VB6 and C# .NET decompilation and completely revised documentation in VB Decompiler 12.4 [July 12, 2024]
I am pleased to introduce significant update to our decompiler. Searching for Functions by name, searching for references to functions for C# .NET and Visual Basic .NET, renaming variables and so on. Additionally, we have completely revised VB Decompiler documentation in several languages. This was a massive undertaking, and I believe it will be noticeable even at first glance.
Decompiling .NET applications to C# code, Dark Theme and Mac M1 support in VB Decompiler 12.1 [April 15, 2023]
Each new version of the decompiler traditionally brings a lot of changes. But this release is special! It includes several improvements so significant that in fact we can talk about this version as a new product. Start of the new era of decompiling .NET applications into C# code, support for Mac M1 and Steam Deck, Dark Theme, improved obfuscation and so on.
Improved support for COM OLE objects and working with internal classes in VB Decompiler 11.9 [September 3, 2022]
New version of the VB Decompiler has a completely rewritten parsing engine of the TypeLib's information from external ActiveX libraries. Now prototypes always contain the type of the return value, if it is a class or an interface. Written new algorithm for parsing If ... Else ... End If statements. Improved parsing of prototypes in virtual method tables (VTable). Merging the decompiled code with the disassembled one now supports jumping to the desired line. Added experimental support for Windows XP and more other improvements and updates.
Optimization and acceleration of the decompiler, as well as many improvements for .NET in VB Decompiler 11.8 [May 2, 2022]
A lot of work has been done in new version of the decompiler. We speed up code analyzer and optimizer. In parallel with the decompilation of Native Code and P-Code Visual Basic 6.0, a lot of work is being done on the decompilation of .NET applications. VB Decompiler supports structure decompilation and CIL disassembly of all .NET family languages (C#, Visual Basic, F#, Delphi .NET and other Common Intermediate Language compilers). New version of VB Decompiler extended support for new .NET constructs and fixed many incompatibilities.
Better usability and .NET Analytic features in VB Decompiler 11.7 [November 18, 2021]
A lot of time has passed since the release of the previous version and today I really have something to surprise you! The new version of the decompiler has embodied a lot of little things that significantly increase the convenience of code research. And this functionality has been expected and will be appreciated by absolutely everyone. But first things first.
Especially for criminologists and antivirus analysts, we are pleased to present a new license for VB Decompiler. In the version with automatic analytics features, VB Decompiler can generate a report that contains detailed information about the activity of a decompiled program on a user's computer. The analyst receives a full report on the areas (procedures and functions) of the program that perform various manipulations with files, registry, windows, processes, as well as using service functions of Visual Basic.
Now you can partially debug a program compiled in Native Code and P-Code on the built-in emulator, without running the program on the real CPU! Tracing (or, to be more exact, step-by-step emulation) lets you put the emulation on hold on each line of the assembler code, so that you can check the processor and co-processor registers, the stack, and the variables. Because code is processed by the emulator, not run on the real processor, this feature will be very useful for virus analysts who examine malware in anti-virus labs.
Native code emulator is better than ever in VB Decompiler 11 [May 23, 2018]
After three months of hard work and several months of preparations, we are happy to introduce a major update of VB Decompiler. Among many things that we have improved, the most important one is probably the completely redesigned Visual Basic native code emulator/decompiler.
DotFix NiceProtect provides leading-edge, solid protection for your Windows applications
We designed the entire code protection architecture from scratch! This time, we used a different approach to protecting code and using code protection modules. As a result, now our product is both more functional and much faster than before!
Explore your code like in a Visual Studio using VB Decompiler v10.7 [August 18, 2018]
Everybody knows that sometimes it is pretty difficult to find a piece of code that handles a click on a form button, a form loading event, or some other UI event. We've known about this problem for quite a long time, and we've been working hard to fix it. And finally, in the new version of our decompiler, we did it!
Significantly improved VB5/6 code decompilation and further improvements of .NET decompilation in VB Decompiler v10.6 [December 15, 2016]
With each new release of VB Decompiler, we greatly improve decompilation quality. Version 10.6 is yet another confirmation to that fact. We have done a lot of tests to identify previously unsupported rarely-used MSVBVM60.DLL functions, statements, and combinations of different procedures. After spending a great deal of time and effort, we can firmly say that now VB Decompiler supports even more functions of the runtime library.
GUI Designer and in-depth optimization in VB Decompiler v10.5 [July 29, 2016]
There were many milestones in the evolution of VB Decompiler: p-code decompilation, native code decompilation, .NET disassembling, VB Decompiler porting from VB6 to Delphi, adding functions for native code tracing without launching the program under study, etc. Seemingly now we could just sit back and confine ourselves to polishing the decompiler. But practice has shown that software developers using VB Decompiler badly wanted the ability to display restored forms or User Controls. Starting from version 10.5, VB Decompiler supports visualization of restored forms and User Controls!
A new evolution stage in decompiling .NET code and VB6 native code in VB Decompiler v10.4 [April 17, 2016]
I am happy to present the new version of VB Decompiler that contains tons of improvements and innovations. The main improvement that has had a profound effect on everything, is substantial optimization, refactoring, and runtime performance boost. In version 10.4, you will find a 5-fold increase in the speed of decompilation of applications built in Visual Basic 6.0 with the "native code" option, and a 7-fold increase in the speed of decompilation of .NET applications!
Decompiling calls from external ActiveX components in VB Decompiler v10.3 [February 7, 2016]
The new version of VB Decompiler brings native-code VB6 program decompilation to a radically new level! Starting from v10.3, VB Decompiler can decompile calls, methods, and properties of external ActiveX components not listed in its database. In addition to that, prototypes of 1853 API functions, including those of system functions, have been added to the database.
Easiest way to protect software against cracking with DotFix NiceProtect 5.0
Please meet our significantly updated software protection product! We've rewritten NiceProtect in a more up-to-date software development environment, reworked and improved its main features. You will notice that now our product does its job a few times faster. It has also become more stable, even when used with very exotic projects.
New age of Native Code decompilation in VB Decompiler v10.1 [September 30, 2015]
After making a lot of changes to VB Decompiler, we are delighted to announce a new version! There are so many significant improvements in versions 10 and 10.1, that we should mention each of them.
Native Code improvements and tracing features in VB Decompiler v9.7 [March 14, 2014]
After several months of painstaking work, we are happy to introduce a new, much improved version of VB Decompiler. This time we also changed its key feature, native code decompilation. Many VB Decompiler users have been waiting for that, and finally, after a great deal of code refactoring, we succeeded in redesigning and considerably improving the emulator.
I am happy to announce a new version of VB Decompiler. When working on this release, we focused on the decompiler's usability when analyzing a code. The changes have been brewing for quite a long time. Hopefully, now the product will be much easier to use. But let's start from the beginning.
The new age of the Visual Basic decompilation - VB Decompiler v9.0 [July 6, 2012]
After nearly six months of hard work, I'm happy to introduce VB Decompiler 9.0. You may say, why is it 9.0, not 8.5? There are a few reasons for that. The main one is I've completely ported the project from Visual Basic 6.0 to Delphi XE2. Basically, most of the new version is made from scratch. Though it was impossible to port many things as is, I've done my best to make all features work just like they did in the previous version, or even better.
Decompiling P-Code in Your Mind's Eye. The Subtleties of Researching Commands of the VB Virtual Machine.
Many programmers whose work involves studying the internals of binary files sometimes encounter programs written in P-Code. Even if you are a reverse engineer who has never seen Visual Basic and its compiler, you surely have run into pseudo code at least once in your professional career. Unlike standard machine code, which is directly executed by the CPU, p-code is a set of virtual machine mnemonics executed by the msvbvmXX.dll engine.
The Art of Editing Visual Basic Forms and Controls
If you are experienced in analyzing software applications and in localization, then you have surely encountered some programs written in Visual Basic. Doesn't it surprise you that there is almost no information on how to edit VB forms and controls? In this article, I'm going to fill this gap as best as I can. (Actually, I wrote it in early 2007, and all the time since then it had been waiting to be published.)