threat-intel
Scripting the disassembler: Local agentic reverse engineering through vbdec’s live COM object model
Medium
Summary
This article details a technique developed by Cisco Talos for automating reverse engineering of VB6 binaries using AI agents. The approach leverages the COM object model of VBdec, allowing external scripting tools like Claude Code to query and analyze the disassembled code without modifying the core application. This method enables rapid decompilation and analysis, generating source code reconstructions and call graphs in seconds, significantly accelerating the reverse engineering process.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data