Exe decompiled

Or at least view the Assembly? Ask Question. Asked 13 years, 2 months ago. Active 28 days ago. Viewed k times. Edit to say it is not a. Improve this question. Sorry for the super late reply I'm assuming it behaved like a worm in this sense. Add a comment. Active Oldest Votes. Debuggers: OllyDbg , free, a fine bit debugger, for which you can find numerous user-made plugins and scripts to make it all the more useful.

WinDbg , free, a quite capable debugger by Microsoft. WinDbg is especially useful for looking at the Windows internals, since it knows more about the data structures than other debuggers. Commercial and development stopped in SoftICE is kind of a hardcore tool that runs beneath the operating system and halts the whole system when invoked. Used by most professionals, like malware analysts etc. Costs quite a few bucks though there exists free version , but it is quite quite limited W32Dasm free - a bit dated but gets the job done.

I believe W32Dasm is abandonware these days, and there are numerous user-created hacks to add some very useful functionality. You'll have to look around to find the best version. Delphi: DeDe , free, produces good quality source code. Produces great results but costs a big buck, and won't be sold to just anyone or so I hear. NET C : dotPeek , free, decompiles. NET 1. Support for. Improve this answer. I appreciate the last paragraph in its generality, good advice, but it is amusing in the context of the question: I doubt a virus comes with an EULA!

Actually, some malware and even trojans of late have had EULAs in them oh, those russians.. Of course, they can be and are ignored by researches, because it can be assumed that nobody will come forward to sue them Also, they're usually too badly written to mean anything in court in any case. Note that IDA Pro's previous version is free for non-commercial use.

All I can see is X86 type of coding like push mov. I want to decompile the exe but don't know the source code language. At loading I have selected portable executable and meta pc. I see the start function but it is in assembly language type. Show 8 more comments.

Don't get me wrong, there have been attempts to do so. They work as well as DRM on song files. Jason L Jason L 2, 3 3 gold badges 20 20 silver badges 19 19 bronze badges. This elaborates on disassembly, but I'd love to hear an elaboration on decompiling. Is it likely to be just as fruitless? What are the caveats of it? Optimizers are exceedingly aggressive, frequently translating source code into nothing at all.

You cannot decompile nothing. The best of conditions is well-commented hand-written assembly, when the reader knows asm as well as they know C. Then it's no bad at all.

Of course you're talking about uncommented disassembly, but "the best of times" is simple C compiler ouput. Use Find Usages to search for all usages of a symbol, be it a method, property, local variable or a different entity. The Find Results tool window lets you group usages, navigate between them, and open them in the code view area. Whenever you put a caret on a symbol in the code view area, dotPeek offers a plethora of contextual navigation options that are all available via Navigate To drop-down menu.

For instance, Go to Everything allows searching for an assembly, namespace, type, member, or a recently opened file. Long-time users of JetBrains ReSharper will feel at home working with dotPeek as it provides ReSharper-like navigation and search, code insight, and familiar keyboard shortcuts.

Decompiling a help file involves copying the files in a compiled help file to a directory that you specify while leaving the compiled help file intact.

This procedure is useful for reconstructing individual HTML source files from a compiled help file. It is also useful when you want to use the source files contained in the compiled help file in a browser that does not support compiled help files. From a DOS prompt or from the Run command, type -decompile folder chm where -decompile is the switch, folder is the name of the destination folder where you want the decompiled files to be copied, and chm is the name of the compiled help file you want to decompile.

Export decompiled code to Visual Studio projects As soon as you've decompiled an assembly, you can save it as a Visual Studio project. NET technology. Allows you to extract the project file, all forms, api calls sometimes the parameters are recovered if they are in the api database , procedures names, events names, and P-Code tokens if the application was compiled to P-Code.

Both documents have a Decompile source code option that generates C code for the current location. The generated C code can then be used just like any other source code. You can view the code, inspect variables, set breakpoints, and so on.

In addition to generating source code for a specific location, you can generate all the source code for a given. NET assembly. To do this, go to the Modules window and from the context menu of a. NET assembly, and then select the Decompile source code command. Visual Studio generates a symbol file for the assembly and then embeds the source into the symbol file.

In a later step, you can extract the embedded source code. You can extract source files that are embedded in a symbol file using the Extract Source Code command in the context menu of the Modules window. The extracted source files are added to the solution as miscellaneous files. The miscellaneous files feature is off by default in Visual Studio.

Without enabling this feature, you won't be able to open the extracted source code. Generating source code using decompilation is only possible when the debugger is in break mode and the application is paused.

For example, Visual Studio enters break mode when it hits a breakpoint or an exception. You can easily trigger Visual Studio to break the next time your code runs by using the Break All command. Generating source code from the intermediate format IL that is used in.