Here's how to decompile executables compiled in c++/c, Delphi, vb6, Java, and vb.net. This can be very useful if you loose the original source code's of your work but still have the compiled .exe. This might not work with all files.
C Decompiler
[img]http://i172.photobucket.com/albums/w32/shmerlog/11.jpg[/img]
Instructions
1.File>open>(your compiled c .exe file)
2.File>decompile>
Download Link
http://download.cnet.com/C-Decompiler/30...69943.html
Vb Decompiler lite (vb6)
[img]http://i172.photobucket.com/albums/w32/shmerlog/22.jpg[/img]
Instructions
1.Select .exe
2.decompile (same shit as the last one)
Download Link
http://www.vb-decompiler.org/
Delphi and C++ builder decompiler
[img]http://i172.photobucket.com/albums/w32/shmerlog/334.jpg[/img]
Instructions
1.Select either C++ or delphi
2. Decompile
Download Link
http://www.softpedia.com/get/Programming...iler.shtml
VbReformer(vb.net)
[img]http://i172.photobucket.com/albums/w32/shmerlog/44.jpg[/img]
Instructions
1. Open vb.net .exe thats it.
Download Link
http://www.mediafire.com/?tnlymzjimn0
JD-gui 0.3.2
[img]http://java.decompiler.free.fr/sites/default/themes/jd/getimage.php?p=../../screenshots/screenshot14.gif[/img]
Download Link
http://java.decompiler.free.fr/
Hope this helps people. 😉
DO NOT DEAL WITH THIS MEMBER
Does this actually work? I thought that it wasn't possible to decompile it :/
does this work with delphi 7.2 files?
its a trojan the link for the delphi/c++ decompiler is a trojan not sure about the other ones though i suggest scanning it with novirusthanks before installing it
Bump
I decompiled a vb6 executable, with this comon guys 130 views and only 2 comments. Try it yourself it may or may not work.
DO NOT DEAL WITH THIS MEMBER
Well, it didn't work for me... tried with the C++/Delphi one
.Net one didn't work on my own apps...
i tryed vb6 one its work... but.. you cant edit it or its corrupt it , so.. thats suck o.o
The C++ one probably doesn't work too well due to the fact that each compiler has a different method of making the end result.
DO NOT DEAL WITH THIS MEMBER
lmfao c++ is a plugin
LOL haha just kidding , No man its a language you code in its not a program
Quote:ok, i got visual basic 2008 and i got some expirients but i need c++ to make hacks rigth?
so i need c++ and my question is!?¿? where i dontload it? and is c++ a own program or a update for vb08?
(Oct 18, 2010 06:17 PM)EricR Wrote: lmfao c++ is a plugin
LOL haha just kidding , No man its a language you code in its not a program
what was the point of your post 5 months later?
The VB Decompiler Lite only decompiles older versions like vb6..the newer versions built in vb2008 or sooner just typing some junk codes and then it says "The fat code only in the Pro version"
lol, i think this will never work / be retarded
nice post
thanks for you help you should add reflector to the list and esa they both are great programs
also i would recommen peid to be on the list
cheers nick
DO NOT DEAL WITH THIS MEMBER
Feb 10, 2011 11:00 PM
(This post was last modified: Feb 10, 2011 11:33 PM by fireboot.)
Warning comodo ! vb net décompiler detected malicieux program (botnet, setup_free.exe)
Virus total 1/43
Code File name:
setup_free.exe
Submission date:
2011-01-29 21:32:43 (UTC)
Current status:
finished
Result:
1 /43 (2.3%)
VT Community
not reviewed
Safety score: -
Compact
Print results
Antivirus Version Last Update Result
AhnLab-V3 2011.01.27.01 2011.01.27 -
AntiVir 7.11.2.31 2011.01.28 -
Antiy-AVL 2.0.3.7 2011.01.28 Backdoor/Win32.Prorat
Avast 4.8.1351.0 2011.01.29 -
Avast5 5.0.677.0 2011.01.29 -
AVG 10.0.0.1190 2011.01.29 -
BitDefender 7.2 2011.01.29 -
CAT-QuickHeal 11.00 2011.01.29 -
ClamAV 0.96.4.0 2011.01.29 -
Commtouch 5.2.11.5 2011.01.29 -
Comodo 7531 2011.01.29 -
DrWeb 5.0.2.03300 2011.01.29 -
Emsisoft 5.1.0.1 2011.01.29 -
eSafe 7.0.17.0 2011.01.27 -
eTrust-Vet 36.1.8126 2011.01.28 -
F-Prot 4.6.2.117 2011.01.29 -
F-Secure 9.0.16160.0 2011.01.29 -
Fortinet 4.2.254.0 2011.01.29 -
GData 21 2011.01.29 -
Ikarus T3.1.1.97.0 2011.01.29 -
Jiangmin 13.0.900 2011.01.29 -
K7AntiVirus 9.78.3680 2011.01.29 -
Kaspersky 7.0.0.125 2011.01.29 -
McAfee 5.400.0.1158 2011.01.29 -
McAfee-GW-Edition 2010.1C 2011.01.29 -
Microsoft 1.6502 2011.01.29 -
NOD32 5830 2011.01.29 -
Norman 6.06.12 2011.01.29 -
nProtect 2011-01-18.01 2011.01.18 -
Panda 10.0.3.5 2011.01.29 -
PCTools 7.0.3.5 2011.01.29 -
Prevx 3.0 2011.01.29 -
Rising 23.42.04.06 2011.01.28 -
Sophos 4.61.0 2011.01.29 -
SUPERAntiSpyware 4.40.0.1006 2011.01.29 -
Symantec 20101.3.0.103 2011.01.29 -
TheHacker 6.7.0.1.120 2011.01.26 -
TrendMicro 9.120.0.1004 2011.01.29 -
TrendMicro-HouseCall 9.120.0.1004 2011.01.29 -
VBA32 3.12.14.3 2011.01.29 -
VIPRE 8242 2011.01.29 -
ViRobot 2011.1.29.4282 2011.01.29 -
VirusBuster 13.6.171.1 2011.01.29 -
Additional information
Show all
MD5 : d8d0395cd729c47a7627469be3d3cf83
SHA1 : 8cc4c501e33a61bd7b9ea516d1aa4d13fdfc0f79
SHA256: a8bae7f94e815a276b100779bef8405ebe220786ddcf431d694e07da925904e4
ssdeep: 49152:IGaATZ5U8ZZ79Rx/rbN89GIry7BjqIy2dLc7J3iQ0t:V9TZ5U839r/HuhrEBj9LaJ3/G
File size : 2594922 bytes
First seen: 2007-11-30 20:52:17
Last seen : 2011-01-29 21:32:43
Magic: PE32 executable for MS Windows (GUI) Intel 80386 32-bit
TrID:
86.9% (.EXE) Win32 Executable PowerBASIC/Win 9.x (148303/79/28)
5.0% (.EXE) Win32 Executable Generic (8527/13/3)
4.4% (.DLL) Win32 Dynamic Link Library (generic) (7583/30/2)
1.2% (.EXE) Win16/32 Executable Delphi generic (2072/23)
1.1% (.EXE) Generic Win/DOS Executable (2002/3)
sigcheck:
publisher....: Decompiler-vb.net
copyright....: Copyright (C) Decompiler-VB.net - Sylvain Bruyere
product..: n/a
description..: VBReFormer 2007 Free Setup
original name: n/a
internal name: n/a
file version.:
comments..: This installation was built with Inno Setup: http://www.innosetup.com
signers..: -
signing date.: -
verified..: Unsigned
PEiD: -
packers (Kaspersky): Ezip, PE_Patch.UPX, UPX
PEInfo: PE structure information
[[ basic data ]]
entrypointaddress: 0x98D8
timedatestamp....: 0x2A425E19 (Fri Jun 19 22:22:17 1992)
machinetype..: 0x14C (Intel I386)
[[ 8 section(s) ]]
name, viradd, virsiz, rawdsiz, ntropy, md5
CODE, 0x1000, 0x8FFC, 0x9000, 6.59, ed788fae7220cb2d4e9b894f08f57acf
DATA, 0xA000, 0x248, 0x400, 2.7, 99e336618097147f412e273fe8efec29
BSS, 0xB000, 0xE34, 0x0, 0.0, d41d8cd98f00b204e9800998ecf8427e
.idata, 0xC000, 0x950, 0xA00, 4.43, bd5bdc394dd9459844ea032b48349bc1
.tls, 0xD000, 0x8, 0x0, 0.0, d41d8cd98f00b204e9800998ecf8427e
.rdata, 0xE000, 0x18, 0x200, 0.2, d293bf8d4ebe9826d58e1d27c25fe4b6
.reloc, 0xF000, 0x8A0, 0x0, 0.0, d41d8cd98f00b204e9800998ecf8427e
.rsrc, 0x10000, 0x6DC8, 0x6E00, 5.13, cb86db7079baf8f926bcf021d6e50971
[[ 5 import(s) ]]
advapi32.dll: RegQueryValueExA, RegOpenKeyExA, RegCloseKey, OpenProcessToken, LookupPrivilegeValueA
comctl32.dll: InitCommonControls
kernel32.dll: DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSection, VirtualFree, VirtualAlloc, LocalFree, LocalAlloc, WideCharToMultiByte, TlsSetValue, TlsGetValue, MultiByteToWideChar, GetModuleHandleA, GetLastError, GetCommandLineA, WriteFile, SetFilePointer, SetEndOfFile, RtlUnwind, ReadFile, RaiseException, GetStdHandle, GetFileSize, GetSystemTime, GetFileType, ExitProcess, CreateFileA, CloseHandle
oleaut32.dll: VariantChangeTypeEx, VariantCopyInd, VariantClear, SysStringLen, SysAllocStringLen
user32.dll: MessageBoxA
CWSandbox:
http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=d8d0395cd729c47a7627469be3d3cf83
ExifTool:
file metadata
CharacterSet: Windows, Latin1
CodeSize: 36864
Comments: This installation was built with Inno Setup: http://www.innosetup.com
CompanyName: Decompiler-vb.net
EntryPoint: 0x98d8
FileDescription: VBReFormer 2007 Free Setup
FileFlagsMask: 0x003f
FileOS: Win32
FileSize: 2.5 MB
FileSubtype: 0
FileType: Win32 EXE
FileVersion:
FileVersionNumber: 0.0.0.0
ImageVersion: 0.0
InitializedDataSize: 32256
LanguageCode: English (U.S.)
LegalCopyright: Copyright (C) Decompiler-VB.net - Sylvain Bruyere
LinkerVersion: 2.25
MIMEType: application/octet-stream
MachineType: Intel 386 or later, and compatibles
OSVersion: 1.0
ObjectFileType: Executable application
PEType: PE32
ProductVersionNumber: 0.0.0.0
Subsystem: Windows GUI
SubsystemVersion: 4.0
TimeStamp: 1992:06:20 00:22:17+02:00
UninitializedDataSize: 0
Possible infected or false detection.
Im having an extremely laugh at the sig of post #8 and #9. Hahahaha! Wtf! Omg can't breathe
|