- Version:
Welcome to the Retargetable Decompiler 's Home Page. RetDec is an open-source machine-code decompiler based on LLVM. The decompiler is not limited to any particular target architecture, operating system, or executable file format. A lightweight, online service for when you don’t have the time, resources, or requirements to use a heavier-weight alternative. Explore executables by dissecting its sections, strings, symbols, raw hex and machine level instructions. Dll Decompiler provides professional DLL/EXE decompile services and tools. Adobe flash player for xp free download. We have over five years of experience in software reverse engineering. Our professional and experienced team will work with you from beginning to end to help you design and complete a project. Technical Articles.
VB Decompiler. VB Decompiler is a decompiler for programs (EXE, DLL, or OCX) written in Visual Basic 5.0 or 6.0.As you know, a VB program can be compiled either into interpreted p-code or into native code. Since p-code consists of high-level commands, it's possible to decompile it into source code (though, of course, you won't get the names of variables, functions, etc.). It is exceptional in the industry in that it is particularly user-friendly and it provides the very best in efficiency and performance. The Spices.Net Decompiler is both flexible and thoroughly well optimized, allowing developers to quickly and easily convert.Net binaries. ODA is an online disassembler for a wide range of machine architectures, including: Alpha, ARM, AVR, Intel x86, Motorola 68000, MIPS, PDP-11, PowerPC, SPARC, Z80, and more! Upload a Windows PE file, ELF, or raw binary and then view the disassembly and object file meta date such as symbols and sections.
We’ve noticed that JavaScript is disabled in your web browser. Please enable JavaScript in order to take advantage of all the features of this website.
Download dotPeek web installer or standalone installer for windows32, windows64.
Download dotPeek web installer or standalone installer for windows32, windows64.
Free, no license key required.
You will need an active Internet connection to proceed with installation.
dotPeek is available for free, with no license key required. Free trials are available for other products included in ReSharper Ultimate.
In the ReSharper Ultimate installer, please select products to install or update, as well as versions of Visual Studio you want these products integrated into.
If you have an existing installation of any ReSharper Ultimate tool, please mind ReSharper Ultimate compatibility limitations.
By using the product, you accept dotPeek License Agreement.
Active1 year, 7 months ago
A friend of mine downloaded some malware from Facebook, and I'm curious to see what it does without infecting myself. I know that you can't really decompile an .exe, but can I at least view it in Assembly or attach a debugger?
Edit to say it is not a .NET executable, no CLI header.
swilliamsswilliams35.6k2222 gold badges8989 silver badges129129 bronze badges
15 Answers
With a debugger you can step through the program assembly interactively.
With a disassembler, you can view the program assembly in more detail.
With a decompiler, you can turn a program back into partial source code, assuming you know what it was written in (which you can find out with free tools such as PEiD - if the program is packed, you'll have to unpack it first OR Detect-it-Easy if you can't find PEiD anywhere. DIE has a strong developer community on github currently).
With a disassembler, you can view the program assembly in more detail.
With a decompiler, you can turn a program back into partial source code, assuming you know what it was written in (which you can find out with free tools such as PEiD - if the program is packed, you'll have to unpack it first OR Detect-it-Easy if you can't find PEiD anywhere. DIE has a strong developer community on github currently).
Debuggers:
- OllyDbg, free, a fine 32-bit debugger, for which you can find numerous user-made plugins and scripts to make it all the more useful.
- WinDbg, free, a quite capable debugger by Microsoft. WinDbg is especially useful for looking at the Windows internals, since it knows more about the data structures than other debuggers.
- SoftICE, SICE to friends. Commercial and development stopped in 2006. SoftICE is kind of a hardcore tool that runs beneath the operating system (and halts the whole system when invoked). SoftICE is still used by many professionals, although might be hard to obtain and might not work on some hardware (or software - namely, it will not work on Vista or NVIDIA gfx cards).
Disassemblers:
- IDA Pro(commercial) - top of the line disassembler/debugger. Used by most professionals, like malware analysts etc. Costs quite a few bucks though (there exists free version, but it is quite quite limited)
- W32Dasm(free) - a bit dated but gets the job done. I believe W32Dasm is abandonware these days, and there are numerous user-created hacks to add some very useful functionality. You'll have to look around to find the best version.
Decompilers:
- Visual Basic: VB Decompiler, commercial, produces somewhat identifiable bytecode.
- Delphi: DeDe, free, produces good quality source code.
- C: HexRays, commercial, a plugin for IDA Pro by the same company. Produces great results but costs a big buck, and won't be sold to just anyone (or so I hear).
- .NET(C#): dotPeek, free, decompiles .NET 1.0-4.5 assemblies to C#. Support for .dll, .exe, .zip, .vsix, .nupkg, and .winmd files.
Some related tools that might come handy in whatever it is you're doing are resource editors such as ResourceHacker (free) and a good hex editor such as Hex Workshop (commercial).
Additionally, if you are doing malware analysis (or use SICE), I wholeheartedly suggest running everything inside a virtual machine, namely VMware Workstation. In the case of SICE, it will protect your actual system from BSODs, and in the case of malware, it will protect your actual system from the target program. You can read about malware analysis with VMware here.
Personally, I roll with Olly, WinDbg & W32Dasm, and some smaller utility tools.
Also, remember that disassembling or even debugging other people's software is usually against the EULA in the very least :)
Exe Decompiler Online Game
psoul's excellent post answers to your question so I won't replicate his good work, but I feel it'd help to explain why this is at once a perfectly valid but also terribly silly question. After all, this is a place to learn, right?
Modern computer programs are produced through a series of conversions, starting with the input of a human-readable body of text instructions (called 'source code') and ending with a computer-readable body of instructions (called alternatively 'binary' or 'machine code').
The way that a computer runs a set of machine code instructions is ultimately very simple. Each action a processor can take (e.g., read from memory, add two values) is represented by a numeric code. If I told you that the number 1 meant scream and the number 2 meant giggle, and then held up cards with either 1 or 2 on them expecting you to scream or giggle accordingly, I would be using what is essentially the same system a computer uses to operate.
A binary file is just a set of those codes (usually call 'op codes') and the information ('arguments') that the op codes act on.
Now, assembly language is a computer language where each command word in the language represents exactly one op-code on the processor. There is a direct 1:1 translation between an assembly language command and a processor op-code. This is why coding assembly for an x386 processor is different than coding assembly for an ARM processor.
Disassembly is simply this: a program reads through the binary (the machine code), replacing the op-codes with their equivalent assembly language commands, and outputs the result as a text file. It's important to understand this; if your computer can read the binary, then you can read the binary too, either manually with an op-code table in your hand (ick) or through a disassembler.
Disassemblers have some new tricks and all, but it's important to understand that a disassembler is ultimately a search and replace mechanism. Which is why any EULA which forbids it is ultimately blowing hot air. You can't at once permit the computer reading the program data and also forbid the computer reading the program data.
(Don't get me wrong, there have been attempts to do so. They work as well as DRM on song files.)
However, there are caveats to the disassembly approach. Variable names are non-existent; such a thing doesn't exist to your CPU. Library calls are confusing as hell and often require disassembling further binaries. And assembly is hard as hell to read in the best of conditions.
Most professional programmers can't sit and read assembly language without getting a headache. For an amateur it's just not going to happen.
Anyway, this is a somewhat glossed-over explanation, but I hope it helps. Everyone can feel free to correct any misstatements on my part; it's been a while. ;)
Jason LJason L2,49733 gold badges1717 silver badges1818 bronze badges
Good news. IDA Pro is actually free for its older versions now:http://www.hex-rays.com/idapro/idadownfreeware.htm
MatthewMatthew
Any decent debugger can do this. Try OllyDbg. (edit: which has a great disassembler that even decodes the parameters to WinAPI calls!)
Nov 10, 2015 There aren't any on Xbox One(and probably won't be) but Dynasty Warriors Gundam 1-3 and Operation Troy are on Xbox 360. Gundam video games for xbox one. The popularity of the Japanese anime metaseries Mobile Suit Gundam since its release in 1979 has resulted in a spread of merchandise across various forms, with video games among them. This is a list of video games that are set in the franchise's various timelines, and are segregated by the console systems they were released for.
utku_karatasutku_karatas4,29233 gold badges3636 silver badges5050 bronze badges
x64dbg
is a good and open source debugger that is actively maintained.7,44144 gold badges5959 silver badges7676 bronze badges
Sure, have a look at IDA Pro. They offer an eval version so you can try it out.
Douglas MayleDouglas Mayle14.3k77 gold badges3939 silver badges5555 bronze badges
If you are just trying to figure out what a malware does, it might be much easier to run it under something like the free tool Process Monitor which will report whenever it tries to access the filesystem, registry, ports, etc..
Also, using a virtual machine like the free VMWare server is very helpful for this kind of work. Gta 5 download for pc without license key. You can make a 'clean' image, and then just go back to that every time you run the malware.
joeldjoeld18.1k33 gold badges2323 silver badges2222 bronze badges
Vb Exe Decompiler Online
What you want is a type of software called a 'Disassembler'.
Quick google yields this: http://www.geocities.com/~sangcho/disasm.html
Chris Marasti-Georg27.6k1515 gold badges8484 silver badges125125 bronze badges
Corey TragerCorey Trager16.9k1414 gold badges7777 silver badges120120 bronze badges
You may get some information viewing it in assembly, but I think the easiest thing to do is fire up a virtual machine and see what it does. Make sure you have no open shares or anything like that that it can jump through though ;)
Rob ProuseRob Prouse18.6k44 gold badges5454 silver badges8282 bronze badges
Andru LuvisiAndru Luvisi20k66 gold badges4646 silver badges6161 bronze badges
I can't believe nobody said nothing about Immunity Debugger, yet.
Immunity Debugger is a powerful tool to write exploits, analyze malware, and reverse engineer binary files. It was initially based on Ollydbg 1.0 source code, but with names resoution bug fixed. It has a well supported Python API for easy extensibility, so you can write your python scripts to help you out on the analysis.
Also, there's a good one Peter from Corelan team wrote called mona.py, excelent tool btw.
jyzjyz4,23533 gold badges2525 silver badges3434 bronze badges
If you want to run the program to see what it does without infecting your computer, use with a virtual machine like VMWare or Microsoft VPC, or a program that can sandbox the program like SandboxIE
Joel LucsyJoel Lucsy7,68111 gold badge2424 silver badges3232 bronze badges
If you have no time, submit the malware to cwsandbox:
HTH
plan9assemblerplan9assembler
You can use dotPeek, very good for decompile exe file. It is free.
Do Nhu VyDo Nhu Vy20.4k1717 gold badges103103 silver badges144144 bronze badges