Exe Decompiler Online

 admin
Exe Decompiler Online Average ratng: 3,5/5 1956 votes

About

VB Decompiler is a decompiler for programs (EXE, DLL, or OCX) written in Visual Basic 5.0 or 6.0.As you know, a VB program can be compiled either into interpreted p-code or into native code. Since p-code consists of high-level commands, it's possible to decompile it into source code (though, of course, you won't get the names of variables. Dll Decompiler provides professional DLL/EXE decompile services and tools. We have over five years of experience in software reverse engineering. Our professional and experienced team will work with you from beginning to end to help you design and complete a project.

Snowman is a native code to C/C++ decompiler, see the examples of generated code. This talk gives a brief explanation of how it works.

Standalone Version

Decompiling executable files, no matter the programming language they have been compiled in, is a tedious job. DeDe (Delphi Decompiler) brags on performing this particular task fast and neat. Navigate through and inspect decompiled code online without installing anything. F#, Visual Basic, C# decompiler.exe and.dll.NET decompilation back to C# project. To answer your question 'Can I end up with the original source code in a way I can finish the coding of the missing items and recompile again?' : if it runs on your system, it means you have all the dependencies needed and you'll be able to decompile to a state where you can edit and recompile at will.

  • Supports ARM, x86, and x86-64 architectures.

  • Reads ELF, Mach-O, and PE file formats.

  • Reconstructs functions, their names and arguments, local and global variables, expressions, integer, pointer and structural types, all types of control-flow structures, including switch.

  • Has a nice graphical user interface with one-click navigation between the assembler code and the reconstructed program.

  • Has a command-line interface for batch processing.

IDA Plug-in

  • Enjoys all executable file formats supported by the disassembler.

  • Benefits from IDA’s signature search, parsers of debug information, and demanglers.

  • Decompiles a chosen function or the whole program by push of a button.

  • Allows easy jumping between the disassembler and the decompiled code.

  • Fully integrates into IDA’s GUI.

Download

  • v0.1.3 (19 October 2018)

    • Standalone: Windows x86-64, Windows x86.

    • IDA plug-in:

      • Windows: IDA 7.0, IDA 6.95, IDA 6.3-6.8, IDA 6.1,

      • Linux: IDA 7.0, IDA 6.95, IDA 6.3-6.8.

    • Sources.

    • List of changes.

  • v0.1.2 (7 January 2018)

    • Standalone: Windows x86-64, Windows x86.

    • IDA plug-in:

      • Windows: IDA 7.0, IDA 6.95, IDA 6.3-6.8, IDA 6.1,

      • Linux: IDA 7.0, IDA 6.95, IDA 6.3-6.8.

    • Sources.

    • List of changes.

  • PGP public key, to verify the signatures of the git tags.

Installation Instructions

  • Standalone version you can just unpack and run.

  • IDA plug-in is installed by copying .plw, .p64, .plx, .dll, .so files to IDA’s plugins directory.

Usage Instructions

  1. Do not try to decompile large programs at once. Select a necessary part in the assembly listing and push Ctrl-E instead. Or better use the Snowman IDA plug-in.

  2. When using the IDA plug-in, press F3 to decompile the function under cursor.

Contacts

  1. To report a bug or request a feature, please create an issue.

  2. To submit a patch open a pull request.

Share some tips and experiences here.Keep the author's information and article links for sharing, reprinting or citing your hard work.

Author's environment:

win7+python3.5(anaconda3)

Theoretically, systems with win7 and above and any version of python are available.

1. Basic scripts

First, we build a simple script, such as output a series of numbers, text, and so on. Here we output a series of words and calculate the power of three times at the same time.

Save this script as mylib.py and run it: /bend-tech-free-download.html.

As you can see, the script is working correctly.

For demonstration purposes, we create a new script into the main.py script file and import the test function from mylib.

2. Package as exe using PyInstaller

Package it as a single exe using the following command (remove-F is not a single exe)

The packaging process is as follows:

Finally, build, disk folders are generated in the directory.Where exe file is in disk.It is working properly.As follows:

3. Decompiled Pyinstaller packaged exe

Exe Decompiler Online

Such exe s can already be migrated to other computers for use, and this is the end if it is for the convenience of other computers.Sometimes, however, we may use this feature for many people, but if you don't want to open source or be cracked by others, this is not enough.

Because at this point exe can be decompiled by others.

Tools used here:

exe decompile tool: pyinstxtractor.py: Click here to download

pyc decompile tool: Easy Python Decompiler Or decompile pyc online.

Place pyinstxtractor.py in the same directory as the exe file and execute the following cmd command:

Visual Basic Exe Decompiler Online

If executed successfully, a new decompiled folder, main.exe_extracted, will be generated in the same directory, as shown below:

At the same time, we can find the mylib module, which was introduced by exe at that time, in pyc format, in the path circled below.

pyc format file, decompile is very simple.Using the tools provided in the previous section or finding an online minute decompile on the web, let's look at the results of the decompilation:

As you can see, the source code is basically decompiled perfectly.Where Chinese is involved, coding problems will change.But the non-Chinese part is almost the same.

Ask you if you are afraid!!!

4. Compile scripts as pyd to prevent decompiling

Fear, hath.

How to solve this problem, consider compiling the module py file into a dynamic link library, which makes cracking more difficult.In python, the pyd format is a dynamic link library.Use cython to compile, and if anaconda comes with it, some pythons may not have cython, just install it:

We create a new py file in the folder where main.py is located. Here I name it build_pyd.py, which reads as follows:

Java Exe Decompiler Online

Then execute the following cmd command:

The process and results are illustrated below, with the red-box PYD file compiled.Since I am a 64-bit system and python, an amd64 suffix is generated, so we can rename this deletion to mylib.pyd.

Note: When both mylib.pyd and mylib.py exist, the import priority is pyd>py, so PYD is the default import without removing the PY file.

At this point, we delete the build, disk folders, repeat Step 2, and compile to exe again.

Note: Compilation requires a relevant VC environment, as Python 3.5 is based on the VS14 version, so I installed it here as well.It cannot be compiled without installation.

You can verify that:

After decompiling main.exe again, mylib.pyc could not be found under the original path E:tdistmain.exe_extractedout00-PYZ.pyz_extracted.

Because he is no longer a file that can be decompiled directly.

Where is he? He exists in the upper directory as a pyd.As follows:

pyd's decompilation is quite difficult, so you're done!

Reference link: https://www.lizenghai.com/archives/898.html

https://blog.csdn.net/zy841958835/article/details/79446871

https://blog.csdn.net/HW140701/article/details/93494869 (pyinstaller-F--key=***encrypted pyc prevents decompilation) pycropto needs to be installed during this process, which is cumbersome to install: https://www.cnblogs.com/xiohao/p/11216271.html)

Python Exe Decompiler Online

Added by friday_13 on Fri, 02 Aug 2019 03:46:14 +0300