Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   how can i decompile exe file created in Microsoft Visual C++ 6.0 [Ov (https://forum.exetools.com/showthread.php?t=12719)

CRM 04-02-2010 02:51

how can i decompile exe file created in Microsoft Visual C++ 6.0 [Ov
 
how can i decompile exe file created in Microsoft Visual C++ 6.0 [Overlay]

DARKER 04-02-2010 04:12

You can try it with this tool (not tested):

The C-Decompiler is a x86-based C/C++ language decompiler, which reads the PE file, outputs the corresponding C/C++ code. Currently, the basic decompile function of C language has been completed. This version can decompile the 56 test examples.Mostly of them are build by VC2003, others are build by VC6, VC2005, VC2008.

Home & Download:
http://www.c-decompiler.com/en/index.html

Preview:
http://www.c-decompiler.com/en/news/c-decompiler1_1.shtml

CRM 04-02-2010 05:03

THANKS FOR REPLY DARKER BUT MY PROBLEM IS NOT SOLVE
BECAUSE I GIVE YOU LINK ONE SOFTWARE
IN THIS SOFTWARE OLD VERSION ALL DATA SHOWING IN ANY HEX EDITOR BUT THIS SOFTWARE NEW VERSION ALL DATA IN ENCRYPED (ALL DATA SHOWING IN "EEEEEEEEEEEE" BY ANY HEX EDITOR I CHANGE ONE VALUE THAN SAVE SOFTWARE BUT SOFTWARE NOT RUN ANOTHER THAN SAY INVALID EXECUTABLE FILE BUT IN OLD VERSION AFTER CHANGING WORK PROPERLY MY PROBLEM IS HOW CAN I DECRYPT THIS ALL VALUE AND AFTER CHANGING NEW SOFTWARE RUN PROPERLY.
LINKS:-
OLD VERSION:-http://www.4shared.com/file/254743807/2cfb5f6c/software_old_ver.html
LINKS:-
NEW VERSION:-http://www.4shared.com/file/254731367/6edd0390/software_new_ver.html

PLEASE CHECK
THANKS IN ADVANCE.
AND
THIS FILE CREATED IN Microsoft Visual C++ 6.0 [Overlay] I CHECK USING PEiD TOOL.

SaNX 04-05-2010 02:38

Quote:

Originally Posted by CRM (Post 67445)
how can i decompile exe file created in Microsoft Visual C++ 6.0 [Overlay]

Strange question. Of course, the best choice is IDA.

If you want full decompiled source (that you can compile), you have to do it yourself. No program can do it ;)

jonwil 04-06-2010 22:42

IDA + HexRays is the best option for decompiling x86 PE files right now.

piccolo 04-08-2010 06:46

The only alternatives are rec with recstudio and boomerang. Rec is not really that good and crashes on various occasions. Boomerang is not that good either. I suspect idapro to be using an altered version of the rec code tho since the output from ida looks a lot like rec.

alephz 05-03-2010 23:20

Quote:

Originally Posted by CRM (Post 67445)
Microsoft Visual C++ 6.0 [Overlay]

Were you got that message? Some times it just Installer package (Sfx stub + [encrypted] archive or smth like).

And any way, IDA, IMHO is a best choice.


All times are GMT +8. The time now is 20:30.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX