Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [decompile]

Process of translating an unstructured assembler program into a structured high-level language program (e.g. translation from x86 to C).

0
votes
0answers
19 views

View Data from a .dat file

I am doing working on a project of my own where I am using the data of a football game to calculate certain statistics on players. Long story short, I am having trouble extracting the data from the ...
6
votes
0answers
145 views

How do I reverse this firmware? 8-bit handheld console

I recently bought this chinese console that supposedly has 328 8-bit games. I want to understand the code and how it works to hack it and maybe load other ROMs. It has a chip covered in black epoxy ...
2
votes
0answers
62 views

How should I got about working out the format for this psp game?

I have been attempting to reverse engineer a format for a visual novel psp game ('Mirai Nikki RE: WRITE - 13 Ninme No Nikki Shoyuusha') and I have come to the understanding that the format works as a ...
0
votes
1answer
119 views

Android Reverse Engineering Network Traffic Stack Trace

Lets say an Android application sends out a traffic out to the server and expects a Json Response Request: https://server:port/userid=user1&token=randomstring7345 We want to replicate the ...
0
votes
0answers
15 views

Identification of Keywords a Program is Looking for in an initialization file

I currently have a piece of software that loads its options from an initialization file that is in ASCII format. There will be specific keywords that the program looks for to establish which options ...
2
votes
1answer
272 views

How to override c++ string class with LD_PRELOAD

i am trying to override predefined functions such as strcmp, getenv, etc. i already override some of them using LD_PRELOAD options. but i can't override string class, how can i override c++ string ...
0
votes
1answer
225 views

Decompile a DLL file from Microsoft Media Creation Tool

In this Superuser topic Windows 10 Media Creation Tool, how does it work?, it is possible to extract the URL from SetupMgr.dll. My question is, how do I extract this URL from SetupMgr.dll? I want to ...
0
votes
0answers
190 views

Dotpeek problem decompiling code?

As part of a reverse-engineering challenge on Hackthebox.eu I've tried to decompile a .net executable file. The entire program decompiled successfully but it has two errors. I will post below the ...
0
votes
0answers
45 views

How complete is a reverse engineered swf file? [duplicate]

Could I decompile a swf and load the result into say a flash develop project and it would compile without any errors?
0
votes
1answer
129 views

Reversing C# exe,Questions.Help

I am trying to debugging c# .NET application which receives a set of doubles and keep it as DataSeries every second. I want to rewrite its dataseries before the new data comes with my own dataset. ...
5
votes
1answer
349 views

Erlang Source file generation from .beam file

I have Erlang application's beam files which I want to decompile. Application is Compiled and build with 'debug_info' options. here is snippet of emake file to which is used to build application : {...
2
votes
0answers
132 views

What tool is able to analyze/decompile asm execution trace?

I got a trace of the execution from x64dbg and I need to analyze it. The problem is that the trace is quite large and there are quite big chunks of the code that repeat (I assume they are loops). I ...
1
vote
1answer
9k views

Can we decompile an .exe or .dll as %100? [closed]

Can we decompile a .exe or .dll file as 100%? Also sometimes seems some mistakes on somewhere (like mainfrm.cs) , how can we fix that? What is the best .NET decompiler? or What would you prefer? I ...
0
votes
1answer
335 views

Reverse engineer the update-binary file in Android recovery update packages

I am trying to understand how to disassemble or at least get a readable copy of the update-binary file located in /META-INF/com/google/android/. It is a modified version for a smartwatch, which ...
0
votes
1answer
468 views

I'd like to ask about unpacking aspack 2.12

I've tried to unpack program packed with aspack 2.12 manually by ollydbg,by setting breakpoint at RETN 0c. However whenever I tried to dump with ollydump, it sends error message like "unable to read ...
0
votes
1answer
498 views

How to assemble back a disassembled ChunkSpy LUA?

Is it possible to assemble back the ChunkSpy's dissembled LUA files? Here's an example: 0B50 05000000 [001] getglobal 0 0 ; script 0B54 C63E0000 [002] gettable 0 0 ...
1
vote
1answer
1k views

Decompiling 64bit ARMv8 Android .so library

I know IDA Pro can disassemble them to assembly code, but are there tools to decompile 64bit ARMv8 Android .so shared libraries to C?
0
votes
0answers
338 views

Why is IDAPython decompiler API returning the same effective address for both the current item and its parent?

Following this blog post, I am writing an IDAPython code to traverse the AST generated by the decompiler in order to extract some information. I am providing both my AST, the Python code and the ...
0
votes
1answer
51 views

Decompiling or Feature to Help Reverse FPU Instructions?

I've been running into a lot of FPU instructions from an old program I am trying to reverse engineer. It tends to be rather difficult to reverse when there is a huge section of FPU instructions, just ...
0
votes
0answers
98 views

Reassemble function that has its control flow chopped so that it can be decompiled by IDA

I try to decompile a function that is obfuscated by having split up the controlflow into asmblocks scattered around the .text section and connected by "jmpq" jumps. <func1>: 0: insn.. 1: ...
1
vote
2answers
482 views

Dlink DIR 600M firmware decompile issues

How to decompile the CGI & ROM files from the firmware bin? I am able to extract the HTML files using binwalk but the router OS and CGI files are missing. NOTE: Its not the same as DIR 600 ...
2
votes
5answers
17k views

Recover source code for C# .exe

I paid a freelancer programmer for an app to tun my clinic. He got about 95% of the project done, but then got a job elsewhere and vanished into thin air, along with my source code... So, I have a ...
1
vote
1answer
538 views

I'm decompiling an apk file to learn how the creator designed the UI for their app. Are these layout files obfuscated?

I'm new to decompiling apps. Most of the apps I decompile aren't very popular, so obfuscation hasn't been a problem yet. I'm not entirely sure what obfuscation looks like. The current app I'm looking ...
1
vote
1answer
828 views

Android - Analyzing complex hash algorithm

An APK I'm working on uses some sort of algorithm to generate a hash which is sent along with an HTTP request. I want to figure out how the algorithm works. Decompiling the APK to Java is of no help ...
0
votes
1answer
1k views

Extracting a .DAT file

I want to extract a chunk of text available in an android app. I disassembled the APK and found a .DAT file which seems to carry the text I'm looking for (the file was inside the directory res/raw/). ...
1
vote
2answers
10k views

How can I decompile an ARM Cortex-M0 .hex file to C++?

The source file is in intel 32 bit .hex format, it was built for a nuvoton NUC220LE3AE. I want to decompile it to C++, or at least assembly. I have some experience with assembly, but mostly with MIPS ...
8
votes
2answers
2k views

How to retrieve native asm code from .NET mixed mode dll file?

This is seriously one question I couldn't find the answer to anywhere on Google.com When I mean mixed mode I mean .NET application which has unmanaged and managed code together. I used tools .NET ...
-1
votes
3answers
716 views

ida decompiler output

double __cdecl sub_401660(float a1) { double v1; // st7@1 float v2; // ST00_4@1 float v4; // [sp+8h] [bp+4h]@1 float v5; // [sp+8h] [bp+4h]@1 v1 = a1; LODWORD(v2) = 0x5F3759DF - (SLODWORD(...
0
votes
1answer
1k views

Decompiling/Unpacking a Compiled/Packed File (Or Somehow Inserting a Flag)

I'm using a program that can pack/compile a folder with files into a single *.xyz file that only that program can decompile and read. In order for the program to create a compiled file the flag: [...
2
votes
0answers
1k views

Can IDA generate C code for ASM assembly wihtout the binary

Lets say I have this picture of some assembly: Now I know how to manual tranform this assembly into C code because it is small but is it possible for IDA to convert this into C code? Ideally I would ...
2
votes
0answers
285 views

Jar reversing: Can't open as zip file nor open it with common decompilers

I'm pentesting a JNLP application composed by several .jar files. I'm able to decompile with jd-gui every 3rd party library included in it, but the main .jar coded by my client. So after running JD-...
0
votes
1answer
105 views

Can Reverse Engineering produce code in a different language than the one the program was originally created?

Does Reverse Engineering always produces the source code in the same language the software was originally written? For example, if the software program(.exe) been reversed was written in C++, the ...
1
vote
2answers
392 views

What does this combination SCAS and STOS?

I have a simple snippet with several instructions: 01: mov edi, [ebp+8] 02: mov edx, edi 03: xor eax, eax 04: or ecx, 0FFFFFFFFh 05: repne scasb 06: add ecx, 2 07: neg ...
1
vote
1answer
309 views

ADC in ARM : What is the corresponding C?

I have the following 2 ARM instructions in a basic block which is part of a function that I'm trying to convert to C. ADDS r4, r2, r7 ADC r5, r3, r7, ASR#31 From my understanding, the first ...
-3
votes
1answer
247 views

What are the risks of running a decompiler? [closed]

I have a binary file which is potentially a virus and I wish to look into its internals. I need to be cautious as I don't want it to run on my system. That's why I ruled out gdb. I've searched and ...
1
vote
0answers
426 views

recompiling android app - native method not found

Been trying at this for over a week, and I'm able to modify the needed sections, however I'm running into a major issue while trying to recompile the APK that is making the whole task atrocious. So I'...
4
votes
3answers
11k views

Decompile ARM native binary - IDA Pro detects file as Shared Object

I am trying to decompile a Android ARM native binary using Hex-Rays IDA Pro. IDA detects the possible formats as ELF for ARM (Shared object) Binary file If I choose ELF for ARM (Shared object), ...
0
votes
2answers
1k views

While Loop Correct?

I am reversing some x86 from an old CTF from 2014 and am trying to understand the below code (it has been shortened drastically). I believe it is performing some sort of while or for loop through a ...
2
votes
1answer
929 views

Changing .SO files in android cause to damage the apk [closed]

i created an android app(simple cocos2d-x project) that in this project i have a method that takes a string and then render it, in initialize state of my app i pass the "abcde" as parameter to this ...
-1
votes
1answer
1k views

Error decompiling apk [closed]

Ive a problem. I am unable to decompile a game apk successfully. I am using apktool. I get many errors and but i get thw files. But then many of its smali files doesnt have a .end method in its code ...
1
vote
1answer
328 views

Cannot run game TERA crashes on mov dword ptr ds:[3],0Dh

My computer meets all the requirements to play this game, I even ran the tool that comes with this game and it passes all checks, even found my graphics card on the list. The game's URL is http://tera....
1
vote
1answer
173 views

Could this be a Math.Min function decompiled in C?

I'm working with a function thats similar to Memory Resize like realloc / redim in VB. The first 3 lines decompiled look like char *__cdecl ExpandMemory(void *lpAddress, signed int StartPos, signed ...
1
vote
0answers
54 views

Basic Concept misunderstood? [duplicate]

First of all, it may be that I am just not getting how things work. Stultus sum. I am using a Mac with OSX (10.9), therefore with x86_64 architecture. I wanted to play around a bit with compilers ...
5
votes
1answer
3k views

Decompiling/disassembling lua bytecode

I've been experimenting with decompiling Lua bytecode and found useful tools like unluac, and LuaAssemblyTools. Unluac seems to do the trick with lua scripts compiled with luac giving me almost the ...
1
vote
0answers
50 views

In theory, Hex-Rays CAN Decompile 16-bit code. But how? [duplicate]

A while back i e-mailed Hex-Rays about decompiling (obtaining pseudocode) from 16-bit functions ( 16bit code ). They replied in theory it can be done. Others have succeded, but Hex-Rays themselves ...
4
votes
1answer
901 views

How do i fine-tune Hex-Rays decompiler for 16-bit?

It is mentioned on the IDA Pro Hex-Rays site under decompiler error messages 16-bit functions are not supported It goes on to say: The decompiler itself CAN be fine tuned to decompile 16-bit ...
3
votes
3answers
2k views

How to call non-exported functions from dll?

I'm doing some reverse engineering of C++ dll. What I have achieved so far - is have a list of all functions inside and even source code (in pseudo-C or so) for most of them. Reading this source code ...
5
votes
1answer
416 views

LALR parsing : retrieve the grammar rules from the generated parsing tables

I have a quite old C corporate parser / compiler code that was generated from an ancient Yacc and the original grammar source is lost (as the intermediate files) the only result the ytab.c parser ...
12
votes
3answers
47k views

How to decompile Linux .so library files from a MS-Windows OS?

I would like to decompile the Linux .so files. Any tool to decompile .so files in MS-Windows based operating system ? Any tools/methods to decompile .so files ?
5
votes
1answer
4k views

Decompile and recompile C?

What tools produce C code that does not produce errors when you try to recompile it again? Can Hex-Rays decompiler convert everything to project files in a single folder and just compile it?