New answers tagged decompile
0
Kevin,
As I answered on your last question:
open ghidra gui, analyse the binary, click on file -> export program -> and export as a C/C++ file.
In this file, ghidra constructs possible typedefs for you.
For e.g. typedef unsigned char undefined1;
So, you'll know the possible type of this object. In your particular case, it constructs (assuming a ...
3
Kevin,
ls comes in coreutils. The best way to experiment with these programs is to download and manually build the binaries (in this way you can give your favorite options like -g, -O3 during compilation).
Anyways, coming back to your question, assuming you want to decompile /usr/bin/ls (that's what I get from your comments on Pawel's answer), then open ...
3
From the decompiler view it cleary states there's no function. Decompiler works when you have one - it shows code of a function.
So, if that's the beginning of a function (it might be) just create it by pressing F (or right click, Create Function) while your cursor is on the line that is the beginning of this function. After that the decompiler view should ...
2
It's possible that the pyc file is obfuscated/malformed in a way that it trips uncompyle6. Rather than decompiling you can try disassembling the file instead.
The dis module can disassemble Python bytecode. You can use it as follows.
import marshal, dis
f = open("flag.pyc", "rb")
f.seek(16) # Skip 16 byte header (for Python 3.8)
co = marshal.load(f)
print(...
Top 50 recent answers are included
