decrypting .exe files

Jim .E. · 12-13-2005, 11:14 PM

just wondering if its possible to view the code that lies in a .exe file...i dont mean the ASCII gibberish you get from opening it in Notepad...i mean a way to see actual readable code

Jim .E. · 12-13-2005, 11:19 PM

to be more sepcific i think the file was made in vb6 (visual basic 6)

Axxe · 12-13-2005, 11:20 PM

Trying to reverse-engineer a programming assignment? Been there, couldn't decrypt it.

12-13-2005, 11:21 PM

you can't really decript them, there are very limited amount of programs out there made for this task, and I've done this many times you will never ever get perfect code. Just doesn't work that way, you'll get 80% garbage, maybe 15% code and the rest is total dead, don't bother, so if your trying to copy someone elses project for homework, I'd get busy working

Jim .E. · 12-13-2005, 11:23 PM

not copying work, for CS part of a cyber league called ESEA and they make us run a client and i wanted to see how that client can force so much stuff out and why i cant join normal servers with it running

BTW homework season is over its exam period

besides we learn JAVA at york, not VB6

Justin e36 · 12-13-2005, 11:25 PM

Depends, 8bit executables can be modified using a hex editor to modify values / erase values. makes cracking software quite easy.

If you want to modify 16-bit Win32 executables (such as VB6 compiled applications) then you can use Resource Hacker (http://www.angusj.com/resourcehacker/) which will allow you to modify StringTables, Accelerators, Delphi Forms and other resources. Its useful if you have any applications that have banners you'd like removed. (such as ICQ). Just open it up, change the forms so there are no more banners.. and save.

Unfortunately neither of these will really do what you want. An executable itself really can't be decompiled back into high level source code.

J

jstalin · 12-14-2005, 08:37 AM

There are programs that will decrypt exe's, but there's different programs depending on which language the exe was created with. If you want details, I'll let you know tonight coz I've got some of those programs on me home comp

JazzM · 12-14-2005, 09:03 AM

You can decompile an executable. I guess that's what you're intending on doing. However you will get ASM code from it which you can then recompile again into your own executable if that's what you wish to do.

T.

**SickFinga** · 12-14-2005, 01:45 PM

You won't decompile VB6 exe back to the code, you can forget about it now.
There are decompilers for VB4 files that were able to do that.

Since it is VB6 code you are pretty much screwed.
ResHack won't show any useful info. Olly or w32dasm wont show anything either.

Jim.E, what do you mean forcing stuff out?? Do you mean sending stuff over the internet? Install a sniffer and see what its sending out.

rhythm · 12-14-2005, 02:47 PM

If this were the case, wouldn't we all have stolen code for windows, office and game engines?

Jim .E. · 12-14-2005, 04:55 PM

Quote:

Originally Posted by SickFinga

You won't decompile VB6 exe back to the code, you can forget about it now.
There are decompilers for VB4 files that were able to do that.

Since it is VB6 code you are pretty much screwed.
ResHack won't show any useful info. Olly or w32dasm wont show anything either.

Jim.E, what do you mean forcing stuff out?? Do you mean sending stuff over the internet? Install a sniffer and see what its sending out.

its forcing stuff like:
- cant change configs
- cant 16-bit (low quality graphics)

its acting like a registry and removing stuff, if you go in CS and video options you can switch between 16/32 bit...ESEA Client locks that feature so you cant change it...also it uses a method called "hook" in where it checks my user id/password to see if i have access to the servers...if i try to join a normal server the hook method cant work and it just crashes the connection and says restart cs to join normal servers