 |
Cheat Engine
The Official Site of Cheat Engine
|
| View previous topic :: View next topic |
| Author |
Message |
ven·om·ous
Grandmaster Cheater Supreme
![]() Reputation: 0
Joined: 29 Sep 2007
Posts: 1441
|
 Posted: Sun Dec 23, 2007 8:49 pm Post subject: Decompiling a .dll |
 |
|
| How would I go about decompiling a .dll, not knowing what it was made in and compiled with?
|
|
| Back to top |
|
 |
sponge
I'm a spammer
 Reputation: 1
Joined: 07 Nov 2006
Posts: 6009
|
| Posted: Sun Dec 23, 2007 9:56 pm Post subject: |
|
|
you can't decompile.
_________________
|
|
| Back to top |
|
|
ven·om·ous
Grandmaster Cheater Supreme
![]() Reputation: 0
Joined: 29 Sep 2007
Posts: 1441
|
| Posted: Sun Dec 23, 2007 10:09 pm Post subject: |
|
|
| Oh, thanks anyways.
|
|
| Back to top |
|
|
atom0s
Moderator
 Reputation: 205
Joined: 25 Jan 2006
Posts: 8587
Location: 127.0.0.1
|
| Posted: Mon Dec 24, 2007 12:14 am Post subject: |
|
|
| sponge wrote: | | you can't decompile. |
Depends on the language it's written in.
_________________
- Retired. |
|
| Back to top |
|
|
rump
Expert Cheater
![]() Reputation: 0
Joined: 03 Oct 2007
Posts: 169
|
| Posted: Mon Dec 24, 2007 1:41 pm Post subject: |
|
|
using decompilers from "google" you can see what the code means, but not the code itself
_________________
C# boot camp, PM me if you want a simple application made and I'll give it a try! |
|
| Back to top |
|
|
samuri25404
Grandmaster Cheater
 Reputation: 7
Joined: 04 May 2007
Posts: 955
Location: Why do you care?
|
| Posted: Mon Dec 24, 2007 3:10 pm Post subject: |
|
|
I think he means "dissasembled".
If it's in .NET, you should use Lutz Roeder's disassebler (Gewgle), if not, then try OllyDBG or CE, but I'm not sure where it'll get you
_________________
|
|
| Back to top |
|
|
atom0s
Moderator
Reputation: 205
Joined: 25 Jan 2006
Posts: 8587
Location: 127.0.0.1
|
| Posted: Mon Dec 24, 2007 4:41 pm Post subject: |
|
|
| samuri25404 wrote: | I think he means "dissasembled".
If it's in .NET, you should use Lutz Roeder's disassebler (Gewgle), if not, then try OllyDBG or CE, but I'm not sure where it'll get you |
There are tons of decompilers for .NET (C#, VB, etc.) which will decompile all the way back to the source. (It might not be 100% the same, but it is close enough to understand fully.)
For other languages, there are decompilers that either wont get as far and tell you basics, along with some disassembling but not the full source. VB6 would be one of these languages. You can decompile enough to obtain the object names, some of the strings, the API calls, and a few other things, but you wont get back to the full source.
For example, a VB6 project:
| Code: | Option Explicit
Private Sub Command1_Click()
If 1 = 1 Then
MsgBox "1 equals 1!"
End If
End Sub |
Very basic, the most you will get from this is something like:
| Code: | Private Sub Command1_Click() '4019D0
loc_004019F5: var_08 = &H401080
loc_00401A01: and ecx, 00000001h
loc_00401A04: var_04 = arg_08
loc_00401A07: and al, FEh
loc_00401A0A: arg_08 = arg_08
loc_00401A0F: call edx+04h(arg_08, edi, esi, ebx, fs:[00h], MSVBVM60.DLL.__vbaExceptHandler, ebp)
loc_00401A19: var_4C = 80020004h
loc_00401A21: var_3C = 80020004h
loc_00401A24: var_2C = 80020004h
loc_00401A45: var_5C = "1 equals 1!"
loc_00401A4C: var_64 = 8
loc_00401A6A: MsgBox("1 equals 1!", esi, 10, 10, 10)
loc_00401A93: GoTo loc_401AB1
loc_00401AB0: ret
loc_00401AB1: 'Referenced from 00401A93
loc_00401AB1: ret
loc_00401AB8: call ecx+08h(arg_08)
loc_00401ACE: retn 0004h
End Sub |
Other languages are similar as well, such as Delphi.
_________________
- Retired. |
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
