Afternoon Experts,
I need to look at some compiled c code.
Can anyone recommend a good C De-Compiler ?
Ta,
Milan.
I need to look at some compiled c code.
Can anyone recommend a good C De-Compiler ?
Ta,
Milan.
-
-
You can disassemble object code to assembly fairly easily but getting back to C is approximate at best.
There are so called decompilers out there but bit of a waste of time IMO. You also need to specify platform...While you're waiting, read the free novel we sent you. It's a Spanish story about a guy named 'Manual.' -
Someone walked off with the source code? Or was it 'archived'?
"I can put any old tat in my sig, put quotes around it and attribute to someone of whom I've heard, to make it sound true."
- Voltaire/Benjamin Franklin/Anne Frank...Comment
-
If you're on solaris you can use dtrace to trace execution, function entry and exit and so on.
If the executable has debug info in you can attach a debugger (you can do it without debug info but it's not as useful)
Strings will dump the string table.
Both of those will give you some insight into what it does.While you're waiting, read the free novel we sent you. It's a Spanish story about a guy named 'Manual.'Comment
-
For what architecture? Intel? ARM? Motorola?Originally posted by milanbenes View Post
Also, is the compiled code in intermediate binary files, which can easily be parsed as these files have a documented structure with short parcels of data and code etc, or is it an executable file?
In the latter case, does the program use dynamic/shared linked libraries, or is the relevant library code embedded statically in the EXE file itself?
An EXE program with embedded library code is next to impossible to decompile, because the actual code is a small proportion of the whole, and very hard to distinguish from the library code, unless the file also includes symbol tables.
IDA (formerly called IDA Pro) is the most well known, and I think that can recognise code from many standard embedded libraries
Also, do you really mean C, or is it C++? A disassembly of the latter will be _much_ harder to follow, due to all the crud and bells and whistles automatically associated with the code.
In general, disassembly of an executable program of any significant length, without a symbol table or patterns of disassembled earlier similar versions available, is _very_ hard, painstaking, and time-consuming work, and often well-nigh impossible!
edit: If you have a serious requirement for this, for example if some baboon has lost vital source code which you have to reconstruct, I have a fair bit of experience and might be available for some freelance work in the evening if you'd like to PM me with details. (I once wrote my own Intel disassembler, so I know the Intel instruction set backwards) But I'm not promising anything!Last edited by OwlHoot; 25 January 2013, 17:11.Work in the public sector? Read the IR35 FAQ hereComment
-
What you doing messing with that tulipOriginally posted by milanbenes View Post
You want to get into .Net
Comment
-
IDA is best.Comment
-
It'll be for an HP Printer.Originally posted by doodab View PostWhat happens in General, stays in General.You know what they say about assumptions!Comment
-
Looks like Milan's been bungey posting again, judging by his conspicuous absence.
He's probably forgotten all about this thread by now.
Work in the public sector? Read the IR35 FAQ hereComment
-
PM threaded. He'll knock one up for you tomorrow lunchtime.Originally posted by milanbenes View PostComment
Comment