Sign in to follow this  
Followers 0
SmOke_N

Command Line Decompile

8 posts in this topic

If command line decompile is possible, could someone give me an example of it?


[center]Common sense plays a role in the basics of understanding AutoIt... If you're lacking in that, do us all a favor, and step away from the computer.[/center]

Share this post


Link to post
Share on other sites



snippet from EXE2AUT

/in

/out

/pass

00401772    68 74114100         PUSH Exe2Aut.00411174                             ; ASCII "/in"
00401777    50                   PUSH EAX
00401778    E8 23B60000         CALL Exe2Aut.0040CDA0
0040177D    59                   POP ECX
0040177E    85C0                   TEST EAX,EAX
00401780    59                   POP ECX
00401781    0F85 80000000         JNZ Exe2Aut.00401807
00401787    33FF                   XOR EDI,EDI
00401789    8D85 B4FBFFFF         LEA EAX,DWORD PTR SS:[EBP-44C]
0040178F    8BCE                   MOV ECX,ESI
00401791    50                   PUSH EAX
00401792    E8 B40A0000         CALL Exe2Aut.0040224B
00401797    8D85 B4FBFFFF         LEA EAX,DWORD PTR SS:[EBP-44C]
0040179D    68 78114100         PUSH Exe2Aut.00411178                             ; ASCII "/out"
004017A2    50                   PUSH EAX
004017A3    E8 F8B50000         CALL Exe2Aut.0040CDA0
004017A8    59                   POP ECX
004017A9    85C0                   TEST EAX,EAX
004017AB    59                   POP ECX
004017AC    75 10                 JNZ SHORT Exe2Aut.004017BE
004017AE    8D85 B0F7FFFF         LEA EAX,DWORD PTR SS:[EBP-850]
004017B4    50                   PUSH EAX
004017B5    8BCE                   MOV ECX,ESI
004017B7    E8 8F0A0000         CALL Exe2Aut.0040224B
004017BC    EB 25                 JMP SHORT Exe2Aut.004017E3
004017BE    8D85 B4FBFFFF         LEA EAX,DWORD PTR SS:[EBP-44C]
004017C4    68 80114100         PUSH Exe2Aut.00411180                             ; ASCII "/pass"

My UDF's:;mem stuff_Mem;ftp stuff_FTP ( OLD );inet stuff_INetGetSource ( OLD )_INetGetImage _INetBrowse ( Collection )_EncodeUrl_NetStat_Google;random stuff_iPixelSearch_DiceRoll

Share this post


Link to post
Share on other sites

-or- just run it from the commandline with /? as parameter. it will popup with the possible commandline parameters .. :P


Visit the SciTE4AutoIt3 Download page for the latest versions        Beta files                                                          Forum Rules
 
Live for the present,
Dream of the future,
Learn from the past.
  :)

Share this post


Link to post
Share on other sites

#4 ·  Posted (edited)

ah how could i have forgotton that :P

actually it is any parameter other then the ones above :lmao:

0012E288   00000000  /hOwner = NULL
0012E28C   0012E298  |Text = "Command Line Parameters: Exe2Aut.exe /in <infile.exe> [/out <outfile.au3>] [/pass <passphrase>]"
0012E290   004111D0  |Title  = "Aut2Exe"
0012E294   00010040  \Style = MB_OK|MB_ICONASTERISK|MB_APPLMODAL|10000
Edited by w0uter

My UDF's:;mem stuff_Mem;ftp stuff_FTP ( OLD );inet stuff_INetGetSource ( OLD )_INetGetImage _INetBrowse ( Collection )_EncodeUrl_NetStat_Google;random stuff_iPixelSearch_DiceRoll

Share this post


Link to post
Share on other sites

Well I tried to pass the /in /out parameters, and they don't pass... has anyone else been able too, I may be doing it all wrong?


[center]Common sense plays a role in the basics of understanding AutoIt... If you're lacking in that, do us all a favor, and step away from the computer.[/center]

Share this post


Link to post
Share on other sites

Well I tried to pass the /in /out parameters, and they don't pass... has anyone else been able too, I may be doing it all wrong?

It worked for me


Get Beta versions Here Get latest SciTE editor Here AutoIt 1-2-3 by Valuater - A great starting point.

Time you enjoyed wasting is not wasted time ......T.S. Elliot
Suspense is worse than disappointment................Robert Burns
God help the man who won't help himself, because no-one else will...........My Grandmother

Share this post


Link to post
Share on other sites

#7 ·  Posted (edited)

Thanks BigDod for answering my question!

Edit:

Thought I'd leave a working example per request (and it made sense :P ) :

Run(@ProgramFilesDir & '\AutoIt3\Extras\Exe2Aut\Exe2aut.exe /in c:\DecompileTest.exe /out c:\DecompileTest.au3')
Edited by SmOke_N

[center]Common sense plays a role in the basics of understanding AutoIt... If you're lacking in that, do us all a favor, and step away from the computer.[/center]

Share this post


Link to post
Share on other sites

#8 ·  Posted (edited)

Thanks BigDod for answering my question!

No problem, you would do the same for me.

Edit - typo

Edited by BigDod


Get Beta versions Here Get latest SciTE editor Here AutoIt 1-2-3 by Valuater - A great starting point.

Time you enjoyed wasting is not wasted time ......T.S. Elliot
Suspense is worse than disappointment................Robert Burns
God help the man who won't help himself, because no-one else will...........My Grandmother

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0