![]() |
|
|
|
#1
|
|||
|
|||
|
Is this possible?
Ok, I'm pretty new at this so please be patient
Here is my situation: ==================== I have created a simple .exe file (coded in vc++ 6) simply for the purpose of reversing it. I have packed it w/ upx 1.25 What i know i can do: ==================== I can obviously unpack the exe. I can then open it w/ ollydbg. What i would like to know: ==================== Is it possible to take that ollydbg output and rebuild the vc++ source? If so could someone point me in the right direction? Like i said, i'm new to world of reversing and figured this would be a nice place to start. Best regards, straylight |
|
#2
|
|||
|
|||
|
This topic has been touched on several times before, but it is a bit tricky to phrase correctly in a search box.
![]() Quote:
In an advanced level of consciousness you could examine the code, determine how it structures its calls (__STD, etc...), parameters and cleans up itself, and then write VC code that duplicates how it works. But, with many different compiler optimizations, options, etc. You'd never get back to it's original code. Even writing something functionally equivalent would likely end up compiling to a different code structure. -bg |
![]() |
|
|