AutoIt3 Decompiler

this one not work,pls update

autoit 3.3.12.0 unicode

no packer

compiler:AccAu3Inst

[Only registered and activated users can see links. Click Here To Register...]

What's the problem with your exe? Also, what's your OS, the expected output and the actual output?

I got this when drag & dropping nod32id.exe:

Quote:

Originally Posted by link What's the problem with your exe? Also, what's your OS, the expected output and the actual output? I got this when drag & dropping nod32id.exe:

My OS is 8.1 pro with update X64. Exe2Aut 0.10 can only work fine in win7,but not support win8.1 or win10.pls fix it.

Sadly I have neither Win8, nor Win10.
"Couldn't invoke the file" means that CreateProcessW failed, AFAIK.
You could attach OllyDbg, set a Breakpoint on CreateProcessW, when it hits use Ctrl+F9 to get to the retn 0x28 (EAX should now be zero) and then set EIP to GetLastError. Use Ctrl+F9 again and tell me the value of EAX.

Quote:

Originally Posted by link Sadly I have neither Win8, nor Win10. "Couldn't invoke the file" means that CreateProcessW failed, AFAIK. You could attach OllyDbg, set a Breakpoint on CreateProcessW, when it hits use Ctrl+F9 to get to the retn 0x28 (EAX should now be zero) and then set EIP to GetLastError. Use Ctrl+F9 again and tell me the value of EAX.

I don't know OllyDbg, I have never use it.

AutoIt v3.3.12.0 compiled files can't be decompile, can it be fixed?

ShatterIt 2.0 can't work perfectly.

Hello everyone.

Sorry for my bad english, I'm french ^^

===============

Aut2Exe works... but with command prompt (as admin) for some scripts.

I've compiled several times my script... And I've found why Aut2Exe doesn't work sometimes.

Compilation : when the script is compiled with "RequireAdministrator" (ExecutionLevel), Aut2Exe (ran normally) doesn't work...
=> But if I use Aut2Exe in command Prompt : it works !


Screens :
- ExecutionLevel : [Only registered and activated users can see links. Click Here To Register...]
- Mon Script ( [Only registered and activated users can see links. Click Here To Register...] ) : [Only registered and activated users can see links. Click Here To Register...]

- Use Aut2Exe normally : [Only registered and activated users can see links. Click Here To Register...]
- Use Aut2Exe in Command Prompt (admin) : [Only registered and activated users can see links. Click Here To Register...]

So : If Aut2Exe doesn't work, run it with Command Prompt (as admin).
Command Line : Cheers.

still working nice. TY! Helped me a lot

How to decompile PE 64 file?

Try this, and use command line method with "Exe2Aut.exe".
[Only registered and activated users can see links. Click Here To Register...]

Thanks to franco_62 again~~ :mofo:

Hello!
There is a command line that specifies where to retrieve files from FileInstall?
I try to decompile the file, which had been treated with the VanZande-obfuscator.
Obfuscated code it receives. But I need a file * .tbl from FileInstall. It is not extracted.
Target: [Only registered and activated users can see links. Click Here To Register...]

Any One Can Help Me ? i want decompiler my EXE can pm in facebook ?
[Only registered and activated users can see links. Click Here To Register...]

Hey link, most useful utility ever...and btw v11 does not work on latest versions of windows. it throws a couple errors, 1st: "C:\Users\...\AppData\Local\Temp\XXXX.tmp is either not designed to run on Windows or it contains an error. Try installing t5he program again using the original installation media or contact your system administrator or the software vendor for support. Error status 0xC0000005."

0x...5 means access denied.

Running again as Admin does not throw that error, but your applications shows "Something went wrong.."

Another thing, when i took that temp file which im guessing is the Injection module...rename it to exe, and execute it...I get this error: "Invalid access to memory location."

v10 works fine

Tausend Dank!
Damit hast du mir wirklich geholfen.
Wollte schon alle Hoffnung an mein altes Projekt aufgeben. :)

:handsdown::handsdown::handsdown:
thanks you