[NTLUG:Discuss] decompilers?

[David Ross]

On Wednesday 03 March 2004 09:53 am, Wayne Dahl wrote:
> On Wed, 2004-03-03 at 09:00, George Lass wrote:
> > objdump comes standard with RedHat distros, but not
> > too sure how well it works on windoze virus files.
> >
> > There are a bunch of others available for download.
> > See google:
> >
> > http://www.google.com/linux?hl=en&lr=&ie=ISO-8859-1&q=disassembler
> >
> > George
>
> I just got another one of those today...document_excel.pif (the fact
> that an EXCEL spreadsheet is coming as a PIF should raise all kinds of
> alarms, but how many people out there don't ever bother to look or even
> understand what they're looking at?).  I used objdump on it and it
> worked for me, although I had no idea what I was looking at (I'll
> readily admit I'm no programmer).  Usage from a console was
> objdump -D document_excel.pif
>
> Wayne

I like to run "strings" before objdump to see what kind of info the file 
contains.
And REC http://www.backerstreet.com/rec/rec.htm is good also.
-- 
David Ross
Registered Linux User #344306
EMail is certified Windows® free.