Disassembly for the Clueless or Idiots

CrazyCatGuy

[cowers in corner before @bubster and @silversurfer ] Mercy! This isn't a named software request!

I know there are many freeware, open source, and commercial disassemblers or hex-readers/changers on the "fun-da-web" (like AIDA on here), but I'm looking for the easiest and simplest to use (perhaps that's a paradox): bluntly put, I'm looking for one for...𝗶𝗱𝗶𝗼𝘁𝘀...as in I can put a bib on, drool, and work magic.

I'm using the D-word instead of the C-word so I don't get a suspension, but occasionally I get a hankering for some "Vitamin C." I really haven't been that successful since 1997, but hey...what's 23 years?

If there's a List of "𝘐𝘥𝘪𝘰𝘵-𝘱𝘳𝘰𝘰𝘧 -> 𝘕𝘰 𝘊𝘩𝘢𝘯𝘤𝘦 𝘪𝘯 𝘏𝘦𝘭𝘭l, mofo," disassemblers, I'd like some gentle suggestions. Here's some personal background:
1) I've learned and forgotten C++ three times in 30 years.
2) Never messed with any modern scripting, Powershell, the usual brood...
3) I have a very basic understanding of HEX and changing code at the HEX level since its over two decades old.

Any suggestions? Flames? Snickering?

skittles123

CrazyCatGuy

Nah, a disassembler sort of leaves you with ... assembler. A decompiler will take a shot at giving you a high level language. If it were easy ... even I would do it. :)

Look for the IDA Tutorial and books on here, also for Ghidra. There is a free version of IDA you can get (no decompilers though, but neither does the latest scene release have them... burn!). There are also some reverse engineering tuts and books here. And of course there are plenty of x86/x64 assembler books.

IDA Pro 3 Hours Primer
2.42 GB 3 weeks
Hex-Rays IDA Pro 7.3.190614 (x64)
The IDA Pro Book: The Unofficial Guide to the World's Most Popular Disassemble, 2nd Edition
Hex-Rays IDA Pro 7.2.181105 (x64)
The IDA Pro Book, 2nd Edition Second Edition

...etc .

There are some tools for Java, .NET etc if that is your source/target.

Good luck on your journey.

adi4u

I Like your approach :) ;)

iPorn

Apparently the "best" disassembler (for Mac) is Hopper Disassembler. That sentiment was echoed several times on one of the Mac developer forums on GitHub or SourceForge, I can't recall which.

I have an older evaluation version of Hopper Disassembler w/SN that used to work on an earlier version of MacOS than what I'm currently on. But neither that version, nor the SN with a newer version, works anymore.

A legit version of Hopper w/authentic SN costs only around $14 last I checked, but even at that low price, I still found myself digging around (unsuccessfully) for a TNT or HCiSO version. 'Cuz that's what we do here, apparently.

Also, for disassembly, understanding low-level code (assembly language) is more a propros than high-level coding or scripting languages.

CrazyCatGuy

iPorn skittles123

Thanks, guys 👍

I've gotten IDA and The IDA Pro Book from here. I'll have to get the rest of the Hex-Rays and IDA material. In fact, the IDA Pro icon is sitting to the left of this screen :)

I've read about Hopper and Ghidra and actually have a copy of Hopper. I also have HxD, and it....confused me LOL. I need to dig in!

I have to admit I'm improperly combining disassembly and decompiling under "disassembly."

Speaking of decompilers...I have some old-school poser files that are .exe. I'd like to take the .exe apart and make a library which uses the modern DAZ3D Install manager, which uses a .zip file with a manifest.dsx (DAZ XML). This may not be possible as the old Poser .exe may build the needed Poser JSON variant.

Yeah, why don't I ask that on a Poser/DAZ3D Forum? Because my blood pressure shoots through the roof from the sheer idiocy! Tried and ended up screaming.

Sorry to seem to divert, but if anyone here or anyone else has some additional suggestions, I'm A LISTENIN'!

packmaster

CrazyCatGuy Re the 3D stuff: can you unpack the poser installer into a dummy library then use Content Package Assist or somesuch to zip it up as a DIM install package?
Long time since I used a poser exe but that's what I've done with the old DAZ BitRock installers in the past.

CrazyCatGuy

packmaster

Yeah, I can do that, but we are talking GB's of files. I'd have to manually run every .exe that I wanted to use in the library.

Content Package Assist is da bomb! I hate having a bunch of single files from an author (eg. SASE) or in a particular motif (e.g.: Wonder Woman) and having to remember where I put something. I have a monstrous 2GB+ SASE compilation that makes life simple with DIM, because some models are DAZ3D and some are Renderosity.

Sooo.....
𝑰𝒔 𝒊𝒕 𝒑𝒐𝒔𝒔𝒊𝒃𝒍𝒆 𝒕𝒐 𝒅𝒆𝒄𝒐𝒎𝒑𝒊𝒍𝒆 𝒐𝒓 𝒅𝒊𝒔𝒂𝒔𝒔𝒆𝒎𝒃𝒍𝒆 𝒐𝒍𝒅 𝑫𝑨𝒁 𝑩𝒊𝒕𝑹𝒐𝒄𝒌 𝒊𝒏𝒔𝒕𝒂𝒍𝒍𝒆𝒓𝒔❓

GROUP QUESTION:
𝐖𝐡𝐚𝐭 𝐢𝐬 𝐲𝐨𝐮𝐫 𝐩𝐫𝐞𝐟𝐞𝐫𝐫𝐞𝐝 𝐬𝐨𝐟𝐭𝐰𝐚𝐫𝐞 𝐟𝐨𝐫 𝐛𝐫𝐞𝐚𝐤𝐢𝐧𝐠 𝐚𝐩𝐚𝐫𝐭 𝐚𝐧 𝐄𝐗𝐄 𝐟𝐢𝐥𝐞 𝐭𝐨 𝐠𝐞𝐭 𝐬𝐞𝐥𝐞𝐜𝐭𝐞𝐝 𝐟𝐢𝐥𝐞𝐬 𝐟𝐫𝐨𝐦 𝐢𝐭❓

CrazyCatGuy

"𝘏𝘦𝘺, 𝘩𝘦𝘺, 𝘸𝘩𝘢𝘵 𝘥𝘰 𝘺𝘰𝘶 𝘴𝘢𝘺,
𝘛𝘩𝘦 𝘊𝘳𝘢𝘻𝘺 𝘊𝘢𝘵 𝘎𝘶𝘺 𝘩𝘢𝘴 𝘴𝘰𝘮𝘦
𝘙𝘢𝘯𝘥𝘰𝘮 𝘶𝘱𝘥𝘢𝘵𝘦𝘴 𝘵𝘰 𝘴𝘢𝘺!"

First, for the uninitiated, this thread ties into a Help Desk thread....its DAZZY-LICIOUS!
https://sanet.st/community/d/14910-guru-s-needed-help-in-special-folder-renaming

Yesterday (as in 12am Sunday), I was fixing and placing DAZ3D files in their proper folders--I am stunned at the shitload of files I have. I haven't even touched the Renderosity files.

While draggin'-n-droppin' like a meth addict, I had one of my ADD + OCD experiences due to the number of old .EXE DAZ3D files. And, sooooo....it began.....but let me clarify that I am an idiot and over the last 24 hours have come to realize I have lost MOST of my programming knowledge/skills.

It all started with ExeinfoPE_v0.0.6.3, and then someone gave me a big gulp of ADD 🍺--GAME ON! Over the last 36 hours, I have downloaded, fucked with, attempted to use, and screamed at the white-trash neighbors over their barking dog while messing with:

😊 die_win32_portable
👍 InnoExtractor5
😡 QuickUnpack (x86, x64)
😏 UniExtractRC4
😣 upx-3.96-win64
😖 upx-3.96-win32
😫 zlib-1.2.3-src
🤨 trid_w32
🤬 bitrock-unpacker-1.1 (wich required messing with TCL 8.5 🥴)

𝙃𝙚𝙧𝙚❜𝙨 𝙬𝙝𝙖𝙩 𝙄 𝙡𝙚𝙖𝙧𝙣𝙚𝙙:
𝟭) InnoExtractor5 works like a muthafuckin' charm on new Poser libraries. I took one part, dropped the contents into Content Package Manager, loaded it rhough DAZ Install Manager, and PRESTO! My DAZ3D content library has a couple extra GB of shit. InnoExtractor5 doesn't work o anything else.

𝟮) UniExtractRC4 works on some older DAZ3D .EXE files, but there is no consistency. If the EXE was made with VISE Mindvision Wizard Module ! ( MS C++ 6.0 ) , UniExtract is good-to-go, but dat's it and dat's all. Otherwise, FAIL!

𝟯) QuickUnpack (x86, x64) makes my ass hurt. The old DAZ3D EXE files are 32.bit, but it won't let me run the QuickUnpack 32-bit version. I tried all kinds of compatibility changes and NO GO. QuickUnpack x64 didn't do a damn thing except tell me it wasn't doing a damn thing.

𝟰) ALMOST ALL the old files are packed with UPX. I spent hours getting upx-3.96-win32 to work, and gosh-darn, it unpacked it....and that's it--nothing more....BECAUSE...

𝟱) Of this little XML ditty I extracted from a file:
<𝙖𝙨𝙨𝙚𝙢𝙗𝙡𝙮𝙄𝙙𝙚𝙣𝙩𝙞𝙩𝙮
𝙫𝙚𝙧𝙨𝙞𝙤𝙣=❞1.1.0.1❞
𝙥𝙧𝙤𝙘𝙚𝙨𝙨𝙤𝙧𝘼𝙧𝙘𝙝𝙞𝙩𝙚𝙘𝙩𝙪𝙧𝙚=❞𝙓86❞
𝙣𝙖𝙢𝙚=❞𝘽𝙞𝙩𝙍𝙤𝙘𝙠.𝙄𝙣𝙨𝙩𝙖𝙡𝙡𝘽𝙪𝙞𝙡𝙙𝙚𝙧❞
𝙩𝙮𝙥𝙚=❞𝙬𝙞𝙣32❞
/>
YEEEARGH! This led me to GitHub and trying to make the bitrock-unpacker-1.1 (which required messing with TCL 8.5 🥴) work. Fuck me running...I could not get that damn thing to work no matter what I did, because....I am an idiot and over the last 24 hours have come to realize I have lost MOST of my programming knowledge/skills.

I was having some of the 🦇💩🤪BSC (BATSHIT CRAZY) and was becoming a 🧚‍♀‍🐇🙉DMF (DELUSIONAL MOFO) with this thing. ANYHOW, I have a torrent download of BitRock.InstallBuilderEnterprise_vO.U.8.1.2 (or whatever) and will try that at a later date.

I could go on, but I know most people are asleep if they made it this far or wishing I'd hurry up and die chasing parked cars. I haven't given up, but...well, shit happens. You can stop here.

𝐒𝐨𝐦𝐞 𝐏𝐞𝐫𝐬𝐨𝐧𝐚𝐥 𝐒𝐡𝐢𝐭

By Wednesday (11/25/2020), I'll be in hibernation mode, other than downloading and responding to PMs. I have to go 𝑩𝒂𝒍𝒍𝒔 𝑶𝒖𝒕 𝑭𝒐𝒓 𝑭𝒖𝒓𝒚 on writing legal documents for my lawsuit against my ex-GF, since...well....I owe my lawyer thousands of dollars (LOL). I have a bunch of hearings in December, which will be a waste of time because the Universe hates me.

I'm going to whine, but I'm not asking for any sympathy....unless you need help putting a couple bricks of C-4 under my doublewide. I have a shitload of health issues, have been turned down for EVERY coronabeervirus program, and my business and personal finances have been utterly destroyed--the phaser WAS NOT set on "stun." I'm a cunt's hair from losing my cell/internet.

Soooo.....I may not be around in December, and if you don't see me rambling over some shit by mid-January, then...my cats will have probably eaten the face of my stiffening corpse (cats do that for real). The broke-ass cripple is at the end of his tether, and fuck...this mofo is tired of being in Level 7-10 pain, 24/7 for nearly 3 years.

And that's it! No....𝗜 𝗟𝗢𝗩𝗘 𝗦𝗔𝗡𝗘𝗧 💋🥰....that's what's important!

I'm off to 💫🥤👨‍💼🍇🥴DJJKA (DRINKING JIMMY JONES KOOL-AID) and deal with USA Social Security, Disability, and whoever else will help me afford cat food and Depends.

AlbinoIvan

I love your posting style. Were you trying to compile bitrock-unpacker or did you download the binaries?

https://github.com/Harakku/bitrock-unpacker/releases/tag/v2019-11-18

CrazyCatGuy

AlbinoIvan

Thanks for the comment! I figure if someone feels compelled/forced/threatened/suicidal enough to trudge through one of my posts without finding some rope and a sturdy rafter, they should at least get some entertainment 🥴...or a regular bowel movement. 💩

As for your question, I did both, and all I got was pain…lots…of…pain. And screaming—let’s not forget screaming. Since I started building computers about 30 years ago, there is a phrase that is uttered when things go awry. Throughout this 𝘣𝘪𝘵𝘳𝘰𝘤𝘬-𝘶𝘯𝘱𝘢𝘤𝘬𝘦𝘳 experience, the uttering went to yelling, and then screaming loud enough that the cats ran, and I showered my monitor with spittle. Said phrase:

“𝘠𝘰𝘶 𝘴𝘵𝘶𝘱𝘪𝘥 𝘧𝘶𝘤𝘬𝘪𝘯𝘨 𝘸𝘩𝘰𝘳𝘦! 🤬” [computer cries and cringes]

Of course, there are many variants, and the neighbor’s dogs got to hear some colorful combos.

I did try the command line version of 𝘣𝘪𝘵𝘳𝘰𝘤𝘬-𝘶𝘯𝘱𝘢𝘤𝘬𝘦𝘳 first, and well….[makes strangling noises].

I have the latest Uniextract2RC4 and those lovely sods updated it for BitRock InstallBuilder files, but…BUT…the mofos DID NOT included any EXE in their \bin folder. In fact, you can go here:

https://github.com/Bioruebe/UniExtract2

and the first comment in the \def folder is:
“𝘈𝘥𝘥𝘦𝘥 𝘴𝘶𝘱𝘱𝘰𝘳𝘵 𝘧𝘰𝘳 𝘉𝘪𝘵𝘙𝘰𝘤𝘬 𝘐𝘯𝘴𝘵𝘢𝘭𝘭𝘉𝘶𝘪𝘭𝘥𝘦𝘳 𝘪𝘯𝘴𝘵𝘢𝘭𝘭𝘦𝘳𝘴 (𝘱𝘭𝘶𝘨𝘪𝘯)”

I went through all the .ini files, all the folders, and golly-gee, there is reference to “bitrock-unpacker.exe”, but no such file exists ANYWHERE in their \bin folder.
So, I got down and dirty, downloaded and added:

https://github.com/Harakku/bitrock-unpacker/releases/tag/v2019-11-18

to the \bin folder. And, lo and behold, I got the ❌✋ “𝑌𝑜𝑢 𝑛𝑜 𝑔𝑜, ‘𝑀𝑒𝑟𝑖𝑐𝑎𝑛 𝐽𝑜𝑒. 𝑌𝑜𝑢 𝑏𝑎𝑘𝑎 𝑔𝑎𝑖𝑗𝑖𝑛!”

I’m uploading portions of some log files and files that I used. Adding the CORRECT .EXE (latest win32 version) for UPX to Uniextract2 worked better than the UPX command line, but that only removes the final packing. Next is that dastardly BitRock InstallBuilder bullshit.

For your perusal, I have uploaded DAZ_FUCKERY.rar with the packed and unpacked versions of the file, an XML file, and some log notes.

https://www39.zippyshare.com/v/i2Oxg4H2/file.html

BTW, if I was gay, I’d be sending 😻, 💐, and 😚 for the Python file—IT FUCKING ROCKED! It took me about…um…[looks embarrassed] about 3 hours to make some minor alterations to it, but it ROCKED my Renderosity files (remember, I’m know NOTHING about Python!).

Sadly, the fucktards who compact the folders with the Renderosity files have ZERO consistency. I still have to use good ‘ole BRU a lot.

CrazyCatGuy

@silversurfer @bubster and other SANET Deities

I'm not completely done with my sorting, but HOLY HELL! I think I have more DAZ3D/Poser files than anyone else on the internet. There's one site that might...just might...top me. I have compiled from sources around the world and even filled some of the "impossible" folders.

Sooooo.....while I'm still ticking...you could...you know...let me put some stuff up in Graphics -> 3D Models.

OR I guess I could Will a hard drive to one of the regs some day....Hmmmm....🤔

bubster

CrazyCatGuy
...or you could...maybe...you know....become an uploader the same everyone else has done on this site.

CrazyCatGuy

bubster

I tried! I tried in the past and got no reply or anything!

But, I shall grab a copy of Tennyson's "Charge of the Light Brigade" and try again! :)

musicman34

CrazyCatGuy& others I also recommend these two most used code/scripting editors. https://code.visualstudio.com/ & https://www.sublimetext.com/. I just love multiple cursors. Just remember to disable telemetry (error reporting) service in Windows if using the free MS Visual Studio Code. Read bottom of the web page link.

CrazyCatGuy

musicman34
Ahhhh!! I've seen that but didn't pay attention since I have VS 2019 Enterprise loaded [loud guffaws and laughter can be heard through screen😂 🤣].
Yeah, yeah, guys, I know I'm retarded, but I actually knew how to use Visual Studio....some....in 1998. It looks pretty on the screen!
I will still take your advice, my brutha, and check them out!✊

skittles123
✋Hold! The issue hasn't been solved yes...even with binges of Adderall, coffee, and wall-shaking screams!😭 Oh, there is a story of madness that NEEDS to be told, but the finale isn't complete.

Skittles, I saw that IDA update and grabbed it while is was still freshly posted...not that is did any good. I have to admit, I love how IDA looks like 🦄🦋🌷 too me, but when I try to use it, it's like reading directions that were written in Arabic and translated to Cantonese to put together a 239-piece '69 Camaro model.😖

I went absolutely LOONY trying to figure a QUICK way to disassemble, decompile, hammer into a stone tablet the data portion of the EXE files, and it was fail, FAIL, 🤬FAIL! What I thought was working (other than InnoExtract on new Poser files) wasn't really working because the data wasn't placed in the correct sub-directories by the extraction.

𝗦𝗧𝗔𝗧𝗨𝗦 𝗨𝗣𝗗𝗔𝗧𝗘
I was texting a bro of mine from high school who works in IT, and he said he might be able to write a Powershell script that runs the EXE's and places the subfolders into a named folder. Basically, for example a file named "𝘋𝘢𝘻3𝘋 - 𝘱𝘴_𝘢𝘤1330𝘣 - 𝘛𝘩𝘪𝘨𝘩 𝘉𝘰𝘰𝘵 𝘍𝘰𝘳 𝘝3 𝘚3 𝘈3.𝘦𝘹𝘦" would be executed by the script and place the subfolder contents in a folder named "01330-𝘛𝘩𝘪𝘨𝘩 𝘉𝘰𝘰𝘵 𝘍𝘰𝘳 𝘝3 𝘚3 𝘈3" and bebop to the next.

No news yet! (LOL)

FUTURE THEAD (some...day): 𝑺𝒂𝒕𝒖𝒓𝒅𝒂𝒚 𝑵𝒊𝒈𝒉𝒕 𝑭𝒆𝒗𝒆𝒓 𝑫𝒊𝒔𝒄𝒐 𝑾𝒆𝒃𝒔𝒄𝒓𝒂𝒑𝒊𝒏𝒈
or "How getting fucking manically frustrated at this EXE issue somehow lead to getting froth-spewing fucking frustration trying to do some webscaping."

skittles123

I think the issue as been solved, but just as a heads up there are now new releases of IDA Pro on sanet. I have not looked at them but saw somewhere else that it was named "Hex-Rays.IDA.Pro.v7.5.SP3.with.x86.x64.ARM.ARM64.PPC.PPC64.MIPS.Decompilers-WEB0DAY". If it has all the decompilers (and works) then that is a neat tool to have.