1. How To Decompile An Exe
AutoIt v3 is a freeware BASIC-like scripting language designed for automating the Windows GUI and general scripting. It uses a combination of simulated keystrokes, mouse movement and window/control manipulation in order to automate tasks in a way not possible or reliable with other languages (e.g. VBScript and SendKeys). AutoIt is also very small, self-contained and will run on all versions of Windows out-of-the-box with no annoying 'runtimes' required!
AutoIt was initially designed for PC 'roll out' situations to reliably automate and configure thousands of PCs. Over time it has become a powerful language that supports complex expressions, user functions, loops and everything else that veteran scripters would expect.
Features:

Discussion on need help to decompile exe to au3 within the AutoIt forum part of the Coders Den category., 19:56 #1. Mase21 elite.gold: 0. Figure 4: Hash comparison between exe packaged with malicious payload and exe from AutoIt’s website. Figure 4 shows that the hash for WinddowsUpdater.exe matches the hash of AutoIt3.exe (v3.3.14.2 as specified in Figure 3) which was downloaded directly from the developer’s website. The AutoIt interpreter, by itself, is benign. The Aut2Exe.exe program can be run from the command line as follows. Outfile.exe /icon Decompiler for AutoIt script. Download Decompiler for free. Binary executable decompiler. Decompiler reads program binaries, decompiles them, infers data types, and emits structured C source code. Designed with a pluggable architecture, it currently has: - support for x86, 68k, PowerPC processors (partial support for Arm, Mips, Sparc, Z80, m6502, PDP-11) - support for EXE, Elf, AmigaOS Hunk executable formats - support for.


* Easy to learn BASIC-like syntax
* Simulate keystrokes and mouse movements
* Manipulate windows and processes
* Interact with all standard windows controls
* Scripts can be compiled into standalone executables
* Create Graphical User Interfaces (GUIs)
* COM support
* Regular expressions
* Directly call external DLL and Windows API functions
* Scriptable RunAs functions
* Detailed helpfile and large community-based support forums
* Compatible with Windows 95/98/ME/NT4/2000/XP/2003/Vista
* Unicode support
* Digitally signed for peace of mind
* Works with Windows Vista's User Account Control (UAC)
AutoIt has been designed to be as small as possible and stand-alone with no external .dll files or registry entries required making it safe to use on Servers. Scripts can be compiled into stand-alone executables with Aut2Exe.
Also supplied is a combined COM and DLL version of AutoIt called AutoItX that allows you to add the unique features of AutoIt to your own favourite scripting or programming languages!
Best of all, AutoIt continues to be FREE - but if you want to support the time, money and effort spent on the project and web hosting then you may donate using the link to your left in the menu.
Take me to the downloads page: http://www.autoitscript.com/autoit3/downloads.shtml
Exe2AutoIt Converter: Exe2Aut-CW2K-Edition.exeAutoit
ScriptExtractor v1.1: ScriptExtractor1.1.7z
myExe2Aut - The Open Source AutoIT Script Decompiler 2.1 incl. source code
*New* full support for AutoIT v3.2.6++ :)
... mmh here's what I merely missed in the 'public sources 3.1.0'
This program is for studying the 'Compiled' AutoIt3 format.
AutoHotKey was developed from AutoIT and so scripts are nearly the same.
Drag the compiled *.exe or *.a3x into the AutoIT Script Decompiler textbox.
To copy text or to enlarge the log window double click on it.
Supported Obfuscators:
'Jos van der Zande AutoIt3 Source Obfuscator v1.0.14 [June 16, 2007]' ,
'Jos van der Zande AutoIt3 Source Obfuscator v1.0.15 [July 1, 2007]' ,
'Jos van der Zande AutoIt3 Source Obfuscator v1.0.20 [Sept 8, 2007]' ,

How To Decompile An Exe

'Jos van der Zande AutoIt3 Source Obfuscator v1.0.22 [Oct 18, 2007]' and
'EncodeIt 2.0'
Tested with:
AutoIT : v3.2.9.4 and
AutoHotKey: v1.0.47.4
The options:
'Force Old Script Type'
Grey means auto detect and is the best in most cases. However if auto detection fails
or is fooled through modification try to enable/disable this setting
'Don't delete temp files (compressed script)'
this will keep *.pak files you may try to unpack manually with'LZSS.exe' as well as *.tok DeTokeniser files, tidy backups and *.tbl (<-Used in van Zande obfucation). Default:OFF 'Verbose LogOutput' When checked you get verbose information when decompiling(DeTokenise) new 3.2.6+ compiled Exe Default:OFF 'Restore Includes' will separated/restore includes. requires ';AUT2EXE INCLUDE-START' comment to be present in the script to work Default:ON 'Use 'normal' Au3_Signature to find start of script' Will uses the normal 16-byte start signature to detect the start of a script often this signature was modified or is used for a fake script that is just attached to distract & mislead a decompiler. When off it scans for the 'FILE' as encrypted text to find the start of a script Default:OFF 'Lookup Passwordhash' Copies current password hash to clipboard and launches http://md5cracker.de to find the password of this hash. I notice that site don't loads properly when the Firefox addin 'Firebug' is enabled. Disable it if you've problems 620AA3997A6973D7F1E8E4B67546E0F6 => cw2k
... you may also get an offline MD5 Cracker and paste the hash there like
DECRYPT.V2 Brute-Force MD5 Cracker
http://www.freewarecorner.de/download.php?id=7298
http://www.freeware.de/Windows/Tools_Utilities/Sicherheit_Backup/Ver__und_Entschluesselung/Detail_EDECRYPT_Brute_Force_MD5_Cracker_9832.html
http://www.shareware.de/Windows/Tools_Utilities/Sicherheit_Backup/Ver__und_Entschluesselung/Detail_EDECRYPT_Brute_Force_MD5_Cracker_9832.html
CommandLine:
Ah yes to open a file you may also pass it via command line like this
myAutToExe.exe 'C:Program FilesExample.exe' -> myAutToExe.exe '%1'
So you may associate exe file with myAutToExe.exe to decompile them with a right click.
To run myAutToExe from other tools these options maybe helpful
options:
/q will quit myAutToExe when it is finished
/s [required /q to be enable] RunSilent will completly hide myAutToExeSo I managed to lose my .au3 files when I upgraded to 7 but had a backup of the compiled versions sitting on a friends computer.
Is there anyway to get my code out of these or is it like VB6 onwards and I'm screwed?
Thanks in advance for the help.
If your script was compiled without password and uses AutoIt 3.2.5.1 or older then use the decompiler you get with AutoIt, 'AutoIt3ExtrasExe2AutExe2Aut.exe'.
If you used a newer version, or had a password, then you wont get any help here.
There's a search in the upper right, search for decompilation and you will see what I mean.
Exe2Aut.exe is no longer available and it is not possible to extract code from AutoIt executables for many years
This should have the decompiler you want:
Go HERE
Reference