perl2exe hacking

[Anonymous Monk]

Hi,
I'm in a bit of a pickle, I have a Perl script that someone has compiled with perl2exe (to make a standalone package for use on Win32 machines, not hide anything).
The source seems lost along with any information about what the script actually does (going though a whole bunch of undocumented systems), I only found it by chance digging around for the origin of a file.
I have tried following link to a Bugtraq post by ta@domainbox but this doesn't seem to work for me. I've also tried the Deparse method posted by tachyon here, but get an error concerning an unrecognised character \x09, which indicates perl isn't accepting the code as it is a binary.
It dates from 2001 so I think this maybe before any actual encryption was used in perl2exe. Can anyone suggest another way to open this?
Thanks in advance.

[marto]

This post may be of interest.

Good luck :)

Martin

[superfrink]

Have a look at Uncool Use Of Perl: perl2exe. decompile quick steps.

[cdarke]

If there is no encryption then use a strings(1) tool to extract the script, or:

open (my $fh, '<', $file) or die "Oops: $!";

while (<$fh>) {
    print "$1\n" if /([[:print:]]+)/
}

close $fh;

[Anonymous Monk]

Contact perl2exe support

[spx2]

use some tool like Win32dasm or IDA to get to the deadlisting(you should be able to see lots of scripts, maybe even useful comments that IDA makes) and if it's not encrypted maybe you can find some .DATA section in it that has the source or maybe you can proceed to actually figguring out what it does.