It's easier with the source code, assuming it was even written in a high level language. However, a virus is by necessity quite small so to experts it's not that hard to just read the raw code. I still have a notebook somewhere which I used to decompile the entire system rom on my old MZ80K back in the 80s when I was about 12, and I did that without any tools whatsoever.
_________________jonbwfc's law: "In any forum thread someone will, no matter what the subject, mention Firefly."
When you're feeling too silly for x404,
youRwired.net