📚 OpenRCE is preserved as a read-only archive. Launched at RECon Montreal in 2005. Registration and posting are disabled.








Flag: Tornado! Hurricane!

 Forums >>  IDA Pro  >>  Disassembly to Compilable MASM Source

Topic created on: January 7, 2007 21:40 CST by devred .

Helo Fellows,

I wonder whether there is a possibility to make a working asm-file.

IDA nor PE-Explorer do this job automatically.
I have to change tons of thinks till it works.



Thanks in advantage...

  GynvaelColdwind     January 8, 2007 06:45.56 CST
I don't think this will help You very much, but...

You have ofcourse tried the IDA menu command:
File / Produce file / Create ASM file ?

Anyway, I had just once a need to recompile a disassembled file. With my friend we were working on a port of something, and it ended up with my friend writting a disasembler based on NASM (ndisasm to be exact) source. AFAIR it didn't take him very much time.
Anyway, the disassembler was written in such a way that it produced code that could be recompiled without any changes using NASM.

Maybe writting a disasembler based on ndisasm source will work for You.

Best regards ;>

  anonymouse     January 8, 2007 09:56.09 CST
you can try bengaly's pvdasm (pro view disassembler)
it claims to support reassemblable source from masm


http://pvdasm.reverse-engineering.net/

recently he announced an integrated debugger support

  Sellmi     January 9, 2007 05:47.34 CST
>>I wonder whether there is a possibility to make a working >>asm-file.

yes it is possible..

i wrote also a disassembler from scratch, which is possible to produce a nasm compileable source, from a with vc7 compiled c sources.
i was able to rebuild this way 200k a big driver and some dlls.... (i use this for obfuscation on asm level)


But this is only successful, when you have relocs in your PE-File, and a good compiler like vc7 which seperates code from data into different sections.

anyway to get this working... is a hard way and it works not for every pe-file ...of course

  devred     January 11, 2007 22:07.42 CST
I tryed almost everything but pvdasm will crash.

Note: Registration is required to post to the forums.

There are 31,328 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Question about memor...
Dec/12


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit