📚 OpenRCE is preserved as a read-only archive. Launched at RECon Montreal in 2005. Registration and posting are disabled.








Flag: Tornado! Hurricane!

 Forums >>  Debuggers  >>  Compiling IDA's Disassembled Assembly

Topic created on: January 20, 2007 18:24 CST by squiffel .

I am using IDA Pro, I disassemble a PE executable, then produce a ASM file. Not editing the Assembly at all. When I run the ASM file through MASM32 I get hundreds of fatal errors.

Is this because of the auto-analysis? If so is there anyway to change the PE Executable straight to pure ASM with no analysis?

There are other Issues too, IDA Pro and OllyDBG both wont run the exe in Debug mode. The Exe is 6.2 Megs and uses atleast 12 Dlls. Does that have a effect?

When I do try and run it in Debug mode it goes to a black screen which I cant exit. The Exe is recently compiled, but the "game" is old, but works perfectly fine on XP.

I need help :(

  drew     January 20, 2007 19:50.30 CST
In general, IDA is not designed to produce assembly that will actually assemble back in to machine code.  If you need to modify a few instructions, the way I typically do it is by manually patching the bytes with machine code.

I've used both IDA and Olly on programs of a similar size, so it should be fine.  However there are several other things that could be causing your issue.  The "game" may have some anti-debugging features, such as a simple check for IsDebuggerPresent.  If you are setting a software breakpoint, the "game" may do in-memory integrity checking which would be broken by the CC.  Also I've noticed that many "games" need to be launched by a launcher program that specifies certain command line arguments and other data.

  dELTA     January 21, 2007 07:11.01 CST
Regarding the mentioned effect "in debug mode it goes to a black screen which I can't exit" and the mention of the word "game", my guess would be that you're talking about a full screen DirectX application, which indeed makes things a bit more problematic when it comes to debugging.

Please read the following two threads for some deeper insight in the problems (and solutions):

http://www.woodmann.com/forum/showthread.php?t=9596

http://www.woodmann.com/forum/showthread.php?t=9221

  davisneilp     January 25, 2007 07:49.46 CST
just dasm exe  file to asm code by fasm
then compile .....
:)
you can try it .
or ,you can modify the code by ida  ,then compile it by fasm.

Note: Registration is required to post to the forums.

There are 31,328 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Question about memor...
Dec/12


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit