flat assembler
Message board for the users of flat assembler.

Index > Heap > disassembler for x86 .exe application

Author
Thread Post new topic Reply to topic
sleepsleep



Joined: 05 Oct 2006
Posts: 8867
Location: ˛                             ⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣Posts: 334455
sleepsleep
is there any disassembler tools that you are using under windows?
to disassemble 32bit / 64bit exe into asm file.

thank you.
Post 21 Sep 2011, 03:55
View user's profile Send private message Reply with quote
typedef



Joined: 25 Jul 2010
Posts: 2913
Location: 0x77760000
typedef
PE Explorer (trial, but can be cracked)..etc
Post 21 Sep 2011, 04:51
View user's profile Send private message Reply with quote
Madis731



Joined: 25 Sep 2003
Posts: 2141
Location: Estonia
Madis731
why make things harder than they are - just use OllyDBG for 32-bit and FerynoDBG for 64-bit. Both very good.
Post 21 Sep 2011, 05:36
View user's profile Send private message Visit poster's website Yahoo Messenger MSN Messenger Reply with quote
DOS386



Joined: 08 Dec 2006
Posts: 1901
DOS386
sleepsleep wrote:
Re: disassembler for x86 .exe application


OBJCONV
Post 21 Sep 2011, 06:59
View user's profile Send private message Reply with quote
Overflowz



Joined: 03 Sep 2010
Posts: 1046
Overflowz
IDA Pro.
For disassembly, you need to purchase product.
http://www.hex-rays.com/idapro/
Post 21 Sep 2011, 11:51
View user's profile Send private message Reply with quote
Enko



Joined: 03 Apr 2007
Posts: 678
Location: Mar del Plata
Enko
ida pro 5.0 is free:
http://www.hex-rays.com/idapro/idadownfreeware.htm

if the app is not too much obfuscated, IDA will generate a preaty flowchart so you can see the jumps more visualy.


The other is OllyDbg, I sugest the version 1.1
http://www.ollydbg.de/

With 2.0 alpha I had some lame problems.
Post 21 Sep 2011, 13:35
View user's profile Send private message Reply with quote
sleepsleep



Joined: 05 Oct 2006
Posts: 8867
Location: ˛                             ⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣Posts: 334455
sleepsleep
thanks guys,
will look into them Smile
Post 21 Sep 2011, 16:14
View user's profile Send private message Reply with quote
AsmGuru62



Joined: 28 Jan 2004
Posts: 1408
Location: Toronto, Canada
AsmGuru62
FerynoDBG?! Where to get it?
Post 21 Sep 2011, 16:48
View user's profile Send private message Send e-mail Reply with quote
dancho



Joined: 06 Mar 2011
Posts: 74
dancho
Post 21 Sep 2011, 17:30
View user's profile Send private message Reply with quote
Madis731



Joined: 25 Sep 2003
Posts: 2141
Location: Estonia
Madis731
The freshest: http://fdbg.x86asm.net/
Debuggers can be used to disassemble exe, but it is sometimes hard to get the textual representation copy-pasted. Olly even allows you to edit code in real-time and it disassembles in flight.
Post 22 Sep 2011, 07:53
View user's profile Send private message Visit poster's website Yahoo Messenger MSN Messenger Reply with quote
adroit



Joined: 21 Feb 2010
Posts: 252
adroit
W32DASM - it works for 32-bit EXE and even DOS 16-bit EXE (and COM).
Post 22 Sep 2011, 11:44
View user's profile Send private message Reply with quote
AsmGuru62



Joined: 28 Jan 2004
Posts: 1408
Location: Toronto, Canada
AsmGuru62
Guys!
So, to develop FASM code using this FDGB creature - I need a 64bit OS?
Post 22 Sep 2011, 14:14
View user's profile Send private message Send e-mail Reply with quote
f0dder



Joined: 19 Feb 2004
Posts: 3170
Location: Denmark
f0dder
Madis731 wrote:
why make things harder than they are - just use OllyDBG for 32-bit and FerynoDBG for 64-bit. Both very good.
You really can't compare debuggers and disassemblers, there's a world of difference.

IDA Pro for anything serious, hands down. Of course it depends on what you need to do, for just inspecting what code is generated by your compiler you don't need it. But for serious analysis, you'll want the interactiveness and other niceties that IDA offers.

But seriousness costs a lot of money, and requires you to have a serious business. Or to not give a damn and pirate it.

_________________
Image - carpe noctem
Post 22 Sep 2011, 17:32
View user's profile Send private message Visit poster's website Reply with quote
Display posts from previous:
Post new topic Reply to topic

Jump to:  


< Last Thread | Next Thread >
Forum Rules:
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Copyright © 1999-2020, Tomasz Grysztar.

Powered by rwasa.