Re: It has been done before



På 30 Jan 2006 16:49:53 -0800, skrev randyhyde@xxxxxxxxxxxxx <randyhyde@xxxxxxxxxxxxx>:


\\\o///annabee wrote:

Except *nobody* has ever "argue(d) that a perfect disassembler is possible"

One word: Wolfgang.

Thats one *cool* entity.



And I will offer some latitude here, a *decent* automatic disassembler
is not possible, either.  I mean, if the RosAsm disassembler is the
"best there is" and it break by just adding a NOP to a sequence of
print statements, there's not much hope for an automatic disassembler,
is there?

You can try the RosAsm disassembler on this file.

< http://www.szmyggenpv.com/Help.exe > (ca 335kb)

This file has been updated _several_ times since I posted about it the first time.
Its very easy to test. Just download RosAsm, and then open this exefile from the RosAsm's


File/Open menu.

Then, when the disassebler has finished, hit F5 to recompile.
The dissassembler will stop, pointing out an error at the following line:

;fld T§edx*2+Data0407B9E           ; DB 2C 55 9E 7B 40 00

just comment it out by inserting a ; (semicolon) in front of the line.

now, hit f6 and run the application. (Should be connected to the internet when you hit run), as the app will try to download the file : "http://www.szmyggenpv.com/MyHome.roa";, and if it cant find it, it will likly spawn some error message.

The app run flawlessly compared to original.

You know have the asm source of the app, even it was ripped from the exe prior to upload.

Cheers,
Randy Hyde



.



Relevant Pages

  • Re: In search of the perfect Disassembler
    ... > The halting theorem, when cited in full, is correct, albeit mostly ... I do not write RosAsm Disassembler with Theorems. ... If an Author does not want his App to be disassembled, ...
    (alt.lang.asm)
  • Re: Interesting Correspondence with the Manager (Pierre Vandevenne) of www.datarescue.com
    ... First, Fodder, RosAsm Disassembler is under Developement, ... RosAsm Disassembler ... what you say about the Api namings shows that you ... mov D$hInstance_04034A6 eax ...
    (alt.lang.asm)
  • Re: It has been done before
    ... RosAsm Disassembler, the same way it is in Holly, and "Failure ... There was no error message. ... This is why interactivity is so important in a disassembler. ...
    (alt.lang.asm)
  • Re: .EXE -> .ASM -> .EXE
    ... to reassemble the result, that proves something important. ... RosAsm disassembler. ... RosAsm disassembler, the resulting source code is not the same as the ... I can insert a NOP into the main program of my ...
    (alt.lang.asm)
  • Re: Using IDA Pro v4.3
    ... original source file and MASM operating on the IDA Pro-disassembled ... is not a desirable behavior from a disassembler (or the assembler, ... It's easy to see why the RosAsm disassembler ...
    (alt.lang.asm)