Re: decompiling windows binaries in linux

good suggestion on the win api reference. I do most of my programming
in linux, so the api will help. I figured out how to do the
disassembly using objdump in linux. My only other question is on file
formats. When I just ran objdump -d file.exe it said there were 2
supported formats. efi-app-ia32 and pei-i386. I disassembled it once
as each format. I did a quick vimdiff on the files and they look
identical. Any difference between those file formats?



[jongware] wrote:
"mike" <mike@xxxxxxxxxx> wrote in message
news:1167409756.744604.110680@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Is it possible to decompile win32 binaries in linux? If so, what
programs can be used?

Why, certainly. Using win32 myself, I've disassembled just about anything
ranging from Z80 to ARM7 binaries.
Disassembling is not restricted to the platform a program is intended to run
on (neither is assembly, by the way).
Win32 programs are intended to run on 80x86 machines; find a disassembler
which can handle these (ndisasm is a good start).
If you want to concentrate on 'real' Windows proggies, you might want to
find a recent Win Api reference somewhere. I believe Borland has a zipped
one in their free d/l section.

[Jongware]

.