Question

I want to make a basic antivirus for my free time. Basically I learned about the basic structure of the EXE(windows) file. How do I extract the ASM code from the file and the PE header?

Was it helpful?

Solution

You can install Cygwin and use objdump to decompile an exe into asm. Be sure you select the binutils when installing cygwin. After installing cygwin, you can run the following from a bash shell:

objdump -Slx yourpgm.exe

OTHER TIPS

You can use some free distrubuted disassembler.for example: ollydbg diassembler.

note: there is only some MS-DOS stub executeable code in the PE header.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top