Log in

View Full Version : Anyone knows this tool?

b3n
March 31st, 2007, 23:04
hey there,

i am looking for a tool that converts assembler mnemonics into the according opcodes. i think i had such a tool some time ago where you could put "xor eax, eax" into a box and it gave you 33C0 as output. i cant find the tool in my archive and i also cant remember its name, so if someone could help me out by giving me a name, it would me much appreciated.

thanks,
b3n
Kayaker
April 1st, 2007, 02:01
Hi

RTA?

http://www.openrce.org/downloads/details/170/RTA


If interested, the original release announcement and the source code for an earlier version are here:

http://www.woodmann.com/forum/showthread.php?t=4973
http://www.woodmann.com/forum/showthread.php?t=4867


Brainstorming session on other options:

http://www.openrce.org/forums/posts/17

Kayaker
LLXX
April 1st, 2007, 02:11
Any debugger (e.g. open up a random file in ollydbg, and you can 'edit' the code in Asm mode to show the opcodes emitted)
ancev
April 1st, 2007, 16:16
or use any assembler and a listfile
blabberer
April 2nd, 2007, 03:43
talking about assembler

when you are in a very very poor condition you can use this

start run type in ntsd -c "a eip" ntsd
you can assemble anything you want
and when you are finsihed
you can disassmble them back with u


Code:


 

Microsoft (R) Windows User-Mode Debugger  Version 5.1.2600.0

Copyright (c) Microsoft Corporation. All rights reserved.

 

CommandLine: ntsd <--- snip -->

ntdll!DbgBreakPoint:

7c901230 cc               int     3

0:000> ntsd: Reading initial command 'u eip L1;a eip;'

ntdll!DbgBreakPoint:

7c901230 cc               int     3

7c901230 xor eax,eax

7c901232 mov eax,3

7c901237 mov ebx,0xdeadbabe

7c90123c

0:000> u eip L3

ntdll!DbgBreakPoint:

7c901230 31c0            xor     eax,eax

7c901232 b803000000       mov     eax,0x3

7c901237 bbbebaadde       mov     ebx,0xdeadbabe

0:000>
blurcode
April 5th, 2007, 18:30
Thank you blabberer .