MAP Files
Creating Detailed Disassembly using a MAP file
PVDasm can load a specific MAP file,
not the generic one that IDA Exports to us,
or any generic MAP file,
this is because PVDasm is designed to keep,
functions/data seperated internally.
the default exported map does not bring,
PVDasms enough info to make it seperate those data.
there for PVDasm comes with a small script to,
make a new specific MAP file with IDA.
IDA:
1. Load target in IDA (x86 exes).
2. let IDA Analyze the file completely (first-pass).
3. Run the Script: "/Map/pvmap.idc".
4. when finishing, a new file will be saved at 'c:/<file_name>.map'.
PVDasm:
1. Load target in PVDasm.
2. at "Decode New File" dialog screen, Click "Import MAP File" Button.
3. Select c:/<file_name>.map - PVDasm will load the information into it.
4. Disable/Uncheck "First Pass Analyzer" - IDA already did that for us!.
5. Press OK to disassemble, and view the output.
Note: upon successfull MAP importing,
we can see all the data imported via,
Function Editor and Data Editor (Alt+Ctrl+D / Alt+Ctrl+E)
|