lib/rex/pescan/search.rb in librex-0.0.33 vs lib/rex/pescan/search.rb in librex-0.0.34

@@ -1,56 +1,62 @@
 module Rex
 module PeScan
 module Search
 
 	require "rex/assembly/nasm"
-	
+
 	class DumpRVA
 		attr_accessor :pe
-		
+
 		def initialize(pe)
 			self.pe = pe
 		end
-		
+
 		def config(param)
 			@address = pe.vma_to_rva(param['args'])
 		end
-		
+
 		def scan(param)
 			config(param)
-			
+
 			$stdout.puts "[#{param['file']}]"
-			
+
 			# Adjust based on -A and -B flags
 			pre = param['before'] || 0
 			suf = param['after']  || 16
-			
+
 			@address -= pre
 			@address = 0 if (@address < 0 || ! @address)
-			
+
 			begin
 				buf = pe.read_rva(@address, suf)
 			rescue ::Rex::PeParsey::WtfError
 				return
 			end
-			
+
 			$stdout.puts pe.ptr_s(pe.rva_to_vma(@address)) + " " + buf.unpack("H*")[0]
 			if(param['disasm'])
-				::Rex::Assembly::Nasm.disassemble(buf).split("\n").each do |line|
-					$stdout.puts "\t#{line.strip}"
+				insns = []
+				d2 = Metasm::Shellcode.decode(buf, Metasm::Ia32.new).disassembler
+				addr = 0
+				while ((di = d2.disassemble_instruction(addr)))
+					insns << di.instruction
+					disasm = "0x%08x\t" % (pe.rva_to_vma(@address) + addr)
+					disasm << di.instruction.to_s
+					$stdout.puts disasm
+					addr = di.next_addr
 				end
 			end
-			
-		end	
+		end
 	end
 
 	class DumpOffset < DumpRVA
 		def config(param)
 			begin
 				@address = pe.file_offset_to_rva(param['args'])
 			rescue Rex::PeParsey::BoundsError
 			end
 		end
-	end	
+	end
 end
 end
 end