3

I have a DOS program that I'm trying to reverse engineer. It uses the Causeway Extender(also known as DOS4GW) in order to load the program into 32-bit protected mode, and IDA Pro 5.0 cannot extract this for me. I saw another post that was similar where a guy said he unpacked the exe, but there was no description as to how he did it. I'd provide the link, but ironically I can no longer find it.

To clarify, I'm looking for an existing tool which I can use to 'unpack' this program for disassembly by IDA Pro or something. So far I've had no luck finding such a program.

NirIzr
  • 11,765
  • 1
  • 37
  • 87
Sevalecan
  • 131
  • 2
  • I did that once (it was a pain though) - use a freeware dos extender to separate the 32 bit file from the MSDOS stub, use ida 4.1 to convert it to an idc database, open the database with 5.0 (because ida free 5.0 doesn't read the LE format, but can read old databases that use it. Details here. – Guntram Blohm Jul 24 '15 at 22:34
  • 2
    DOS4GW is not the same as Causeway, what gave you that idea? – Igor Skochinsky Jul 26 '15 at 12:25

1 Answers1

1

Causeway extender sources have been released into public domain:

http://www.devoresoftware.com/freesource/cwsrc.htm

The source includes the packer program (CWC) and the decompressor stub(DECSTUB.ASM).

Igor Skochinsky
  • 36,553
  • 7
  • 65
  • 115