Location:
Search - Disassemble
Search list
Description: LUA脚本动态反编译代码（直接用LUA脚本写的）
ChunkSpy is a tool to disassemble a Lua binary chunk into a verbose
listing that can then be studied. Its output bears a resemblance to the
output listing of assemblers. Nick Trout s vmmerge5.lua was the tool
that prompted me to write ChunkSpy, because I wanted something that can
tell me in great detail what goes on inside a Lua binary chunk file, not
just the instructions. It is intended to be a tool for learning Lua
internals as well.
Platform: |
Size: 67844 |
Author: lilin |
Hits:
Description: ead file \"YD.DOC\".
Who is the intended user
Beginners in assembly and programmers.
Features of the program:
Yilmaz Disassembler:is an interactive disassembler which lets the user be a part of the disassembling process,is flexible, the user can disassemble in different formats,has user friendly interface, mouse support, pop-up menu commands, short cut key commands, context-sensitive on-line help,and it is cheap.
Program s capacity and limitations:
Max executable file size is 64 KB.
Can not disassemble program of EXE-format.Only 8086/8088 CPU instructions can be disassembled.
Disassemble 8087 Math Co-processor s instructions.
Platform: |
Size: 100857 |
Author: 刘清 |
Hits:
Description: disassemble Motorola 68000 family object code
Platform: |
Size: 54805 |
Author: shine |
Hits:
Description: Please excuse my english... It's so bad :)
Hacker Disassembler Engine, or HDE, is small disassembler engine, which intend to
code analyse. HDE get length of command, prefixes, ModR/M and SIB bytes, opcode,
immediate, displacement, relative address, etc. For example, you can use HDE when
writing unpackers or decryptors executable files, because more others disassemblers
too big, get only disasm listing and aren't intended for code analys, but more simple
length disassemblers usually get too little info. HDE get enough info to analyse, but
it has very small size. HDE package include DLL, objects, headers files and and source.
+ support MMX, SSE, SSE2, SSE3, 3DNow! instructions
+ high-speed & small size (coded in assembler ;)
+ compatibility with most coding language
To disassemble should call hde_disasm function:
DWORD hde_disasm(
void *pCode // pointer to code
HDE_STRUCT *pHDE_STRUCT // pointer to structure HDE_STRUCT
);
Function return length of command and fill structure HDE_STRUCT:
struct HDE_STRUCT
{
BYTE len; // length of command
BYTE p_rep; // rep/repnz/.. prefix: 0xF2 or 0xF3
BYTE p_lock; // lock prefix 0xF0
BYTE p_seg; // segment prefix: 0x2E, 0x36, 0x3E, 0x26, 0x64, 0x65
BYTE p_66; // prefix 0x66
BYTE p_67; // prefix 0x67
BYTE opcode; // opcode
BYTE opcode2; // second opcode, if first opcode equal 0x0F
BYTE modrm; // ModR/M byte
BYTE modrm_mod; // - mod byte of ModR/M
BYTE modrm_reg; // - reg byte of ModR/M
BYTE modrm_rm; // - r/m byte of ModR/M
BYTE sib; // SIB byte
BYTE sib_scale; // - scale (ss) byte of SIB
BYTE sib_index; // - index byte of SIB
BYTE sib_base; // - base byte of SIB
BYTE imm8; // immediate imm8
WORD imm16; // immediate imm16
DWORD imm32; // immediate imm32
BYTE disp8; // displacement disp8
WORD disp16; // displacement disp16, if prefix 0x67 exist
DWORD disp32; // displacement disp32
BYTE rel8; // relative address rel8
WORD rel16; // relative address rel16, if prefix 0x66 exist
DWORD rel32; // relative address rel32
};
Opcode and len fields always exist, others are optional and depend of command. If
field's value equal zero, then it isn't existing.
Note: HDE work only with 32-bit commands of x86 processors !
Platform: |
Size: 23447 |
Author: sys0007 |
Hits:
Description: DeDe是一个非常快的程序，用于分析Delphi编译的可执行文件。反编译之后，DeDe会提供以下信息：所有的目标dfm文件。你可以用Delphi打开并编辑它们； 带有良好的注释的ASM代码的所有发布的方法，它涉及字符串、输入函数调用、类方法调用、单元的组件、Try-Except和Try-Finally块。默认情况下，DeDe仅仅只获得已发布方法的源代码，但如果你通过使用Tools | Disassemble Proc菜单知道RVA偏移量的话，你也可以处理可执行文件中的其他过程。 大量的附加信息。 你可以创建一个带有所有的dfm、pas、dpr文件的Delphi工程的文件夹。注：pas文件包含上面提及的被良好注释过的ASM代码。他们不能被再编译！
Platform: |
Size: 5305055 |
Author: 54984527@qq.com |
Hits:
Description:
Platform: |
Size: 15360 |
Author: |
Hits:
Description: usb-jtag转换,sparc芯片反汇编,sparc芯片调试的工具,可以对芯片内的gpio,sdram,flash进行读写,还可以一次下载64K大小的数据,反汇编,在线调试.-usb-jtag conversion, sparc chips disassemble, sparc-chip debug tools, can chip the gpio, sdram, flash read and write, but also can download data size 64K, anti-compilation, on-line debugging.
Platform: |
Size: 278528 |
Author: tony |
Hits:
Description: 海康YUV422转BMP的源程序，反汇编研究了一个晚上得来的-Haikang YUV422 to BMP source, disassemble studied one evening come
Platform: |
Size: 1024 |
Author: cyb70289 |
Hits:
Description: disassemble Motorola 68000 family object code
Platform: |
Size: 54272 |
Author: shine |
Hits:
Description: LDE32反汇编引擎：
我把ADE32的反汇编引擎由C++改为MASM了。网上是有一个GAS的版本，考虑到咱国家还是用MASM的多些。 要是发现代码有错误。希望及时通知我，我及时修改-LDE32 disassemble the engine: I ADE32 compilation of the engine from the anti-C++ Changed the MASM. There is a GAS-line version, taking into account the country or with God
Platform: |
Size: 111616 |
Author: 宋芬 |
Hits:
Description: EPSnap v1.0.1.3 反汇编所的 原代码
屏幕捕捉功能-EPSnap v1.0.1.3 disassemble the original code screen capture
Platform: |
Size: 320512 |
Author: Jace |
Hits:
Description: 演示汇编写窗口函数,可以反汇编出原码,这是一个很简单,典型的程序-Compilation of written presentation window function, you can disassemble the original code, this is a very simple and typical procedure
Platform: |
Size: 1024 |
Author: liuaimin |
Hits:
Description: 这是一个用汇编语言写的flash程序,可以用反汇编出原码,很有典型意义-This is a compilation of the language used to write the flash program can be used to disassemble the original code, is very typical
Platform: |
Size: 3072 |
Author: liuaimin |
Hits:
Description: Kris Kaspersky的反汇编教程，是数据挖掘必不可少的好书。-Kris Kaspersky Anti-compilation of tutorials, data mining is essential for a good book.
Platform: |
Size: 4947968 |
Author: 树军 |
Hits:
Description: 所有的DFM文件的目标。您将能够打开和编辑用Delphi
-所有出版方法以及评论学会代码引用字符串，进口函数调用，类方法的要求，部分单位，试除和尝试最后块。默认情况下只有德德retreives发表方法来源，但您可能还进程中的另一个可执行程序，如果你知道RVA谱抵消使用工具|拆卸过程菜单
-很多其他信息。
-您可以创建一个项目文件夹德尔福与所有的DFM ，考绩制度，洼地文件。注：考绩档案包含上述以及评论学会代码。他们不能重新编译！-- All dfm files of the target. You will be able to open and edit them with Delphi
- All published methods in well commented ASM code with references to strings, imported function calls, classes methods calls, components in the unit, Try-Except and Try-Finally blocks. By default DeDe retreives only the published methods sources, but you may also process another procedure in a executable if you know the RVA offset using the Tools|Disassemble Proc menu
- A lot of additional information.
- You can create a Delphi project folder with all dfm, pas, dpr files. Note: pas files contains the mentioned above well commented ASM code. They can not be recompiled !
Platform: |
Size: 647168 |
Author: crodling |
Hits:
Description: Windows 反汇编工具，用于反汇编PE文件格式-The tool is used to disassemble PE File.
Platform: |
Size: 193536 |
Author: peter cheng |
Hits:
Description: 几个小程序，实现反汇编，由可执行文件反汇编成C源码。希望对大家有用-A few small programs to achieve the anti-compile, disassemble the executable file into C source code. We hope to be useful
Platform: |
Size: 192512 |
Author: |
Hits:
Description: This the Win32 version of my disassembler that will disassemble almost any kind of file. There are a few errors but not many. It will produce a listing file and also an .asm output which with a little editing is comatiable with nasm or yasm. The executable is in the Release directory. It compiles with VC++6-This is the Win32 version of my disassembler that will disassemble almost any kind of file. There are a few errors but not many. It will produce a listing file and also an .asm output which with a little editing is comatiable with nasm or yasm. The executable is in the Release directory. It compiles with VC++6
Platform: |
Size: 183296 |
Author: dancie |
Hits:
Description: 本机硬件ID查看器V1。0
用了好久功能还不错。-version, has been shelling. Can be used to protect its own software, you can disassemble to study.
Platform: |
Size: 555008 |
Author: 陈五笑 |
Hits:
Description: Disassemble SuperH instructions.
Platform: |
Size: 4096 |
Author: sarueheng |
Hits: