ETU-Dasm_v2.35_ALPHA by Ripper (Fuckup5Group)

FROM:EXETOOLS by zelda

Easy-to-use disassembler
Author: Ripper (Fuckup5Group)
Additional programming
http://bbs.pediy.com/attachment.php?s=&attachmentid=1682
转自:exetools.com ETU-Dasm is a dynamic 32/16-bit disassembler + hexeditor for Win9X and above. Dynamic, because it doesn't create a deadcode listing so you have to wait years (for big programms ) to even have a first look at the code and you can change the code by changing the opcodes directly (either in asm or hex mode) or click on the command (not the parameters) and type in the whole command (though, there are still far too much commands not supported by the opcode.dll .....). Also ETU has features like scanning all code and executable sections for code (call & jxxx), import, menu and ressource string references (no string reference scanning yet, but you can use the search function + popup menu on the first character of the string to search for a memory reference). Another useful feature is the "Fixed registers" feature, which allows you to set fixed values for single registers which will be replaced in the showed code, which is especially helpful for programms with relative positioning where everything depends on EBP for example. You can see an example of that feature on our download page at http://www.fuckup5group.de.vu (see button below) (while the page is mainly in German, ETU is completly in English). One feature we're currently working on is being able to "trace" the programm inside the file by emulating the code execution. This is meant to help replacing stuff like push 12345678 pop eax rol eax,7 xor eax,63826333 by a mov eax,what ever's the result *beinglazy* Also ChaosCreator is just working on routines to eliminate redundant code like jumps to other jumps or the above code more or less automatically, to naivly help us to analyse ExeCryptorized code (this is our first more intense look at any protectors, so please execuse the naive way we look at these problems ) So, please have a look at our tool and post any suggestions, bugs or things you don't like at all ;D Greets Ripper PS: The 16-bit mode is currently rather broken in the v2.21. PPS: Oh, I forgot to mention, that it also supports MAP files, which of course is very handy for debugging or other things, if you got the MAP file from IDA, Dede or something like that http://bbs.pediy.com/upload/image/2004/Dasm.gif_891.gif 附件:ETU-Dasm.zip (bbs.pediy.com/upload/file/2004/11/ETU-Dasm.zip_932.zip)
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值