disassembler

diStorm64

*nix | disassembler | open source | windows

1.7.26

diStorm64 is an AMD64 disassembler, which is the first public free disassembler library for AMD64 out there.

diStorm is a binary stream disassembler. It's capable of disassembling 80x86 instructions in 64 bits (AMD64, x86-64) and both in 16 and 32 bits. In addition, it disassembles FPU, MMX, SSE, SSE2, SSE3 and 3DNow! (w/ extensions) and new x86-64 instruction sets. diStorm was written to decode quickly every instruction as accurately as possible. Robust decoding, while taking special care for valid or unused prefixes, is what makes this disassembler powerful, especially for research. Another benefit that might come in handy is that the module was written as multi-threaded, which means you could disassemble several streams or more simultaneously.

For rapidly use, diStorm is compiled for Python and is easily used in C as well. diStorm was originally written under Windows and ported later to Linux.

PEBrowse Pro Interactive

disassembler | freeware | windows | debugging

8.3.3

PEBrowse Professional Interactive builds upon the framework presented by PEBrowse Professional to create a very powerful, versatile, and customizable Win32 user mode debugger/disassembler. PEBrowse Interactive is not a source code debugger, but operates at the Intel x86 instruction level and therefore at the lowest level where your program executes. The debugger fully supports Microsoft .NET managed processes and seamlessly allows interop or mixed-mode debugging. It can be set as the startup debugger using the system registry Image File Execution Options key - useful for debugging ASP.NET applications.

PEBrowse Professional

disassembler | freeware | windows

9.0.6

PEBrowse Professional is a free static-analysis tool and disassembler for Win32 executables and Microsoft .NET assemblies produced according to the Portable Executable specifications published by Microsoft. For Microsoft Windows XP, Windows 2000, and others. (The program has not been tested on Windows 2003 Server and Vista, but it should work on those platforms. We have received reports that the software also works on other OSes, including Wine (!) and Windows CE.)

Udis86

*nix | assembly | disassembler | open source | windows | library

1.4

The new standalone build system makes udis86 usable and embeddable in kernel code (or other environments which, say, lack libc).


Udis86 is an easy-to-use minimalistic disassembler library (libudis86) for the x86 and AMD64 (x86-64) range of instruction set architectures. The primary intent of the design and development of udis86 is to aid software development projects that entail binary code analysis.

TatraDAS

*nix | assembly | disassembler | open source | windows

2.9.7

TatraDAS is disassembler of x86 executables which supports PE, NE, MZ, COM, ELF and unknown executable file formats. It includes disassembler, text viewer with syntax highlighting and enables modifying output (see Documentation), saving output to project and text files, export to NASM compilable files.

otx

disassembler | macos | open source

0.12b

otx stands for "object tool extended". otx uses otool(object tool) to disassemble a Mach-O executable file, then enhances the disassembled output. Simple enhancements include adding the machine code of each instruction as well as the offset of each instruction from the beginning of a function. More complicated enhancements include displaying the names of ObjC methods even if symbols have been stripped, and adding comments that describe member variables, function calls, static data and more.

PE Explorer

commercial | disassembler | windows

1.984

  • Working with PE files - exe, dll, sys, drv, bpl, dpl, cpl, ocx and more.
  • The ability to open a broken or packed file in Safe mode.
  • Support for custom plug-ins to perform any startup processing.

IDA Pro

*nix | commercial | disassembler | windows | debugging

5.0

IDA Pro is a Windows or Linux hosted multi-processor disassembler and debugger that offers so many features it is hard to describe them all.

RevEng

*nix | disassembler | open source

1.3.0

Reveng is a disassembler for BeOS. As some other elf disassemblers, reveng uses objdump GNU tool to create a first disassembly of the file, and then creates a more a readable output file. So what's the difference with these disassemblers? Reveng (tries to) get as much references as possible by analysing some parts of the code, allowing it to guess what is behind a "push %eax" for example. It also gets all dynamic symbols references.

C32Asm

binary editor | disassembler | freeware | patcher runtime, memory | windows

0.4.12

A good successor of W32Dasm.

  • Import functions list
  • Export functions list
  • Strings list
  • Jump trace
  • Hex editor
XML feed