Programmers' Tools - disassembler

diStorm64

Sat, 1 Sep 2007 12:20:57 -0700

Version:
1.7.26

Description:

diStorm64 is an AMD64 disassembler, which is the first public free disassembler library for AMD64 out there.

diStorm is a binary stream disassembler. It's capable of disassembling 80x86 instructions in 64 bits (AMD64, x86-64) and both in 16 and 32 bits. In addition, it disassembles FPU, MMX, SSE, SSE2, SSE3 and 3DNow! (w/ extensions) and new x86-64 instruction sets. diStorm was written to decode quickly every instruction as accurately as possible. Robust decoding, while taking special care for valid or unused prefixes, is what makes this disassembler powerful, especially for research. Another benefit that might come in handy is that the module was written as multi-threaded, which means you could disassemble several streams or more simultaneously.

For rapidly use, diStorm is compiled for Python and is easily used in C as well. diStorm was originally written under Windows and ported later to Linux.

PEBrowse Pro Interactive

Sun, 8 Jul 2007 02:20:24 -0700

Version:
8.3.3

Description:

PEBrowse Professional Interactive builds upon the framework presented by PEBrowse Professional to create a very powerful, versatile, and customizable Win32 user mode debugger/disassembler. PEBrowse Interactive is not a source code debugger, but operates at the Intel x86 instruction level and therefore at the lowest level where your program executes. The debugger fully supports Microsoft .NET managed processes and seamlessly allows interop or mixed-mode debugging. It can be set as the startup debugger using the system registry Image File Execution Options key - useful for debugging ASP.NET applications.

PEBrowse Professional

Sun, 8 Jul 2007 02:19:55 -0700

Version:
9.0.6

Description:

PEBrowse Professional is a free static-analysis tool and disassembler for Win32 executables and Microsoft .NET assemblies produced according to the Portable Executable specifications published by Microsoft. For Microsoft Windows XP, Windows 2000, and others. (The program has not been tested on Windows 2003 Server and Vista, but it should work on those platforms. We have received reports that the software also works on other OSes, including Wine (!) and Windows CE.)

Udis86

Wed, 3 Jan 2007 09:14:25 -0800

Version:
1.4

News:

The new standalone build system makes udis86 usable and embeddable in kernel code (or other environments which, say, lack libc).

Description:

Udis86 is an easy-to-use minimalistic disassembler library (libudis86) for the x86 and AMD64 (x86-64) range of instruction set architectures. The primary intent of the design and development of udis86 is to aid software development projects that entail binary code analysis.

TatraDAS

Mon, 30 Oct 2006 01:05:10 -0800

Version:
2.9.7

Description:

TatraDAS is disassembler of x86 executables which supports PE, NE, MZ, COM, ELF and unknown executable file formats. It includes disassembler, text viewer with syntax highlighting and enables modifying output (see Documentation), saving output to project and text files, export to NASM compilable files.

otx

Mon, 18 Sep 2006 15:13:08 -0700

Version:
0.12b

Description:

otx stands for "object tool extended". otx uses otool(object tool) to disassemble a Mach-O executable file, then enhances the disassembled output. Simple enhancements include adding the machine code of each instruction as well as the offset of each instruction from the beginning of a function. More complicated enhancements include displaying the names of ObjC methods even if symbols have been stripped, and adding comments that describe member variables, function calls, static data and more.

PE Explorer

Mon, 4 Sep 2006 01:05:51 -0700

Version:
1.984

Description:

Working with PE files - exe, dll, sys, drv, bpl, dpl, cpl, ocx and more.
The ability to open a broken or packed file in Safe mode.
Support for custom plug-ins to perform any startup processing.

IDA Pro

Sun, 9 Apr 2006 16:30:35 -0700

Version:
5.0

Description:

IDA Pro is a Windows or Linux hosted multi-processor disassembler and debugger that offers so many features it is hard to describe them all.

RevEng

Mon, 26 Dec 2005 02:46:12 -0800

Version:
1.3.0

Description:

Reveng is a disassembler for BeOS. As some other elf disassemblers, reveng uses objdump GNU tool to create a first disassembly of the file, and then creates a more a readable output file. So what's the difference with these disassemblers? Reveng (tries to) get as much references as possible by analysing some parts of the code, allowing it to guess what is behind a "push %eax" for example. It also gets all dynamic symbols references.

C32Asm

Mon, 26 Dec 2005 02:12:55 -0800

Version:
0.4.12

Description:

A good successor of W32Dasm.

Import functions list
Export functions list
Strings list
Jump trace
Hex editor

HDasm

Fri, 2 Dec 2005 11:29:29 -0800

Version:
1.06b

Description:

HDasm is a very fast and comfortable free disassembler. A good successor of W32Dasm.

support for com, MZ and PE executables.
going over the jmp and call instructions and to given addresses, storing addresses in history.

TMG Ripper Studio

Tue, 5 Jul 2005 08:16:43 -0700

Version:
0.03

Description:

This is a tool for converting a small part of a program into assemblycode that you could paste into your own sources. The program takes either a fileoffset or a virtual address as input and starts to disassemble from that point. When a conditional jump is reached, it branches and follow both directions. It also follows unconditional jumps and traces calls...

PEReaDeR

Tue, 5 Jul 2005 08:14:11 -0700

Version:
0.104b

Description:

This program is a console mode PE (Windows Portable Executable program) viewer/disassembler. It support full Pentium II instruction, old Intel processors instruction (old system 486 instruction, 8087 and 80287 opcode), MMX Pentium III, Pentium III control instruction and full 3DNow! extension.

Borg

Tue, 5 Jul 2005 08:11:12 -0700

Version:
2.27

Description:

It is a disassembler for Win32 PE files, although other files will load up the support for other file types is not complete yet (most notably NE/LE/LX files are not properly supported).

PEDasm

Tue, 5 Jul 2005 06:47:12 -0700

Version:
0.32

Description:

PEDasm is a Win32 command line tool wich disassemble binary files targeted for win32 X86 platforms. It produces on output an asm source file that can in several case be successefully recompiled with an masm compatible assembler . This executable may be downloaded and used freeely.