DISASSEMBLERS
|
IDA |
||
| Interactive Disassembler v4.04 | link 20mb |
Very
good disassembler (maybe even the best). It's a must for every reverser. Producer: DataRescue http://www.datarescue.com |
| Ida Pro 3.8x QuickStart guide. | started.pdf (1,1mb) |
Documentation for IDA. |
| Fast Library Acquisition | flair38.zip (810kb) |
FLAIR utilities allow you to create your own signature files from OBJECT or LIBRARY files for IDA Pro v3.8 or higher. |
| IDS Utilities | idsutil.zip (133kb) |
This is a collection of utilities to create/maintain IDS files for IDA Pro. |
| LOADINT utility for IDA | idint384.zip (180kb) |
The LOADINT utility creates/updates the interrupts database file IDA.INT. |
| Plugins For IDA Pro Version 0.6 | ida_plugins06.zip (82kb) |
The
3 plugins are as follows:
Supported
versions of IDA: 4.04, 4.1, 4.14. |
|
Other Disassemblers/Tools |
||
| W32Dasm 8.93 | w32d893.zip
(609kb) |
Very
good and simple to use disassembler. Very suitable for newbies. Producer: URSoftware http://www.expage.com/page/w32dasm |
| ex-vbr.zip (35kb) |
VBREF
v2.2 Visual Basic Disassembled String Reference Analyzer extension for W32Dasm. Author: DEATH of Execution http://execution.cjb.net ab4ds@hotmail.com |
|
| ver
8.9 ver 8.93 (8kb) |
SDR
Enabler for VB Apps This W32Dasm patch will add some functionality to w32dasm by making it parse with no known problems, all the strings inside a VB App. The patched version does continue to work with all non VB Apps. W32Dasm 8.9 and 8.93 are supported. Author: duelist http://www.phys.uu.nl/~vdweerd/dread/relab/wdasmsdr.html duelist@beer.com |
|
| getload1.zip (52kb) |
Get
PE Loader 1.1 This tool lets you to disassemble code from appended viral or packer routines (loader) which normally can't be disassembled using W32dasm. It extracts such a Loader and builds a "one-object" simple PE exe file. This file then can be disassembled using W32dasm. Sources in assembly included. Author: Net Walker! lnwalker@hotmail.com |
|
| w32d-laz.zip (24kb) |
LaZaRuS'
W32Dasm patch A small patch for W32Dasm that allows you to modify currently in W32Dasm loaded programs with other apps. Without this patch you'll get a sharing violation. |
|
| Borg Disassembler v2.21 | borg221.zip (124kb) borg221s.zip (102kb) |
Windows
MZ/PE disassembler. Sources included. Author: Cronos http://www.cronos.cc Cronos@ntlworld.com |
| PEDasm 0.32 | pedasm.zip (121kb) |
PEDasm
is a Win32 command line tool wich disassemble binary files targeted for
win32 X86 plateforms. It produces on output an asm source file that can
in several case be successefully recompiled with an masm compatible assembler. Author: Nicolas Witczak http://www.geocities.com/SiliconValley/Lab/6307 witczak@geocities.com |
| PeRdr v0.0085 beta | perdr.0-0085b.zip (66kb) |
This
program is a console mode PE (Windows Portable Executable program) viewer/disassembler.
It support full Pentium II instruction, old Intel processors instruction
(old system 486 instruction, 8087 and 80287 opcode), MMX Pentium III, Pentium
III control instruction and full 3DNow! extension. http://freddy77.tripod.com/perdr.html freddy77@angelfire.com |
| Sourcer 7.0 | sourcer7.zip (1mb) |
DOS/Windows
executables disassembler. Producer: V Communications http://www.v-com.com |
| TMG Ripper Studio v0.01 beta 3 | tmg_rs1b3.zip (40kb) |
This is a tool for converting a small part of
a program into assembly code that you could paste into your own sources.
In other words, it makes recoding of GenerateKey-calls an easier task. The
program takes either a fileoffset or a virtual address as input and starts
to disassemble from that point. When a conditional jump is reached, it branches
and follow both directions. It also follows unconditional jumps and traces
calls. Author: Chafe http://tmg.da.ru |
| VB3 Deprotector v.1.2 | vb3depr.zip (135kb) |
Deprotector
for Microsoft Visual Basic 3 programs to work with DoDi's Disassembler. Author: MCsoft mcsoft99@listbot.com |
| VBOpt4 | vb4tools.zip (230kb) |
DoDi's
Disassembler for Microsoft Visual Basic 4. Author: Hans-Peter Diettrich (DoDi) http://members.aol.com/VBDis VBDis@aol.com |
|
Decompilers |
||
| DeDe v2.44 | DeDe244full.zip (1,212mb) Other files |
DeDe is a very fast program that can analize executables compiled with Delphi
3,4,5 and give you the following:
Author:
DaFixer |
| Revendepro 0.0.2.17 | RevendeproBin4.zip (322kb) RevendeproBin5.zip (333kb) RevendeproSrc.zip (217kb) |
Delphi
decompiler. It gets all the classes, TypeInfos, procedures, strings, vars
and constants. Sources are available. Author: Python http://www.puthoon.com python@puthoon.com |
| E_WISE 2.29 | e_wise.zip (53kb) |
WISE
Setup unpacker. It's better tahn exwise because it can handle more WISE-versions
and can retrive filenames and date/time. Author: Veit Kannegieser http://www-user.TU-Cottbus.DE/~kannegv Veit.Kannegieser@gmx.de |
| EXE2DPR 3.1 | exe2dpr.zip (11kb) |
If
you lose your Delphi 1.0-4.0 or C++Builder 3.0 project sources, but have
an executable file, then this tool can rescue part of lost sources. Rescuer
produces all project forms and data modules with all assigned properties
and events. Produced event procedures don't have a body (it is not a decompiler),
but have an address of code in executable file. Author: Dmitriy Goldobin http://www.ems.ru/~gold/ gold@ems.ru |
| exwise v0.5 | exwise05.zip (110kb) |
This
decompresses WISE install executables. Source included. Author: Andrew de Quincey http://www.tardis.ed.ac.uk/~adq adq@tardis.ed.ac.uk |
| isDcc v1.22 | isdcc122.zip (56kb) |
InstallShield
decompiler. It supports all versions of InstallShield up to v5.5. Author: Andrew de Quincey http://www.tardis.ed.ac.uk/~adq adq@tardis.ed.ac.uk |
| InstallShield Decompiler | wisdec.zip (376kb) |
Windows
Installshield Decompiler. Author: NaTzGUL/SiraX sirax@dongle.net |