Location:
Search - disasm engine
Search list
Description: Please excuse my english... It's so bad :)
Hacker Disassembler Engine, or HDE, is small disassembler engine, which intend to
code analyse. HDE get length of command, prefixes, ModR/M and SIB bytes, opcode,
immediate, displacement, relative address, etc. For example, you can use HDE when
writing unpackers or decryptors executable files, because more others disassemblers
too big, get only disasm listing and aren't intended for code analys, but more simple
length disassemblers usually get too little info. HDE get enough info to analyse, but
it has very small size. HDE package include DLL, objects, headers files and and source.
+ support MMX, SSE, SSE2, SSE3, 3DNow! instructions
+ high-speed & small size (coded in assembler ;)
+ compatibility with most coding language
To disassemble should call hde_disasm function:
DWORD hde_disasm(
void *pCode // pointer to code
HDE_STRUCT *pHDE_STRUCT // pointer to structure HDE_STRUCT
);
Function return length of command and fill structure HDE_STRUCT:
struct HDE_STRUCT
{
BYTE len; // length of command
BYTE p_rep; // rep/repnz/.. prefix: 0xF2 or 0xF3
BYTE p_lock; // lock prefix 0xF0
BYTE p_seg; // segment prefix: 0x2E, 0x36, 0x3E, 0x26, 0x64, 0x65
BYTE p_66; // prefix 0x66
BYTE p_67; // prefix 0x67
BYTE opcode; // opcode
BYTE opcode2; // second opcode, if first opcode equal 0x0F
BYTE modrm; // ModR/M byte
BYTE modrm_mod; // - mod byte of ModR/M
BYTE modrm_reg; // - reg byte of ModR/M
BYTE modrm_rm; // - r/m byte of ModR/M
BYTE sib; // SIB byte
BYTE sib_scale; // - scale (ss) byte of SIB
BYTE sib_index; // - index byte of SIB
BYTE sib_base; // - base byte of SIB
BYTE imm8; // immediate imm8
WORD imm16; // immediate imm16
DWORD imm32; // immediate imm32
BYTE disp8; // displacement disp8
WORD disp16; // displacement disp16, if prefix 0x67 exist
DWORD disp32; // displacement disp32
BYTE rel8; // relative address rel8
WORD rel16; // relative address rel16, if prefix 0x66 exist
DWORD rel32; // relative address rel32
};
Opcode and len fields always exist, others are optional and depend of command. If
field's value equal zero, then it isn't existing.
Note: HDE work only with 32-bit commands of x86 processors !
Platform: |
Size: 23447 |
Author: sys0007 |
Hits:
Description: Z0MBiE DISASM ENGINE
Platform: |
Size: 17408 |
Author: jaguar77 |
Hits:
Description: 一个简单反汇编引擎，Visual Studio 2010 编译通过，部分处理可能欠缺或失误，但不失为是很好的参考资料！-[A simple to disassemble the engine, Visual Studio 2010 to compile, some that may lack or failure, it is still a good reference!]
Platform: |
Size: 41984 |
Author: rrrfff |
Hits:
Description: 反汇编引擎VC库asm调用
反汇编引擎VC库asm调用-Disassemble the engine for VC asm call
Platform: |
Size: 975872 |
Author: jjjjjjjjjj |
Hits:
Description: 只有400行的反汇编引擎 只有400行的反汇编引擎 只有400行的反汇编引擎 只有400行的反汇编引擎-assembly engine which has only four handred codesassembly engine which has only four handred codesassembly engine which has only four handred codesassembly engine which has only four handred codes
Platform: |
Size: 12288 |
Author: tianguo |
Hits:
Description: 一个反汇编引擎C源码，简单好用，一个h文件，一个c文件，可以直接输出汇编源码。(An disassemble engine C source code, simple and easy to use, a h file, a C file, you can directly output assembler source code.)
Platform: |
Size: 14336 |
Author: istang
|
Hits: