Log in

View Full Version : PVDasm 1.5e


Bengaly
November 23rd, 2004, 06:02
Hi all,

a new version is up,
with gui fixes and additions.

hxxp://pvdasm.anticrack.de/?Section=1

Enjoy

-Bengaly.

Bengaly
November 28th, 2004, 17:57
Due to recent hacks,
i guess some didn't noticed i released a new version which fixed 2 nasty bugs, and i renamed the built to 1.5f. (keep confuse out)
since my domain is down now , i will upload the release here; so some at least can fetch it from the net.

thanks for the support.
regards,

-Bengaly.

Mostek
November 29th, 2004, 08:13
Hey a nice project. Keep it up.


Peace
Mostek

Bengaly
November 29th, 2004, 10:38
2 years old now
thanks.

JMI
November 29th, 2004, 12:06
Always glad to have your contributions here. Keep up the good work and hopefully anticrack will be back soon.

Regards,

Bengaly
November 29th, 2004, 13:35
cool thanks JMI!

Solomon
November 29th, 2004, 23:42
great disassembler. Hope more features can be added in the feature.

crUsAdEr
November 30th, 2004, 00:59
I tried it again today, those pop up screen that appears out of no where are really annoying, anywhere to disable those?

I tried disassembling a file and if i force disassembly before EP then it give garbage, plus addresses seems wrong after a while... from 40Axxx it jumps to 3040xxxx... i cant even go to EP, it says address not found!

If i disable disassembly before EP and enable start disassembling from EP then the code looks good except i dont know how to access code area before EP

Just a short bug report

Bengaly
November 30th, 2004, 02:05
crUsAdEr:
Quote:
Just a short bug report

keep'em comming

Quote:
those pop up screen that appears out of no where are really annoying


well, if you put your mouse over a jmp/call address than it will open the window which shows the target code insted of following it by hand.
if you blindly moving the mouse over the instruction, than yes it can be like an annoying popup window .. so yes i will add an option to disable it on the fly.

Quote:
from 40Axxx it jumps to 3040xxxx

can be a buffer problem, i'll have to have the same exe so i can test it here - hint hint.

Quote:
i cant even go to EP, it says address not found!

yeah, because a disassembler is also depending on FirstPass analyzer, pvdasm currently has a basic one - mostly what it do is to align the data/code

Quote:
If i disable disassembly before EP and enable start disassembling from EP then the code looks good except i dont know how to access code area before EP

disabling this option will not disassembly anything before the ep, the code will be presenting in byte form.

to somehow make the disassembly more readble, you can try play with the extended options->data window and mark the addresses which should not be disassembled, or you can also increase the bytes from EP to disassemble from 1 to further (11 will be fair enough), and it shell fix your ep not found problem.

and if some still want to use pvdasm, you can share data between pvdasm and ida - load target in ida, make map, load in pvdasm and do whatever you want .

Solomon:
thanks, what features you like to see ?

keep bugs comming!

homersux
December 3rd, 2004, 17:27
hi, there, great tool, I use it from time to time. There are a couple things
that can be improved:

1) file lock on open, i understand some people may even prefer this but
I'd really like to see an option to make this either lock or non-lock so that a snapshot of a build can be viewed and compared with another build. As it is, this locking is a major inconvenience for me.

2) on the tool bar, I'd really prefer to have 2 more buttons to open/close files
more quickly rather than go through the mouse clicks

3) move the docking asm window out of the way, at least it should not hide the view of subsequent instructions after call/jmp etc.

I can help to develop these features, PM me if you want me to code something in.

Bengaly
December 4th, 2004, 06:15
I PM'ed back homersux