News | Debuggers | Disassemblers | Monitors/Tracers | Packers/Encryptors | Unpackers/Decryptors | Patchers | Tools | Links
IDA |
||
| Interactive Disassembler v4.04 | link 20mb |
Very good disassembler (maybe even the
best). It's a must for every reverser. Producer: DataRescue http://www.datarescue.com |
| Ida Pro 3.8x QuickStart guide. | started.pdf (1,1mb) |
Documentation for IDA. |
| Fast Library Acquisition | flair38.zip (810kb) |
FLAIR utilities allow you to create your own signature files from OBJECT or LIBRARY files for IDA Pro v3.8 or higher. |
| IDS Utilities | idsutil.zip (133kb) |
This is a collection of utilities to create/maintain IDS files for IDA Pro. |
| LOADINT utility for IDA | idint384.zip (180kb) |
The LOADINT utility creates/updates the interrupts database file IDA.INT. |
| Plugins For IDA Pro Version 0.6 | ida_plugins06.zip (82kb) |
The 3 plugins are as
follows:
Supported versions of IDA: 4.04, 4.1, 4.14. |
Other Disassemblers/Tools |
||
| W32Dasm 8.93 | w32d893.zip
(609kb) |
Very good and simple to use
disassembler.
Very suitable for newbies. Producer: URSoftware http://www.expage.com/page/w32dasm |
| ex-vbr.zip (35kb) |
VBREF
v2.2 Visual Basic Disassembled String Reference Analyzer extension for W32Dasm. Author: DEATH of Execution http://execution.cjb.net ab4ds@hotmail.com |
|
| ver
8.9 [w32dasm_v8_9_patch.zip - MISSING]ver 8.93 [w32dasm_v8_93_patch.zip - MISSING](8kb) |
SDR Enabler for VB
Apps This W32Dasm patch will add some functionality to w32dasm by making it parse with no known problems, all the strings inside a VB App. The patched version does continue to work with all non VB Apps. W32Dasm 8.9 and 8.93 are supported. Author: duelist http://www.phys.uu.nl/~vdweerd/dread/relab/wdasmsdr.html duelist@beer.com |
|
| getload1.zip (52kb) |
Get PE Loader
1.1 This tool lets you to disassemble code from appended viral or packer routines (loader) which normally can't be disassembled using W32dasm. It extracts such a Loader and builds a "one-object" simple PE exe file. This file then can be disassembled using W32dasm. Sources in assembly included. Author: Net Walker! lnwalker@hotmail.com |
|
| w32d-laz.zip (24kb) |
LaZaRuS' W32Dasm patch A small patch for W32Dasm that allows you to modify currently in W32Dasm loaded programs with other apps. Without this patch you'll get a sharing violation. |
|
| Borg Disassembler v2.21 | borg221.zip (124kb) borg221s.zip (102kb) |
Windows
MZ/PE disassembler. Sources included. Author: Cronos http://www.cronos.cc Cronos@ntlworld.com |
| PEDasm 0.32 | pedasm.zip (121kb) |
PEDasm is a Win32 command line tool wich
disassemble binary files targeted for win32 X86 plateforms. It produces on output an asm
source file that can in several case be successefully recompiled with an masm compatible
assembler. Author: Nicolas Witczak http://www.geocities.com/SiliconValley/Lab/6307 witczak@geocities.com |
| PeRdr v0.0085 beta | perdr.0-0085b.zip (66kb) |
This program is a console mode PE (Windows Portable Executable program)
viewer/disassembler. It support full Pentium II instruction, old Intel processors instruction
(old system 486 instruction, 8087 and 80287 opcode), MMX Pentium III, Pentium III control instruction and full 3DNow!
extension. http://freddy77.tripod.com/perdr.html freddy77@angelfire.com |
| Sourcer 7.0 | sourcer7.zip (1mb) |
DOS/Windows executables
disassembler. Producer: V Communications http://www.v-com.com |
| TMG Ripper Studio v0.01 beta 3 | tmg_rs1b3.zip (40kb) |
This is a tool for converting a small part of a program into
assembly code that you could paste into your own sources. In other words, it makes recoding of GenerateKey-calls an easier
task. The program takes either a fileoffset or a virtual address as input and starts to disassemble from that point. When a conditional jump is
reached, it branches and follow both directions. It also follows unconditional jumps and traces
calls. Author: Chafe http://tmg.da.ru |
| VB3 Deprotector v.1.2 | vb3depr.zip (135kb) |
Deprotector for Microsoft Visual Basic 3 programs to work with DoDi's
Disassembler. Author: MCsoft mcsoft99@listbot.com |
| VBOpt4 | vb4tools.zip (230kb) |
DoDi's Disassembler for Microsoft Visual
Basic 4. Author: Hans-Peter Diettrich (DoDi) http://members.aol.com/VBDis VBDis@aol.com |
Decompilers |
||
| DeDe v2.44 | DeDe244full.zip (1,212mb) Other files |
DeDe is a very fast program that can analize executables compiled with Delphi 3,4,5 and give you the
following:
Author: DaFixer |
| Revendepro 0.0.2.17 | RevendeproBin4.zip (322kb) RevendeproBin5.zip (333kb) RevendeproSrc.zip (217kb) |
Delphi
decompiler.
It gets all the classes, TypeInfos, procedures, strings, vars and
constants. Sources are available. Author: Python http://www.puthoon.com python@puthoon.com |
| E_WISE 2.29 | e_wise.zip (53kb) |
WISE Setup
unpacker.
It's better tahn exwise because it can handle more WISE-versions and can retrive filenames and
date/time. Author: Veit Kannegieser http://www-user.TU-Cottbus.DE/~kannegv Veit.Kannegieser@gmx.de |
| EXE2DPR 3.1 | exe2dpr.zip (11kb) |
If you lose your Delphi 1.0-4.0 or C++Builder 3.0 project
sources, but
have an executable file, then this tool can rescue part of lost sources. Rescuer produces all project forms and data modules with all assigned
properties and events. Produced event procedures don't have a body (it is not a
decompiler), but have an address of code in executable file. Author: Dmitriy Goldobin http://www.ems.ru/~gold/ gold@ems.ru |
| exwise v0.5 | exwise05.zip (110kb) |
This decompresses WISE install
executables. Source included. Author: Andrew de Quincey http://www.tardis.ed.ac.uk/~adq adq@tardis.ed.ac.uk |
| isDcc v1.22 | isdcc122.zip (56kb) |
InstallShield decompiler. It supports all
versions of InstallShield up to v5.5. Author: Andrew de Quincey http://www.tardis.ed.ac.uk/~adq adq@tardis.ed.ac.uk |
| InstallShield Decompiler | wisdec.zip (376kb) |
Windows Installshield
Decompiler. Author: NaTzGUL/SiraX sirax@dongle.net |
(c) 1999, 2000 by Player