Index
> Projects and Ideas > LDE - Length Disassembly Engine [done] |
| Author |
|
|
Reverend 13 Aug 2005, 11:42
I wrote my own lde. It is a proc, that returns length of current opcode in address given as an argument. I wrote it for enhancing ApiResolve (my other program) possiblities. Code is os independent (as it doesn't use any API). Hope someone will find it useful
EDIT: v1.3.2 has many bugs fixed and is heavily optimized for speed
Last edited by Reverend on 23 Oct 2006, 12:25; edited 1 time in total |
|||||||||||
13 Aug 2005, 11:42 |
|
|
comrade 13 Aug 2005, 16:00
excellent
|
|||
|
13 Aug 2005, 16:00 |
|
|
Reverend 13 Aug 2005, 21:18
Good guess
The program searches opcode by opcode for ret. Searching byte by byte didn't work, but when I know how many bytes does the current opcode have I can go through them. But this thread is not about ApiResolve |
|||
|
13 Aug 2005, 21:18 |
|
|
Raedwulf 14 Aug 2005, 07:20
My DLL2INC does the same but it disassembles using UDis86...kinda slow...well extremely slow
Here's something i found though...in kernel32.dll some of the api calls have more than one ret and they are not always the same. I designed my DLL2INC to pick the ret with the highest number for a function because it seems to be always the correct number. Note: I'm not planning to release this version of DLL2INC because it is in VB6....I'm still planning to ma ke a FASM version...when I have time |
|||
|
14 Aug 2005, 07:20 |
|
|
Reverend 23 Oct 2006, 12:26
New version in the first post. Enjoy
 |
|||
|
23 Oct 2006, 12:26 |
|
|
RedGhost 27 Nov 2006, 06:53
Awesome, I kept looking for ADE32 by z0mbie but I couldn't find it /any where/. Thank you.
edit: Very clean code, well done. _________________ redghost.ca |
|||
|
27 Nov 2006, 06:53 |
|
|
Vasilev Vjacheslav 27 Nov 2006, 07:35
here ade32 from z0mbie
_________________ [not enough memory] |
|||||||||||
|
27 Nov 2006, 07:35 |
|
|
RedGhost 27 Nov 2006, 11:20
Vasilev Vjacheslav wrote: here ade32 from z0mbie I needed it for a C project as well, but I have since ported Reverend's code to POASM (basically MASM) so I can include it in my C project. But thank you! _________________ redghost.ca |
|||
|
27 Nov 2006, 11:20 |
|
|
vid 27 Nov 2006, 11:33
Quote: I needed it for a C project as well, but I have since ported Reverend's code to POASM (basically MASM) so I can include it in my C project. why did you rewrite it to MASM to use it with C ??? Reverend: didn't know you are "in the scene"
also note that "htb.team.prv.pl" doesn't seem to be working, you could fix NFO |
|||
|
27 Nov 2006, 11:33 |
|
|
RedGhost 27 Nov 2006, 22:21
vid wrote:
Ah no, not MASM, there is an LCC based C compiler called "Pelles C", Pelle wrote his own assembler called POASM, it has a very similar to MASM syntax (I don't really like the syntax) but you can add ".asm" files to your project and it compiles them as an object and links with the rest of the C objects so only 1 compiler is required. _________________ redghost.ca Last edited by RedGhost on 29 Nov 2006, 10:19; edited 1 time in total |
|||
|
27 Nov 2006, 22:21 |
|
|
vid 27 Nov 2006, 23:28
RedGhost: and why didn't you just add those few line and create "format MS COFF" instead?
|
|||
|
27 Nov 2006, 23:28 |
|
|
RedGhost 29 Nov 2006, 10:21
vid wrote: RedGhost: and why didn't you just add those few line and create "format MS COFF" instead? Then I would have to compile with two compilers, manually edit the linker settings and copy and paste. Too much work, adding a few offset prefixes and modifying how proc is declared was easy enough. _________________ redghost.ca |
|||
|
29 Nov 2006, 10:21 |
|
< Last Thread | Next Thread > |
Forum Rules:
|