NO

Author Topic: Zydis  (Read 373 times)

Offline TimoVJL

  • Global Moderator
  • Member
  • *****
  • Posts: 1642
Zydis
« on: October 03, 2017, 07:14:12 pm »
Another disassembler engine:
Zyan Disassembler Engine (Zydis)

Code size about 300 kb.

EDIT: PEObjDisAsm, an example for an object file asm dump.

EDIT 2017-10-25: PEObjDisAsm_WS_a3.zip with modified line lengths src\Generated\DecoderTables.inc.
                           additional files FormatHelperMasm.c FormatterMasm.c

EDIT 2017-11-22: PEObjDisAsm_WS_a7.zip code bytes and funtion names.
« Last Edit: November 22, 2017, 04:06:31 pm by TimoVJL »
May the source be with you

Online Jokaste

  • Member
  • *
  • Posts: 101
  • Never be pleased, always improve.
    • ImgTools
Re: Zydis
« Reply #1 on: October 04, 2017, 01:50:38 am »
Very interesting. I download it immediatly. :D
Kenavo

Offline TimoVJL

  • Global Moderator
  • Member
  • *****
  • Posts: 1642
Re: Zydis
« Reply #2 on: October 25, 2017, 12:20:37 pm »
A tool to modify line lengths of src\Generated\DecoderTables.inc.
In C source file line length limit is 4096, at least in pocc.
« Last Edit: October 26, 2017, 12:08:26 pm by TimoVJL »
May the source be with you

Online Jokaste

  • Member
  • *
  • Posts: 101
  • Never be pleased, always improve.
    • ImgTools
Re: Zydis
« Reply #3 on: October 25, 2017, 01:57:29 pm »
For me that's good
Having a simple listing is nice for me
I would like to have an other with the addresses for seeing aligment
And an other that indicates if the source/destination operand(s) is/are register or memory operand.
That for later giving a name to the address.
I me problems with 2 files, I join into the zip the obj and the source file.
Good work... continue. :( :( :( :( :( :) :) :) :) :) :)
Kenavo

Offline Vortex

  • Member
  • *
  • Posts: 501
    • http://www.vortex.masmcode.com
Re: Zydis
« Reply #4 on: October 26, 2017, 10:26:39 pm »
Hi Timo,

Once again, impressive work. Let me study your project.
Code it... That's all...

Online Jokaste

  • Member
  • *
  • Posts: 101
  • Never be pleased, always improve.
    • ImgTools
Re: Zydis
« Reply #5 on: November 21, 2017, 08:56:27 pm »
Is this project finished?
Kenavo

Offline TimoVJL

  • Global Moderator
  • Member
  • *****
  • Posts: 1642
Re: Zydis
« Reply #6 on: November 21, 2017, 09:14:50 pm »
Is something missing from that example?
May the source be with you

Online Jokaste

  • Member
  • *
  • Posts: 101
  • Never be pleased, always improve.
    • ImgTools
Re: Zydis
« Reply #7 on: November 21, 2017, 11:05:43 pm »
Data segments and Resources.
Or a dump of the datas.
It there was an option for getting bytes code this would be great.
I made a program to optimize source code from podump, strages addresses computed, no possibility to know datas aligment.
PoDump gives the byes code and the source code the two were precious.
With your program i like taht you give the window's functions.
Knowing it we can built (or suppose) the function arguments.
With that we can identify the datas.
Kenavo

Offline TimoVJL

  • Global Moderator
  • Member
  • *****
  • Posts: 1642
Re: Zydis
« Reply #8 on: November 22, 2017, 09:03:08 am »
Last version prints code bytes.
« Last Edit: November 23, 2017, 10:46:10 am by TimoVJL »
May the source be with you

Online Jokaste

  • Member
  • *
  • Posts: 101
  • Never be pleased, always improve.
    • ImgTools
Re: Zydis
« Reply #9 on: November 23, 2017, 10:57:33 am »
 ;D
Kenavo