PE Decoder: executable files analyse framework

Authors of components supporting their products

PE Decoder: executable files analyse framework

Postby X512 » Sun Feb 14, 2021 3:56 am

I published my executable analyze and disassemble framework internally called "PE Decoder" (because Windows PE executables was implemented first). It supports following executable formats:
  • NE (executable format of 16 bit Windows)
  • PE (executable format in modern Windows and UEFI)
  • ELF (UNIX-like systems)
Disassembler supports following CPUs:
  • X86 (16, 32 and 64 bit, SSE instructions, based on DevDec486 from DevDecoder distribution)
  • ARM (ported from DevDecoder distribution, support only 32 bit ARM without Thumb instructions)
  • RISC-V (written by myself)
Executable decoder support listing imported/exported modules and symbols, exception tables for PE (x86_64 only) and ELF, symbol versions for ELF. Disassembler supports symbol name resolving and PIC (position-independent code) stubs name detection. PIC data symbol names detection is not work well for 32 bit x86 and ARM.

Source code: https://github.com/X547/OberonUtils/tre ... %20Decoder.
X512
 
Posts: 72
Joined: Sat Feb 07, 2015 2:51 pm

Re: PE Decoder: executable files analyse framework

Postby adimetrius » Mon Feb 15, 2021 9:09 am

Where's the LIKE button here? :D
User avatar
adimetrius
 
Posts: 64
Joined: Sun Aug 04, 2019 1:02 pm

Re: PE Decoder: executable files analyse framework

Postby X512 » Mon Feb 15, 2021 7:48 pm

Star button at GitHub.
X512
 
Posts: 72
Joined: Sat Feb 07, 2015 2:51 pm


Return to Components Support

Who is online

Users browsing this forum: No registered users and 1 guest

cron