Page 1 of 1
Module decoder and disassembler
Posted: Sun Nov 20, 2016 5:17 am
by X512
Some time ago I found module decoder and disassembler in "linref" distribution. It allows decoding BlackBox ocf and Windows PE EXE files and can disassemble 68k, i486, ARM, PPC and SH3 CPU machine code.
Re: Module decoder and disassembler
Posted: Sun Nov 20, 2016 5:39 am
by X512
This decoder can be used instead of default ocf decoder. It handles fixups, type information and trap opcodes. Current disassembler don't handle fixups, so most addresses in code are wrong. Fixups are information that defines how to correct addresses in code, descriptors etc. that depends on actual section load base or import object address. Details are in "Dev\Spec\ObjFile.odc".
Re: Module decoder and disassembler
Posted: Sun Nov 20, 2016 7:53 pm
by Ivan Denisov
There is also some version from Trurl
http://oberoncore.ru/bbcc/subs/dev/decoder
I did not compare with your version yet.
Re: Module decoder and disassembler
Posted: Mon Nov 21, 2016 5:05 am
by X512
It seems to be based on version in this topic. It is adapted for BlackBox 1.6. Output format differs a bit.
Topic version crash sometimes in meta or desc decoding, probably due format changes. I disabled desc decoding to prevent crash.