What is the best disassembler in your opinion? I wanna get some links...
the best disassembly is source code.
apart from that I think ida pro is most recommended
skating on thin ice...
apart from that I think ida pro is most recommended
skating on thin ice...
I use Hiew.
IDA is good but also very slow.
IDA is good but also very slow.
What is the best disassembler in your opinion? I wanna get some links...
Here is my recommendation:
1) A good text editor
2) A good hex editor
3) Intel's OP code listing
4) Spare Time
:grin:
or on the other hand you could use IDA Pro or W32Dasm.
W??Dasm is best choice for taking a quick look into things ... it also
displays the opcode bytes, whilst IDA does not do that.
aweX <-
displays the opcode bytes, whilst IDA does not do that.
aweX <-
W??Dasm is best choice for taking a quick look into things ... it also
displays the opcode bytes, whilst IDA does not do that.
There is also Clive Turvey's dumppe utility from the Masm32 package.
Adjust the options if you want to see opcode bytes in IDA. :)
Where?
I can not see it in options (IDA 4.15)
and I haven't found in IDA help anything about it.
Where?
I can not see it in options (IDA 4.15)
and I haven't found in IDA help anything about it.
General... (Item)
Dissasembly (Tab)
Display disassebly line parts: (Frame)
Number of opcode bytes (Right side in the middle)
{Enter a reasonable number}
Thank you, fixed :)
Just also OllyDbg's analysis is very good, in some features imo even better as IDA.
Win32 executables only however.
Win32 executables only however.
thx Vortex for borg been looking for a disassembler for a while but the ones I found never had help to show U how to use it.
10X:alright:
10X:alright:
W32Dasm is quite slow, but is good for taking a good look on executables. IDA is slower, but offers most complete analysis and is best for most complex executables, allowing you to rename variables and other very comfortable features. Its FLIRT library detection system is unmatched in any disassembler. For most quick look at executables (just to check some assembled code, or opcodes) I use dumppe.exe which comes with hutch's masm32 package.