Hello everyone,

in this post I'm going to release a my Disassembler wrote in C++/CLR (Visual C++) started some weeks ago... It use capstone library for the disassembler, and it has also a new PE Reader with some addresses already converted.
When I started this project I didn't thought that to release this, since there are more better and advanced debuggers/Disassembers online.
But mine disassembler could be useful for example it is portable and its size is very small. So it could be into an USB drive and something like that. I mean that is not an advanced disassembler, it has just the basics things that has a normal/advanced one.

After said that I start to make a little description.


Description:

a simple x86 disassembler (with capstone help), and can Read PE Infos.

In the right on it there are some functions, you can open a file etc..
After that there is the section "View" and into it you have Hex dump(not all code, but almost all the code ), There is the memory map + PE informations, which contains some addresses converted already. After that there is the "Protection Analyzer", yes as says the title it has a little database of some protections that currently exist. And the last function is of Address converter + value converter
example (ascii to hex and vice versa), and the address converter which convert an address in VA from RVA and vice versa. The offset is still not ready but probably I'll update with it soon.


Supports:

it should decompile all x86 exe's, I suggest files that are not bigger.



Mirrors download links:

1) http://www51.zippyshare.com/v/7Yeg04U5/file.html

2) https://mega.nz/#!MZZlSSDD!R3TvUK2Y8d_d2mGeFCwkHovWCQlrQipBWbs0Vn-5uM0


GitHub project: https://github.com/Kirbiflint50/KirbiDSM




Istructions:

Unrar the archive with the 2 files and run from KirbiDSM.exe


Demo video: https://www.youtube.com/watch?v=O76SKu75kQo

That's all, if you find issues feel free to contact me.

| Сообщение посчитали полезным:

just one more bullshit...

-----
От многой мудрости много скорби, и умножающий знание умножает печаль

| Сообщение посчитали полезным: TryAga1n, HandMill, ARCHANGEL

ajax writes:
just one more bullshit...

Well, I'm sorry if you don't like it, if you don't just don't download it.. like i said is a simple.

| Сообщение посчитали полезным:

capstone - disassembler
whats you work ?

| Сообщение посчитали полезным: sefkrd

reversecode writes:
capstone - disassembler
whats you work ?

Only capstone i used for disassebly the other stuff is mine

| Сообщение посчитали полезным:

Kirbiflint writes:
When I started this project I didn't thought that to release this
And it was not necessary to release it.

-----
ds

| Сообщение посчитали полезным:

Kirbiflint
Nice progress since calculators, Kirbi!
But I'm afraid your work doesn't bring anything new to us.

It's nice you're sharing your work with us, still, it's something more important for you rather than others since it's nothing interesting or new to see there, sorry.

-----
Флэш, ява, дотнет - на завтрак, обед и ужин. Unity3D на закуску.

| Сообщение посчитали полезным:

4kusNick writes:

It's nice you're sharing your work with us, still, it's something more important for you rather than others since it's nothing interesting or new to see there, sorry.

Yes I know this, thanks for your positive feedback by the way

| Сообщение посчитали полезным:

Hi Kirbiflint,

in the Western world there is a tradition and respect for the desire to learn, when anyone can publish personal progress in self-learning, it improves the culture of learning, there is no such culture of education here, also too much selfishness . Therefore, you could choose another specialized forum to discuss simple ideas for beginners.

Best regards

-----
RE In Progress [!] Coding Hazard [!] Stay Clear of this Cube

| Сообщение посчитали полезным: SReg

mak writes:
Hi Kirbiflint,

in the Western world there is a tradition and respect for the desire to learn, when anyone can publish personal progress in self-learning, it improves the culture of learning, there is no such culture of education here and too much selfishness . Therefore, you could choose another specialized forum to discuss simple ideas for beginners.

Best regards

Thanks for your opinion.

| Сообщение посчитали полезным:

lol, 1,5 sloc
https://github.com/lief-project/LIEF
https://github.com/aquynh/capstone

| Сообщение посчитали полезным:

shellstorm writes:
https://github.com/lief-project/LIEF

This project has nothing to do with mine because the exe dumper I made it.

| Сообщение посчитали полезным:

KirbiDSM V2.0



Changelog:

Added functions to add(sections, imports, relocations).
Added function to save (Disassembly, hexdump, imports, exports, relocations, memorymap).
Added save settings option.
Added new colors.
Added supports for all x86 PE files.
Added 2 hexdump modes(not all the code).
Added log operations.
Added imports show.
Added exports show.
Added relocations show.
Added x86 registers(not values).
Fixed some issues to the source code.
Fixed disassebly mode.



Download links:

http://www53.zippyshare.com/v/S5ZrXGyD/file.html

https://mega.nz/#!VYBESRRC!TzIdZsv5HD4swbbqk2bsK3UYFduTEJ1yUvLEnl2Xgeg



GitHub link: https://github.com/Kirbiflint50/KirbiDSM

| Сообщение посчитали полезным:

KirbiDSM.V2.1+dlls

In this new version I fixed the icon of the exe and added required DLL'S for run it. Now the application should works also for people that have the error 0xc00007b (I've tested it on a my other PC it works).

Download links:

http://www3.zippyshare.com/v/o6Vjuegh/file.html

https://mega.nz/#!EJpznbYD!4mrfSKtj8bNatnZmywJBuU4JDn6_2qzsL_oq8eyMZg8

| Сообщение посчитали полезным:

KirbiDSM V3.0

Changelog:

-Added a new Hex Dump (Which is complete all the file).

-Added Strings searcher.

-Added jump and calls apparance mode.

-Added analyzer of module.

-Fixed some issues to the source code.

-Fixed disassembly slow speed.

-Fixed log issues.

-Changed UI back color to grey. 



Download links:

https://www105.zippyshare.com/v/e9X46OEV/file.html

https://mega.nz/#!Rdp0VRyK!1tY213ki17VTu9wBPvHdCc-nmZkBWLt846hZDbqeOck

| Сообщение посчитали полезным: