PDA

View Full Version : PE Explorer


Koroshiya
10-15-2008, 03:26 AM
Ok, I've been dicking around with PE Explorer and was curious about something... What exactly does the Disassembler accomplish? I can't actually edit anything in it, just view it. Or is that intent?

Dangerless
10-15-2008, 05:57 AM
See what's inside an executable. Tracks down what the program probably accesses and I think which DLLS are called. See how it works and interacts, vildate and verify signed PE files. Unsure if it has support for delphi programs though. I know it can also open UPX-, Upack compressed files seamlessly.

I'm pretty sure you can't edit it or at least straight out of the box. I know most of them ONLY because I'm been fucking around with it in 'old' graal. (well, that or ollydbg)

PS: I thought you were asking about PE itself! I feel like a dumbass now.

HandupOnYoHip
10-15-2008, 05:59 AM
Like a hacked up way of decompiling a program into source code. Except the language is assembler, so unless you understand much about jump calls or anything. It won't tell you much.

[edit] The only languages that have perfect decompilers and ease of use. Are Java and Flash. Use a decompiler on one of those and you'll get straight source code, and resource images.

Koroshiya
10-15-2008, 01:08 PM
So, if I wanted to change that information, how would I do it? Save the ASM file and then recompile it?

Agret
10-21-2008, 07:33 AM
The ASM won't directly recompile, you will need to do much hackery if you wanted to recompile it. You'd be better off doing byte patches.