好友
阅读权限35
听众
最后登录1970-1-1
|
风吹屁屁凉
发表于 2013-9-17 19:58
本帖最后由 风吹屁屁凉 于 2013-9-17 19:59 编辑
General features
Supported file formats
common object file format (COFF/XCOFF32)
- header
- image with code/data analyser (x86)
executable and linkable format (ELF)
- header
- section headers
- program headers
- symbol tables
- image with code/data analyser (x86, AMD64, IA-64, Alpha, PowerPC, ARM) and relocations
linear executables (LE)
- header
- VxD descriptor
- object table
- page table
- image with code/data analyser (x86)
- auto-relocation layer (only internal refs for now)
standard dos executables (MZ)
- header
- relocations
- image (disassembly only)
new executables (NE)
- header
- segments
- names
- entrypoints
- image with code/data analyser (x86)
- auto-relocation layer (pretty complete)
portable executables (PE32, PE64)
- header
- import section
- delay-import section
- export section
- resources
- image with code/data analyser (x86, AMD64, PowerPC, IA-64, Alpha, ARM)
- preliminary support for .net executables
java class files (CLASS)
- header
- image with code/data analyser (java bytecode disassembler)
Mach exe/link format (MachO)
- header
- image with code/data analyser (x86, AMD64, PowerPC, ARM)
X-Box executable (XBE)
- header
- imports
- image with code/data analyser (x86)
Flat (FLT)
- header
- image with data analyser (no disassembler yet)
PowerPC executable format (PEF)
- header
- imports - image with code/data analyser (PowerPC)
Still some to be implemented (M$-OBJ, ARCH, LX)
Code & Data Analyser
- finds branch sources and destinations recursively
- finds procedure entries
- creates labels based on this information
- creates xref information
- allows to interactively analyse unexplored code (press ’c’)
- allows to create/rename/delete labels (press ’n’)
- allows to create/edit comments (press ’#’)
Target systems
- DJGPP
- GNU/Linux
- FreeBSD
- Win32
非常好用的Hex Editor,还是开源的啊.
唯一缺点是不支持鼠标和不能UNDO.
官方网页:
http://hte.sourceforge.net/downloads.html |
|
发帖前要善用【论坛搜索】功能,那里可能会有你要找的答案或者已经有人发布过相同内容了,请勿重复发帖。 |
|
|
|
|