|
HT Editor is a file editor/analyzer/viewer for executables. The goal is to combine the low-level functionality of a debugger and the usability of IDEs. We aim towards a perfect hex-editing ability and support of the most important file formats. PE, LE, NE, MZ, COFF, LZ and ELF executables are supported. Here are some key features of "HT Editor": Supported file formats · common object file format (COFF/XCOFF32) (header, image with code/data analyser) · executable and linkable format (ELF) (header, section headers, program headers, symbol tables, image with code/data analyser (x86, IA-64, Alpha, PowerPC) and relocations) · linear executables (LE) (header, VxD descriptor, object table, page table, image with code/data analyser (x86), auto-relocation layer) · standard dos executables (MZ) (header, relocations, image (disassembly only) ) · new executables (NE) (header, segments, names, entrypoints, image with code/data analyser (x86), auto-relocation layer (pretty complete) ) · portable executables (PE32, PE64) (header, import section, delay-import section, export section, resources, image with code/data analyser (x86, IA-64, Alpha), preliminary support for .net executables) · java class files (CLASS) (header, image with code/data analyser (java bytecode disassembler)) · Mach exe/link format (MachO) (header, image with code/data analyser (x86, PowerPC) ) · X-Box executable (XBE) (header, imports, image with code/data analyser (x86) ) · Flat (FLT) (header, image with data analyser (no disassembler yet)) · PowerPC executable format (PEF) Code & Data Analyser · finds branch sources and destinations recursively · finds procedure entries · creates labels based on this information · creates xref information · allows to interactively analyse unexplored code (press 'c') · allows to create/rename/delete labels (press 'n') · allows to create/edit comments (press '#')
|
