perdr

Langue: en

Version: 112760 (mandriva - 01/05/08)

Section: 1 (Commandes utilisateur)

Sommaire

NAME

perdr - Portable Executable ReaDeR

SYNOPSIS

perdr [-b|--bytes] [--help] [--version] [--show-priority] [--raw-dump] [--extract-icon-resource] [--disable-3dnow] [--disable-enh3dnow] [--disable-pentium3] [--disable-athlon] [--show-headers] [--show-imports] [--show-relocations] [--show-exports] [--show-resources] [--show-code] file

DESCRIPTION

Perdr analize the executable file, disassemble it and print disassembled code.
-b, --bytes
Print bytes in disassembly listing.
--help
Print usage screen and exit.
--version
Print version number and exit.
--show-priority
Show disassembly priority.
--raw-dump
Instead of disassembly program print a dump with program addresses.
--extract-icon-resource
Extract icon into separate files (resicoX.ico).
--disable-3dnow
Don't handle 3D Now! instructions.
--disable-enh3dnow
Don't handle Enhanched 3D Now! instructions.
--disable-pentium3
Don't handle Pentium III instructions.
--disable-athlon
Don't handle Athlon instructions.
--show-headers
Show headers in output.
--show-imports
Show imports in output.
--show-relocations
Show relocations in output.
--show-exports
Show exports in output.
--show-resources
Show resources in output.
--show-code
Show code or dump in output.

PRIORITIES

The program start scanning code in many manners. The manners are called prioritys because it scan first the most probable alternative.

secure code - most probably code

entry point
code executed by entry point
safe export
code executed by known export (not yet implemented)
safe heuristics
code executed by heuristics (very sure code)

not secure - not very sure

export code
executed by export (mmm.. not all export are code)
heuristics code
executed by heuristics (not very sure, like a single call found)
constant
only a constant in code
filler
only printed for completion
none
this is not code
check only
wow! If you find there is a bug

BUGS

This is my first man page and is incomplete, so this section is not compiled :-)

AUTHOR

Frediano Ziglio <freddy77@angelfire.com>