| Related sites for http://www.tbcnet.com/~clive/vcomwinp.html |
| will_turnage_com Specializing in web applications, web site planning, custom programming and CD-ROM development. | | Hand_Multimedia Developers of self-maintained multimedia software, interactive websites, screen savers and promotional games. | | Free_Fortran_Library_to_Read_and_Write_gzipped_Files By John Donners. | | XS_Consulting_Group Minnesota firm that provides information technology consulting services to the Minnesota business community and remote clients needing off site application software development and system integration | | MySQL_2_Excel_KonvertR A Windows tool that exports the contents of a MySQL database to an Excel workbook. | | USB-Audio_com USB Audio software for Macintosh. | | RFC_2834 ARP and IP Broadcast over HIPPI-800. J.-M. Pittet. May 2000. | | Digital_Tech_Frontier Virtual Reality and Multi Sensory Experience Systems rental company. | | HTML_Reference_-_U_of_South_Wales A list of 2.0 and 3.2 HTML tags, including Netscape extensions, image map codes, and special characters. | | Oracle_Fan_Club Exchange ideas with other oracle users in the world | | Xerox_PARC__Gyricon Electronic reusable paper using bichromal beads to display information. Low cost and power, non-volatile. | | RFC_2643 Cabletron's SecureFast VLAN Operational Model. D. Ruffen, T. Len, J. Yanacek. August 1999. | | RFC_2211 Specification of the Controlled-Load Network Element Service. J. Wroclawski. September 1997. | | Argentum_MyFiles Keep files organized with this disk cataloging software. It can be used as a file cataloger, a music organizer, a photo album, and software catalog. | | Robertson,_Neil Oxford University. Computer vision, visual surveillance, video annotation. | | W3C_RDF_Validation_Service A full RDF Validation Service - for use with any RDF, not just RSS 1.0 | | SmartMenus_DHTML_Menu An advanced and accessible list-based/CSS driven website menu. Simple-to-use and highly cross-browser. Free for personal and non-commercial web sites. Fee applied for commercial use. [Windows/Mac/Linu | | Brock_Interactive,_Inc_ Provides web design, graphics, and Flash. Based in North Kingstown, Rhode Island. | | NZ_Web_IT Offers design, hosting, domain registration and site submission service. Located in new Zealand. | | ktauber_com Includes downloads and support for style changing modifications and subRed, subGreen, and subRebel styles. |
|
Windows Source Home Page
Windows Source 8 Home Page
What do you want to disassemble today?
This page last updated April 16,2005
Windows Source 8
Windows Source version 8 works with V Communications' Sourcer, version 8.00 and
later, to produce commented disassemblies of Windows 16 & 32 bit executables,
dynamic link libraries (DLLs), device drivers, and 32-bit virtual device drivers
(VxDs). The generated assembly listings are primarily used to improve your
understanding of Windows programs, the internals of Windows itself, and help
identify and clarify important undocumented services and functions. It should
be noted that it will not be immediately practical to re-assemble the outputs.
When used with Windows Source, Sourcer:
Labels exports from an executable, DLL or device driver
Identifies, by name, imported function calls, including Windows API calls.
Includes CodeView symbols where possible, such as those found in the debugging
version of Microsoft Windows.
Labels the program's or DLL's main entry point and automatically identifies WinMain
In a VxD, identifies, by name, the VxD's API entry points and Control procedure,
plus any services the virtual device provides.
In a VxD, identifies, by name, all virtual-device services that the VxD calls.
Automatically identifies information such as variables in the NULL segment,
general protection fault handlers in a __GP block, and APPLOADER functions in a self-loading
Windows application.
Provides comments for all DOS and DOS Protected-Mode Interface (DPMI) calls
made in a Windows program.
Makes available for disassembly the many VxDs embedded with the Enhanced
mode WIN386.EXE or VMM32.VXD files.
Includes symbolic debugging information found in an associated .SYM, .DBG or
.PDB files.
Provides a readable display of resources, such as menus, dialog boxes, etc.,
in a Windows executable DLL.
Provides the ability to decompress and disassemble self-loading Windows 16 bit executables
compressed with PKLite v 2.00 and SLR Optloader.
Pricing of Windows Source
Sourcer, Windows Source and BIOS Pre-Processor - $299.95
Ordering Windows Source
V Communications Inc., 2290 North First Street,
Suite 101, San Jose, CA 95131-2017
Orders : 800-648-8266 (USA & Canada)
Phone : 408-965-4000
Fax : 408-965-4014
Tech: 408-965-4018
Email : sales@v-com.com
About Windows Source
Versions one & two of Windows Source were written by Andrew Schulman, version three
was taken over, and significantly upgraded and re-written by Clive Turvey. The new
version provides support for Windows '95 & NT Portable Executable (PE) files, OS/2 32
bit Linear eXecutables (LX), enhanced support of Windows & OS/2 16 bit New Executables
(NE) and Windows VxDs - 32 bit Linear Executables (LE).
The text processing portions of Windows Source are written in AWK (a pattern-matching language
developed by Alfred Aho, Brian Kernighan & Peter Weinberger at AT&T Bell Labs), using the TAWK Compiler
from Thompson Automation Software.
Contacting Clive Turvey, the author of Windows Source8
Please direct sales questions to V Communications. Click
the address below and remember that I don't provide free consulting, reverse engineering services or technical support.
If you wish to file a bug report please provide everything needed to duplicate the problem.
Check that the subject area isn't covered in the links section below.
Email : clive@tbcnet.com
FREEWARE Tools
FREEWARE from the author, these programs lack the ability to create Sourcer definition
files. To do that you'll need to buy Windows Source version 3.x
VXDLIB.ZIP -- VxDLib is a utility that
I have written that works with the new compressed W4 file format used by VMM32.VXD to archive
multiple VxDs for Windows '95: you can dump out the contents of VMM32.VXD, decompress it, recompress it (more
tightly than Microsoft), and extract individual VxD's from it. Multiple VxD's can be extracted
using wildcards. VXDLIB.ZIP includes VXDLIB.EXE and VXDLIB.DOC.
DUMPPE.ZIP -- DumpPE is a
utility that dumps the internal structures of Windows '95 & NT Portable
Executable files (.EXE, .DLL & .DBG). Includes a rough disassembler that
can import symbols in COFF, Codeview, .SYM & .PDB format.
* New version, rough disassembler now supports KNI (SSE), 3DNow! & Willamette (SSE2)
DUMPLX.ZIP -- DumpLX is a
utility that dumps the internal structures of OS/2 and Windows Linear
Executables, both the LE form used by Windows 3.x & '95 VxDs and DOS
Extender applications, and the LX form used by OS/2 2.x and Warp.
Includes Windows '98 (aka Memphis) VxD export names and a rough disassembler
that can import symbols in COFF, Codeview, .SYM & .PDB format.
* New version, rough disassembler now supports KNI (SSE), 3DNow! & Willamette (SSE2)
These FREEWARE tools are free for non-commercial use, however donations are always welcomed.
More FREEWARE tools
TOYS.ZIP -- DumpCV is a
utility that dumps Codeview (NB00,01,02,04,05,06,07,08,09 & 11) debug data that
is attached to an executable file or within a .DBG file. DumpPDB dumps debug data
that is contained in .PDB files (Program Database v2.0 format) created by MSVC 2.xx, 4.xx & 5.00
(all of which are different!). DumpW4 is the precursor to VxDLIB and allows internal
inspection of W4 files. * New version, now includes source code for DumpW4 and updated DumpPDB.
DUMPCAB.ZIP -- DumpCAB is a
utility to examine the internal structure of Microsoft Cabinet Files (MSCF)
used in the distribution of Win 95 & NT. This is a new posting, runs under DOS and includes
'C' source code. Standard .CAB files use a compression format called MSZIP,
this is the same as PKWare's Deflate encoding, Microsoft, in my opinion, used
the public domain INFLATE.C by Mark Alder (1992) as the basis for their decompression
engine supplied in EXTRACT.EXE and FDI.LIB. Mark's code is also used with KWAJ
Mode 4 compressed archives (DECOMP.EXE) and Microsoft's Plus! DriveSpace 3 "UltraPack" (DRVSPACE.BIN), both of which
use the PKWare encoding. Cabinets can also be compressed in a new QUANTUM encoding
which can have a sliding window of up to 2MB (Yes, two megabytes!) instead of the 32KB
provided by MSZIP. This encoding is likely to become more prevalent as we migrate
away from DOS. Check out Microsoft's Cabinet (CAB) Home Page to get
a copy of the cabinet resource kits and check out Sven Schreiber's article in May's edition of Dr. Dobb's on how to use
them.
More FREEWARE tools to allow Sourcer to disassemble compressed executables & BIOS
UNLZEXE.ZIP -- UnLZEXE is
designed to decompress all .EXE files created by LZEXE v0.90 & v0.91.
UNPKLITE.ZIP -- UnPKLite is
designed to decompress most .EXE files created by PKLite v1.00-2.01 including those
made with PKLite Professional using the -e (extra) option and which cannot be expanded
using the -x (expand) option of PKLite. * New version, supports 2.00 & 2.01.
UNPACK.ZIP -- UnPack is
designed to decompress most .EXE files created by Microsoft's EXEPACK/LINK utilities,
unfortunately there are so many different versions/mutations that this product could
fail occasionally.
UNAWARD.ZIP -- UnAward
is designed to allow 128k Award Flash ROM images using the Award Decompression BIOS
to be decompressed and examined without access to the host motherboard. This might be
particularly useful to peripheral vendors who need to know how the chipset on a given
motherboard is being programmed and allow them to remedy flaws in the chipset implementation
or programming that prevent their product(s) from functioning optimally.
Links to interesting 80x86, Windows '95 & NT related sites
Clive's Old Deschutes Page
The Deschutes FXSAVE/FXRSTOR information page.
Clive's Old Katmai Page
The Katmai (KNI/SSE) information page.
Unauthorized Windows 95 Update
Andrew Schulman's collection of Windows '95 & NT utilities and information.
Windows Undocumented File Formats Update
Pete Davis & Mike Wallace have just published their new book
Windows Undocumented File Formats (R&D Books,
ISBN 0-87930-437-5),
including a chapter with some of my work on LE, W3 & W4 files. Not much at this
site yet, so best check your local bookstore for a copy of the book.
Wotsit's File Format Collection
This site is a goldmine, it contains a vast array of file formats.
I had to dig around on shareware and Microsoft CD's to get my info, but now
its pretty much all here, so you don't need to email me to get them.
Systems Internals
Mark Russinovich's & Bryce Cogswell's exploration of Windows NT Internals.
Dan Norton's DDK Site
Dan Norton's site dedicated to information and links related to device driver development for Windows '95 & NT.
Resources For Windows Developers
Robert Mashlan's sprawling site of developer-related links.
Christian Ludloff's Sandpile
Christian Ludloff's Sandpile site examines the inner workings of x86 processors.
Intel Secrets : What Intel Doesn't Want you to know!
Robert Collins' Intel Secrets site probes the aspects of Intel products that make Andy paranoid.
JC's PC News'n'Links - Fast Updates on the Microprocessor Industry
John Cholewa's News and Speculation on what Intel, AMD, VIA, et al. are up to.
Kenneth's Tech Page : The Intel Road Map
Kenneth Ekman's page provides the most complete compilation of Intel's future plans.
HardOCP
Kyle Bennett's Hard Core Opinion, Review and News site.
Anand Lal Shimpi's Tech Page
Anand's Tech site is one of the most frequently updated sources of PC related news,
trends and technical reviews.
Thomas Pabst's Hardware Guide
Thomas Pabst's site examines CPUs, chipsets, memory, caches and overclocking.
Fravia's Page of Reverse Engineering
Fravia's site covers the techniques and tools used to disassemble, decompile and
generally reverse engineer software. It might also convince you that there are
plenty of people who can quickly break any protection scheme you can contrive
and that you would be better served writing cheaper, bug free software.
Dr. Dobb's Journal
You can find plenty of source code at this site.
Windows NT Magazine
An excellent resource of information for implementing and supporting Windows NT installations.
Windows Developer's Journal
Windows 95 and Windows NT programming with an emphasis on pragmatics.
Microsoft System Journal - MSJ
Get info straight from the horses mouth, learn the latest vapor on Windows XP. Where are we going with product development today? Microsoft also offers MSDN Online,
Free! You have to sign up to get it, but it's not too onerous or much of an inquisition.
|
|