Topology in the Parameters Pane
The ASM library simply adds decoded objects under the root of the disassembler entry in the parameters pane window of HWAccess.. There is no special topology.
Description
The ASM library is an x86 disassembler that decodes physical memory, files and resources of windows processes. The process decoding part of the disassembler is in alpha stage. The decoded information can be shown in the main view of HWAccess.
When this library starts, it enumerates the windows processes and creates a process list. Physical memory decoding is supported within the 0-4G range. Processor types currently supported are x86 based in 16/32 bit modes. The current debugging engine includes limited SSEx support. File decoding is supported for any file type and the library was designed to handle large files (30MB files were decoded successfully during our tests). If you want to see more processors/modes for this disassembler please contact
Functionality of the Active Controls
The ASM library has controls to decode a file, a physical memory range, or a process. It can also enumerate processes, abort the current decoding operation and delete decoded objects.. The following table describes the functionality of each button control.
| Active Control | Usage |
| File Decoding | Opens a file for decoding. Depending on the size and complexity of the binary this process may take long time. Decodes using the selected processor/mode. Once complete the entry appears in the parameters pane of HWAccess. You can then click the tree entry to display decoded contents. |
| Physical Memory Decoding | Starts decoding of physical memory as specified by the Range and Size controls. Supports 0-4GB. Decodes using the selected processor/mode. |
| Process Decoding | Decodes active processes. This function currently requests the information from the O/S. Will be changed in future releases. The list shown for each process refers to heap information. Addresses shown are relative to the process and are not physical addresses. |
| Create Process List | Re-enumerates the active processes and rebuilds the process list. |
| Abort Decoding | Aborts the current decoding operation. |
| Delete decoded objects | Removes all decoded objects. |
Data View
Once the library completes decoding it updates its entries under the parameters pane. Clicking the root entry will force HWAccess to display all decoded objects in its main view. Double clicking a single object will only display the disassembly for the selected one. Depending on the configuration the library may include hex bytes next to the disassembly for each line. Please note decoded object may be huge in size and transfer time between the DLL and HWAccess could be significant. Limits set in the library structure for data transfers and decoding are in the 64bit range.
Static Configuration
Most of the disassembler configuration is integrated with its active controls. The single static option controls whether or not the library will include hex bytes with the decoded instruction lines in the main view of HWAccess.
Back to the External Libraries.