Help Index
Contents

General Information About W32Dasm

W32Dasm Information

Commands

File Menu

Search Menu

Function Menu

Data Menu

Help Menu

Toolbar

Toolbar Commands

Procedures

Exiting

Printing

How to Order Full Version of W32Dasm

Order Info


For information on how to use Help, press F1 or select Using Help from the Help menu.


W32Dasm will disassemble 32 Bit Windows programs that are in the Portable Executable (PE) Format.

W32Dasm  does not disassemble Windows 16 Bit programs.

A assembly code listing will be produced that has header information describing all Imported and Exported functions in the file. Processes and Calls to functions are color coded on the screen listing. Text search is available to aide in finding functions, code, etc. Imported and Exported functions are listed alphabetically in special List Boxes with a search feature. A special goto Program Entry Point command is available to quickly find the program starting point. (Starting points for windows programs are not necessarily at the start of the code listing).

The Print and Save to ASCII text file commands are disabled in the Demo Version of W32Dasm. To order the Full version, see How to Order which is available in the contents section of this help file.


To get the full version of W32Dasm, which includes the File Print and File Save Functions,

print this page and fill out information below. Send a $15.00 check or money order payable

to P. J. Urbanik,

          To:

 	      URSoftware

      44 Sachem Dr.

      Glastonbury Conn. 06033.

Software will be provided on a 5.25 floppy disk in ZIP format. Software can also be Emailed directly

if desired. Please provide Email address if you want this option.

 Questions/Inquiries regarding this software can be sent via Email to: urbie@msn.com.

Purchasers Name: _________________________________

                 Address: _________________________________

    _________________________________ Zip: _________________

[ ]  Send Floppy

[ ]  Email Copy  -> Email Address: _______________________________


File Menu

The File menu provides commands for opening 32 Bit Windows programs for disassembly, saving disassembler text to an ASCII file, printing diassembler text, and exiting the application.

Open	Opens an existing file for disassembly. File can be any valid Windows 32 bit program file that has a Portable Executable (PE) format.

Save	Saves the disassembler text to a ASCII file. The default filename is the original filename with an .alf (Assembly List File) extension. This function is disabled in the Demo version of W32Dasm.

Print Preview	View a sample printout of the current disassembler text.

Print	Sends the disassembler text to a printer. User can select specific pages or print the whole listing. This function is disabled in the Demo version of W32Dasm.

Print Setup	Set printer characteristics, ie Landscape, Portrait, etc.

Exit	Exits the W32Dasm application.


Search Menu

The Search menu provides commands to find and mark selected text.

Find	Finds a pattern of text and marks in red on the screen display. This is useful for finding specific functions in the disassembly text. All code location begin with a semicolon (ie :004123CB) to uniquely identify them in searches. Searches can be performed up or down from the current screen location by selecting the appropriate button in the Find Dialog Box. The text Case Match is defaulted OFF but may also be activated in the Find Dialog Box.

Next	Repeats search of last find operation. The F3 key or toolbar button can also be used for Find Next operations.

Goto Program Entry Point	Sets Disassembled text to Program Entry Point Code. The F8 or Toolbar Button can also be used for this function.

Goto PageSets Disassembled text to the Page Selected from the Goto Page Dialog Box. The F9 or Toolbar Button can also be used for this function.


Function Menu

The Function Menu provides access to the Import and Export Function List Boxes.

Imports	Displays the Imported Functions List Box.

Exports Displays the Exported Functions List Box.


Data Menu

The Data menu provides access to the Data List Box.

Data	Displays the Data List Box.


Help Menu

The Help menu provides access to the help system and the about dialog.

Contents	Help topic contents.

Context Help Context sensitive help.

About About W32Dasm.


Exiting

To exit W32Dasm, choose File|Exit from the menu. In the Full Version, you will be prompted to save any unsaved disassembly text before exiting.


Printing

There are three commands on the File menu which support printing of disassembled text from  W32Dasm.  File|Print Setup is used to select and configure a printer device.  File|Print Preview displays a special preview window which shows how the text will appear when printed.  File|Print allows for printing all or selected pages of the current displayed  disassembler text.


File Exit Command

The File|Exit command exits W32Dasm.  If you've modified documents without saving, you'll be prompted to save before exiting.


File Open Command

The File|Open command displays the Open a File dialog box so you can select a file to disassemble.


File Print Command

The File|Print command prints all or selected pages of the disassembler text.  Use File|Print Preview to see how the text will be laid out on printer pages.  Use File|Print Setup to select a printer, and to set printer options. This function is disabled in the Demo version of  W32Dasm.


File Print Preview Command

File|Print Preview opens a special window that shows how the disassembled text will appear when printed.  The preview window shows one or two pages of the active document as they would be laid out on printer pages.  If the Printer is set up for Landscape printing, only one page is available in the print preview window. Controls on the window allow you to page through the pages of the text.


File Print Setup Command

The File|Printer Setup command displays the Printer Setup dialog box which allows you to select and configure the printer to be used to print documents in the application.


File Save Command

The File|Save command saves the disassembler text to an ASCII text file. The default name of the saved file will be the original name/path of the disassembled file with an .alf (Assembler List File) extension. This file can be used in a word processor such as MS Word for further editing, searching and formatting. The default filename/path can be overridden by the user. This function is disabled in the Demo version of  W32Dasm.


Search Find Command

The Search|Find command searches the disassembled text for a  pattern.  The command displays the Find dialog which controls the search process.  Options in the dialog determine whether  the case of characters is significant, and whether the search should be conducted forwards or backwards through the document.  As each match is found, it is highlighted in red in on the screen.


Search Next Command

The Search|Find Next command repeats the last Find  operation.


Search Goto Program Entry Point Command

The Search|Goto Program Entry Point Command sets the disassembled text to the program entry point code (See Figure 1). This is the start point for the execution of the subject program.  When using a debugger program, a breakpoint may be set here to trap beginning of the program execution.

 If the code location (ie. :XXXXXXXX of the program entry point is set to the top line of the display by using the Scroll Bar or pressing the Line Down key, the status bar at the bottom of the screen will give information as to the hex offset in the program file where this code exists(See Figure 2). Patching the code byte of this location with a hex editor to a CC value will place an INT 3 instruction which will cause the program to break automatically when used with a debugger. Of course the original value of the patched byte would then have to be reinstated to continue the debug.

In the example Figure 2, the byte A1h at code location :00410000 would be replaced by byte CCh which is at file W32DASM.EXE file offset 600h. After trapping with a debugger program, the byte CCh would need to be replaced by the original byte A1h.

       Figure 1.

       Figure 2.


Search Goto Page
Search Goto Page Command

The Search|Goto Page Command sets the disassembled text to the page selected from the Goto Page Dialog. The Current Page is displayed when the Dialog is initialized. Page numbers entered that are greater than the total pages available will goto to the last page.


Functions Imports

The Functions|Imports displays a List Box with all the disassembled programs identified Imported Functions listed alphabetically.

Imported Functions are functions that are required to run a program but  reside in files other than the subject program file. Imported Functions in the Disassembled Listing, are references to Calls to the function. There can be more than, and usually is, one reference. Imported Functions are usually the result of calls made to Dynamic Link Library files (DLLs).

If there are no Imported Functions identified, the command is disabled. To search for an Imported Function in the disassembled text, Double Click  the Left Mouse Button on the desired function in the List Box.


Functions Exports

The Functions|Exports displays a List Box with all the disassembled programs identified Exported Functions listed alphabetically.

Exported Functions are functions that are available to other programs. Exported Functions in the Disassembled Code Listing  show the actual function code. There should be only one reference in the Code portion of the Disassembler Listing per Exported Function. DLL files usually have many exported functions. Program {exe} files usually have few if any.

If there are no Exported Functions identified, the Command is disabled. To search for an Exported Function in the disassembled text, Double Click  the Left Mouse Button on the desired function in the List Box.


Data Data

The Data|Data displays a List Box with all the disassembled programs identified data references listed alphabetically by String Data and Integer Data.

If there is no Data identified, the Command is disabled. To search for a data item reference in the disassembled text, Double Click  the Left Mouse Button on the desired data text in the List Box.


Help table of contents

Window Help table of contents

The Help|Contents displays the help contents page.


Window Context Sensitive Help

The Help|Context Help creates a cursor that calls up help when  clicked over any toolbar or menu item. The context help cursor is automatically deleted upon return from help or it can be canceled by using the right mouse button or pressing the keyboard escape key {Esc}.


Window About W32Dasm

Displays dialog box with information about the W32Dasm Application.


Toolbar
The Toolbar

The Toolbar is a row of buttons at the top of the main window which represent application commands. Clicking one of the buttons is a quick alternative to choosing a command from the menu.  Buttons on the toolbar activate and deactivate according to the state of the application.

Button	Action	Menu Equivalent

Locate and open a file.	File|Open

Save disassembled text to a file.	File|Save

Search for text.	Search|Find

Repeat last Find  operation.	Search|Next

Goto Program Entry Point.	Search|Goto Program Entry Point

Goto Page.	Search|Goto Page

Imports.	Function|Imports

Exports.	Function|Exports

Data.	Data|Data

Print the disassembler text.	File|Print

Print Preview the disassembler text.	File|Print Preview

Context Sensitive Help	Help|Context Help