| 1 |
On Sat, 05 Dec 2009 18:29:50 -0700 |
| 2 |
Brandon Vargo wrote: |
| 3 |
|
| 4 |
> On Sat, 2009-12-05 at 19:33 -0500, David Relson wrote: |
| 5 |
> > I'm looking for a disassembler so that I can see the underlying |
| 6 |
> > assembly code in a variety of files, for example elf executables, |
| 7 |
> > DOS executables, binary files (such as the master boot record |
| 8 |
> > (MBR)), etc. |
| 9 |
> [snip] |
| 10 |
> > What do you all recommend for disassemblers? Are there any good |
| 11 |
> > ones for Gentoo? |
| 12 |
> |
| 13 |
> I've used objdump (part of binutils) in the past for looking at ELF |
| 14 |
> files; look at the -d option for disassembly. A quick test shows that |
| 15 |
> it seems to work for exe files too, but I've never used it that way |
| 16 |
> as I don't use Windows much, so I don't know for sure. |
| 17 |
> |
| 18 |
> For the MBR, I don't know of any disassemblers per-se, but hex editors |
| 19 |
> work well depending on what you are doing. hexdump (part of |
| 20 |
> sys-apps/util-linux) works well. You might want to make an image of |
| 21 |
> the MBR first with dd, depending on which tool you use, as some do not |
| 22 |
> support reading from the disk directly. |
| 23 |
> |
| 24 |
> Regards, |
| 25 |
> |
| 26 |
> Brandon Vargo |
| 27 |
> |
| 28 |
|
| 29 |
Hi Brandon, |
| 30 |
|
| 31 |
Indeed, hexdump mbr would show me the bytes but I want to see the code |
| 32 |
as instructions. |
| 33 |
|
| 34 |
objdump works fine for ELF. Being greedy, the ideal tool would handle |
| 35 |
all 3 formats. |
| 36 |
|
| 37 |
The immediate need is pure binary (like the MBR). A couple of weeks |
| 38 |
ago I had to resort to an old DOS disassembler for a DOS executable. |
| 39 |
|
| 40 |
I'd be much happier with a straight Linux solution. |
| 41 |
|
| 42 |
Regards, |
| 43 |
|
| 44 |
David |
Archives