objdump is a program for displaying various information about object files. For instance, it can be used as a disassembler to view executable in assembly form. It is part of the GNU Binutils for fine-grained control over executable and other binary data.
Questions tagged [objdump]
477 questions
2
votes
1 answer
Why same lgdt opCode display difference on objdump and bochs
I write boot.asm kernel.asm main.c three file.
kernel.asm and main.c compile into kernel file.
boot.asm loader kernel into 0x10000.
the question is kernel file, the code 0f 01 15 22 00 00 00, on objdump display lgdtl 0x22, but when i run it on…
Tianwen Sun
- 43
- 4
2
votes
1 answer
how can I get the value of static initialised global variables from ELF file?
For example I have following c++ source file
// define global variables here
int Label = 1234;
char Hash[] = "0x11231abc";
compile this to *.o file, and may be later linked to an executable binary. Is it possible to get the value from ELF file by…
Xiaoyong Guo
- 361
- 1
- 7
2
votes
1 answer
Use different objdump in kcachegrind
Kcachegrind will use the default one objdump by default (to get asm code from ELF).
Is it possible to force Kcachegrind to use different objdump, e.g. /home/os_gx/local/bin/arm-linux/objdump?
osgx
- 90,338
- 53
- 357
- 513
2
votes
0 answers
What register is riz?
I was disassembling a program and I don't understand what "riz" means here.
I don't know of a register with this name.
or cl,BYTE PTR [rcx+riz*2+0x65]
Can someone explain it to me?
Thanks
EW0o
- 21
- 1
2
votes
2 answers
How to analyze the size of compiled functions (and their dependencies) in a binary executable?
Is there a tool that analyzes the size of compiled functions and their dependencies in a binary executable?
In my case, the program is written in C++, but most of the dependencies I am interested in analyzing come from C libraries. The platform is…
mpb
- 1,277
- 15
- 18
2
votes
1 answer
what's the meaning of %? of objdump output
what's meaning of %? at 402cce? Is this a invalid instruction?
402cca: 80 c6 28 add $0x28,%dh
402ccd: 9d popf
402cce: 8e 3e mov (%esi),%?
402cd0: 23 7b 05 and …
mxw
- 23
- 3
2
votes
1 answer
Make objdump use an operand-size suffix like l on every mnemonic, even when it's not ambiguous?
Today, I found out about using objdump in Linux to find the disassembled code of programs in At&t syntax. While using objdump, the disassembled code looked fine but lacked the 'l' ending after the mnemonic (It should be "movl" not "mov"). Is there…
moonasteroid
- 65
- 1
- 5
2
votes
1 answer
How to find the function symbol in nm or objdump when using shared_ptr for abstract class?
I use shared_ptr for an abstract class ABC. ABCImpl class is the implementation of ABC. abc_ptr is a shared_ptr< ABC> points to an ABCImpl objects. In caller function, abc_ptr will call one of the member function (func_in_ABC) in ABC class. The…
Jimmy
- 23
- 1
- 3
2
votes
2 answers
Beginner Assembly Language C - Subtracting to find what CPU added
000000000040050f :
...
40053f: 89 cf mov %eax,%edi
400541: e8 a7 ff ff ff callq 4004ed
400546: 0f af c3 imul %ebx, %eax
...
Oranges calls apples twice. Apples starts at 0x00000000004004ed. However, in the…
user14607677
2
votes
0 answers
How to get function/symbol information from within a binary file in IOS
We have developed a IOS application and found that application binary file is using _malloc() function somewhere inside.
$otool -IV Reminders | grep _malloc
0x0000000100415b3a 1436 _malloc
0x0000000100415b40 1437 _malloc_size
$
We have not used…
user2679476
- 365
- 3
- 12
2
votes
1 answer
map exe decompilation back to C language
Im pretty new to assembly, and am trying my best to learn it. Im taking a course to learn it and they mentioned a very remedial Hello World example, that I decomplied.
original c file:
#include
int main()
{
printf("Hello…
Jshee
- 2,620
- 6
- 44
- 60
2
votes
1 answer
Why is a defined function put in the relocation table
I'm learning how a linker works in Linux. Here is my code as an example:
// main.c
int printf(const char *format, ...);
void func1(int i)
{
printf("%d\n", i);
}
int main(void)
{
func1(1);
return 0;
}
I execute the command gcc -c…
Yves
- 11,597
- 17
- 83
- 180
2
votes
1 answer
How to extract all of the sections in an obj file
I'm working on an X86_64 Ubuntu machine. I know that we can use the command to extract some sections from an obj file.
Saying that I have an obj file, named main.o, now I can do things below:
me@my-machine:~/tmp$ readelf -S main.o
There are 13…
Yves
- 11,597
- 17
- 83
- 180
2
votes
1 answer
What does .text.unlikely mean in ELF object files?
In my objdump -t output, I see the following two lines:
00000000000004d2 l F .text.unlikely 00000000000000ec function-signature-goes-here [clone .cold.427]
and
00000000000018e0 g F .text 0000000000000690 function-signature-goes-here
I…
einpoklum
- 118,144
- 57
- 340
- 684
2
votes
1 answer
linux kernel function length in Oops and objdump (disassembly)
I have some kernel Oops which failed here:
BUG: ...
IP: [] myfunction+0x10/0x1e [mymodule]
In Oops we can see that the function length is 30 bytes in decimal.
I suppose that length is amount of bytes from 1st byte of 1st…
z0lupka
- 236
- 4
- 19