objdump is a program for displaying various information about object files. For instance, it can be used as a disassembler to view executable in assembly form. It is part of the GNU Binutils for fine-grained control over executable and other binary data.
Questions tagged [objdump]
477 questions
0
votes
1 answer
What are the addresses on the left in the output of objdump on a binary file?
I have compiled a simple hello world c code with gcc -fpie test.c, and now looking at the binary using objdump:
Disassembly of section __TEXT,__text:
__text:
100000f40: 55 pushq %rbp
100000f41: 48 89 e5 movq …
Josh
- 21
- 1
0
votes
1 answer
Why do we copy 0x0 to Stack pointer Register?
I have a small source file m.c
extern void a(char *);
int main(int ac, char **av)
{
static char string[] = "Hello, world!\n";
a(string);
}
a is an external function. When i dump the disassembly of above code, it emits the below output…
Abhishek Sagar
- 1,189
- 4
- 20
- 44
0
votes
1 answer
how to update objdump? got: unknown command line argument -M
Working through Jon Erickson's book on Hacking. He uses an intel format assembly code. He provides the following snippet:
reader@hacking:~/booksrc 08048374 :
$ objdump -M intel -D
a.out | grep -A20 main.
I'm getting this…
cryptograthor
- 455
- 1
- 7
- 19
0
votes
1 answer
Understanding this dump created by objdump
I'm very new to assembly language. I've been studying it for 2 weeks now.
Here is a dump generated by objdump. objdump -Mintel -d stack
00000560 :
560: 55 push ebp
561: 89 e5 mov …
devwannabe
- 3,160
- 8
- 42
- 79
0
votes
2 answers
What segment of .o file contains function xyz?
Consider a question "Which segment of abc.o contains function foo()?"
Is this the same question as
"What section of ELF contains this function foo()?"
Sorry .. i know this is very silly. I am a bit confused here.
James Raitsev
- 92,517
- 154
- 335
- 470
0
votes
0 answers
What does the -s (or --full-contents) flag in Objdump do?
I'd love to know cause googling didn't get me an answer explaining it.
Like I know it shows 'all information in a content' but what do the hexadecimal represent?
HayashiEsme
- 303
- 4
- 9
0
votes
0 answers
Why does objdump put dollar sign before some addresses?
So in the output of objdump -d on my ELF x86 binary i see some addresses having $ sign before them, i looked at previous questions on here about this sign but couldnt find anything related to being before address, all of them are related to strings…
Max
- 35
- 4
0
votes
0 answers
Writing buffer overflow exploits without NUL terminated strings
I have the below assembly code global _start
section .text
_start:
jmp call
pop:
pop ecx ; ECX = address of hello
xor eax, eax ; EAX = 0
xor al, al ; EAX = 4 (int 0x80…
srccode
- 721
- 4
- 16
0
votes
1 answer
Find functions names in .init_array section in unstripped library
Is it possible to find out all instances of static initialization in a elf dynamic library. I can dump the array of function pointers in .init_array section via objdump command like this.
objdump -s -j .init_array
Is there a way to…
Arpit Aggarwal
- 841
- 8
- 18
0
votes
2 answers
How to just print the binary code of a function in an object file?
I am able to disassemble an object file like below. But I'd like to just dump the raw number like 55, 48, ... of instructions in a binary format for a specific function, e.g., add4, to a file.
I could write a program to parse the output of otool.…
user1424739
- 11,937
- 17
- 63
- 152
0
votes
0 answers
What is the purpose of or (%eax),%eax?
I am playing around with bootloader code.
My code is supposed to print an 'A' on the top left corner of the display.
I use NASM:
BITS 16
mov al, 0x41 ; hex code for 'A'
mov ebx, 0xB8000 ; text screen video memory
mov byte [ebx], al …
EsterTron
- 11
- 2
0
votes
0 answers
Why "dynamically linked function name" isn't shown in certain binaries?
Seeing results of objdump -D /bin/bash I found something weird.
dynamically linked function name does not appered!
Below is part of <.text> section.
See 672c : call 26e0.
...
672c: e8 af bf ff ff call 26e0 #…
Jiwon
- 1,074
- 1
- 11
- 27
0
votes
1 answer
Disassamble ELF file - debugging area where specific string of binary is loaded
I would like to disassamble / debug an elf file. Is it somehow possible to track the function where a specific string in the elf file is called?
So I mean, I have a string where I know it is used to search for that string in a file. Is it somehow…
Manuel
- 613
- 1
- 6
- 20
0
votes
1 answer
Passing Parameters in Assembly
I have this question that I need help on. I'm supposed to detect the password (the answer) to this problem which is one of the parameters in assembly.
Output:
In this level, you will need to use gdb to find the password as it is
being passed as a…
Tribunal Homeland
- 41
- 7
0
votes
1 answer
How to interpret a dump of binary file?
Consider the following part of output from dump of a binary file (amd64):
$ objdump -D /lib/modules/4.16.0-1-amd64/kernel/drivers/usb/class/cdc-acm.ko
...
25f0: e8 00 00 00 00 callq 25f5
25f5: 53 …
Igor Liferenko
- 1,499
- 1
- 13
- 28