Questions tagged [objdump]

objdump is a program for displaying various information about object files. For instance, it can be used as a disassembler to view executable in assembly form. It is part of the GNU Binutils for fine-grained control over executable and other binary data.

477 questions
0
votes
0 answers

Extract opcodes from the entry point of an executable

I am working with the objdump command to decompile an executable and extract the opcodes, I need to know if I can extract the opcodes from the entry point of the file, because now I do it from the sections.
0
votes
1 answer

Specify Section name in Objdump

I am working on disassembling PE files to assembly using Objdump. Using this command: objdump -M intel -d File.exe The Output is: 00401000 <___mingw_CRTStartup>: 401000: 53 push ebx 401001: 83 ec 38 …
0
votes
1 answer

How to understand the disassemble code output from gdb

Look at the following output from gdb, why does the instruction code is disordered? It shows: 0xffffffff81107714 <+7>: mov %rdi,%rbx then shows 0xffffffff8110770f <+2>: cmpq $0x0,0x10(%rdi) . (gdb) disassemble /m __d_rehash Dump of…
river
  • 694
  • 6
  • 22
0
votes
2 answers

arm - how to check endianness of an object file

Using objdump, how do you check if an .obj is little- or big-endian?
Bob
  • 4,576
  • 7
  • 39
  • 107
0
votes
1 answer

Discard unused symbos from dlopen()'ed .so

I have a set of shared libraries (Intel MKL) that are only distributed in binary form. A top-level "runtime" library, libmkl_rt.so, links against my executable and is visible with ldd: ... libmkl_rt.so => /var/task/lib/libmkl_rt.so…
thinkski
  • 1,306
  • 1
  • 15
  • 25
0
votes
1 answer

I don't understand meaning of this: +"a function to be evaluated during reloc processing"

I don't understand meaning of this: +"a function to be evaluated during reloc processing" - it is from flags of objdump. How function can be evaluated during reloc processing? Is it sequence of cpu opcodes (subrotinue) that must be called? Or what?
rcm
  • 1
  • 4
0
votes
0 answers

how to xor a portion of code with objdump

I want to xor a portion of code for a static analyse of a 32 bits elf executable. I know the start and ending address, i know the xor key. I tried to dump memory block with objdump and pipe it to a python script which make the xor. But i am…
Bob5421
  • 7,757
  • 14
  • 81
  • 175
0
votes
1 answer

Can I display disassembly code along with symbols from the .bss section only?

I'd like avr-objdump to show the disassembled code from an avr-elf binary file and also include symbols but only those from the .bss section, like this: SYMBOL TABLE: 00800100 l d .bss 00000000 .bss 00800102 u O .bss 00000001…
user4113344
0
votes
0 answers

Objdump bug (?) when disassembling a large ARM file

I'm trying to disassemble libnickel.so found on my kobo (~12Mb) with arm-linux-gnueabi-objdump on a linux machine. The file format is correctly detected as elf32-littlearm, and all opcodes are 32-bit as expected for ARM; but suddenly output aspect…
giuliolunati
  • 766
  • 5
  • 14
0
votes
0 answers

ELF tool to dump function addresses alongside their symbols

I've recently come across an issue with objdump where instead of printing the function's symbol as a label, it repeats the first instruction over and over a few times. ca719c: 009501b4 ; instruction: 0x009501b4 ca71a0:…
0
votes
3 answers

accesing static variables that declared inside functions

I want to know why we cant access variables those declared inside functions from outside the function? Its technically possible to access them since they put in .data segment just like global/static variables. Also what is the difference between a…
Ali Atıl
  • 121
  • 7
0
votes
0 answers

Objdump: What does the comment mean?

I'm trying to write a small os kernel and got an General Protection Fault at runtime. By logging the qemu output, I figured out, that the following assembly is responsible: 10592e: 48 c7 05 a7 5c 02 00 movq $0x12b5a0,0x25ca7(%rip) # 12b5e0…
jagemue
  • 363
  • 4
  • 16
0
votes
1 answer

Prevent objdump from truncating hex output

Using objdump -dF or just objdump -d, I experience that objdump truncates output: 0000000000400561 <.wm_split0> (File Offset: 0x561): 400561: 01 00 add %eax,(%rax) ... 0000000000400565 <.end_0> (File Offset:…
Shuzheng
  • 11,288
  • 20
  • 88
  • 186
0
votes
1 answer

Can't find the Symbol Table(Elf format) (C programming)

I'm actually recoding the nm and objdump program. I've already finished objdump and it works well, so i'm working on nm now. I'm trying to find the Symbol table, in order to do that i run through the Section header table like this : while (i <…
drumz
  • 65
  • 7
0
votes
0 answers

objdump result not consistent? It shows different required libraries depending on how it's executed

It seems it's a not reliable behavior. If I compile thrift c_glib library and show requirement of the libraries I found: thrift/lib/c_glib$ objdump -p .libs/libthrift_c_glib.so | grep NEED NEEDED libgobject-2.0.so NEEDED …