[plug] Disassembler

[Brad Campbell]

Bernard Blackham wrote:
> On Sun, Sep 28, 2003 at 01:40:20PM +0400, Brad Campbell wrote:
> 
>>I'm doing some work on a driver for a satellite tv card and I need to 
>>get inside a binary only kernel module for a redhat 2.4.2 kernel (The 
>>only driver they provide or support!)
>>
>>Anyone have any good suggestions for a dissasembler?
> 
> 
> When you say disassembler, do you mean to assembly or something
> higher level like C?
> 
> I'm yet to find a decent binary -> C disassembler for i386 Linux.
> The last one I discovered and tried unsuccessfully was uncc - tis a
> debian package. I couldn't get anything sensible out of it, though
> YMMY.

Nah, just down to asm.

I don't mind reading assembler, and know enough about compilers to be 
able to take a reasonable guess at what the source looked like.

> Several times I've resorted to walking through assembly code output
> from objdump -d and had a lot more success.

I tried objdump -d but it gives me some pretty incoherent output. I need 
to look at the code when it has been relocated I think.
I might try an insmod -f and then attach gdb to the kernel to see what I 
turn up.
I have also grabbed a copy of the windows driver and run that through 
ida, so I have something to compare against anyway. Win2k drivers have 
some oddities that are hard to read in assembler anyway.

Cheers,
Brad.

_______________________________________________
plug mailing list
plug at plug.linux.org.au
http://mail.plug.linux.org.au/cgi-bin/mailman/listinfo/plug