網路城邦
上一篇 回創作列表 下一篇   字體:
常用反組譯
2022/06/01 16:25:27瀏覽183|回應0|推薦0
arm-linux-gnueabihf-readelf -S hello_basic.ko


arm-linux-gnueabihf-readelf -x .rodata.str1.4 hello_basic.ko

arm-linux-gnueabihf-objdump -t hello_basic.ko

arm-linux-gnueabihf-objdump -t WS_7inchDSI1024x600_Screen.ko

===============
arm-linux-gnueabihf-readelf -S hello_basic.ko
There are 23 section headers, starting at offset 0x3f0:

Section Headers:
[Nr] Name Type Addr Off Size ES Flg Lk Inf Al
[ 0] NULL 00000000 000000 000000 00 0 0 0
[ 1] .note.gnu.build-i NOTE 00000000 000034 000024 00 A 0 0 4
[ 2] .text PROGBITS 00000000 000060 000000 00 AX 0 0 16
[ 3] .init.text PROGBITS 00000000 000060 000024 00 AX 0 0 4
[ 4] .rel.init.text REL 00000000 000788 000018 08 21 3 4
[ 5] .exit.text PROGBITS 00000000 000084 00000c 00 AX 0 0 4
[ 6] .rel.exit.text REL 00000000 0007a0 000018 08 21 5 4
[ 7] .reginfo MIPS_REGINFO 00000000 000090 000018 18 A 0 0 4
[ 8] .rodata.str1.4 PROGBITS 00000000 0000a8 000054 01 AMS 0 0 4
[ 9] .modinfo PROGBITS 00000000 0000fc 000018 00 A 0 0 4
[10] .data PROGBITS 00000000 000120 000000 00 WA 0 0 16
[11] .gnu.linkonce.thi PROGBITS 00000000 000120 000140 00 WA 0 0 4
[12] .rel.gnu.linkonce REL 00000000 0007b8 000010 08 21 11 4
[13] .bss NOBITS 00000000 000260 000000 00 WA 0 0 16
[14] .pdr PROGBITS 00000000 000260 000040 00 0 0 4
[15] .rel.pdr REL 00000000 0007c8 000010 08 21 14 4
[16] .mdebug.abi32 PROGBITS 00000000 0002a0 000000 00 0 0 1
[17] .comment PROGBITS 00000000 0002a0 000068 01 MS 0 0 1
[18] .note.GNU-stack PROGBITS 00000000 000308 000000 00 0 0 1
[19] .gnu.attributes LOOS+ffffff5 00000000 000308 000010 00 0 0 1
[20] .shstrtab STRTAB 00000000 000318 0000d6 00 0 0 1
[21] .symtab SYMTAB 00000000 0007d8 000160 10 22 18 4
[22] .strtab STRTAB 00000000 000938 00003b 00 0 0 1
Key to Flags:
W (write), A (alloc), X (execute), M (merge), S (strings)
I (info), L (link order), G (group), T (TLS), E (exclude), x (unknown)
O (extra OS processing required) o (OS specific), p (processor specific)
--------------
arm-linux-gnueabihf-readelf -x .rodata.str1.4 hello_basic.ko

Hex dump of section '.rodata.str1.4':
0x00000000 48656c6c 6f2c2069 6d78365f 61647264 Hello, imx6_adrd
0x00000010 206d6f64 756c6520 69732069 6e737461 module is insta
0x00000020 6c6c6564 20210a00 476f6f64 2d627965 lled !..Good-bye
0x00000030 2c20696d 78365f61 64726420 6d6f6475 , imx6_adrd modu
0x00000040 6c652077 61732072 656d6f76 6564210a le was removed!.
0x00000050 00000000 ....

----------------
arm-linux-gnueabihf-objdump -t hello_basic.ko

hello_basic.ko: file format elf32-little

SYMBOL TABLE:
00000000 l d .note.gnu.build-id 00000000 .note.gnu.build-id
00000000 l d .text 00000000 .text
00000000 l d .init.text 00000000 .init.text
00000000 l d .exit.text 00000000 .exit.text
00000000 l d .reginfo 00000000 .reginfo
00000000 l d .rodata.str1.4 00000000 .rodata.str1.4
00000000 l d .modinfo 00000000 .modinfo
00000000 l d .data 00000000 .data
00000000 l d .gnu.linkonce.this_module 00000000 .gnu.linkonce.this_module
00000000 l d .bss 00000000 .bss
00000000 l d .pdr 00000000 .pdr
00000000 l d .mdebug.abi32 00000000 .mdebug.abi32
00000000 l d .comment 00000000 .comment
00000000 l d .note.GNU-stack 00000000 .note.GNU-stack
00000000 l d .gnu.attributes 00000000 .gnu.attributes
00000000 l .rodata.str1.4 00000000 $LC0
00000028 l .rodata.str1.4 00000000 $LC1
00000000 g O .gnu.linkonce.this_module 00000140 __this_module
00000000 g F .exit.text 0000000c cleanup_module
00000000 g F .init.text 00000024 init_module
00000000 *UND* 00000000 printk
( 創作其他 )
回應 列印 加入我的文摘
上一篇 回創作列表 下一篇

引用
引用網址:https://classic-blog.udn.com/article/trackback.jsp?uid=greatcat&aid=174745822