Disassembly תרגול 7 ניתוח קוד

How to - Disassembly of code Compilation of code: gcc code.c We get the file: a.out Disassembly: objdump -d a.out We get an assembly-like code that represents the c code appeared in file code.c Objdump –t a.out This will print out the symbol table of the file. The symbol table includes the names of all functions and global variables in the file, the names of all the functions being called by the file, and their addresses.

Basic: Many times when we work with an executive file we are interested in the code behind it. We can use the disassembly option or the debugger option in order to analyze the executive file, and understand what it does. Sometimes we want to use both options. Disassembly enable us to get an assembly-like file that represent the activity of the executive file.

Important aspects In disassembly we only get the code of the functions in the files and functions that were used by the files. We don’t get the code of the system’s functions (printf, scanf…). We don’t get the values of global constants or strings. Many times there are optimizations or nops added by the compiler – which make it harder to understand. For example, nop xchg %cx, %cx

An example While using disassember there are many global general functions added (init, start) usually we don’t care about them. Show disass.asm

Y86 Instruction Set Byte 1 2 3 4 5 nop addl 6 subl 1 andl 2 xorl 3 1 2 3 4 5 nop addl 6 subl 1 andl 2 xorl 3 halt 1 rrmovl rA, rB 2 rA rB irmovl V, rB 3 8 rB V rmmovl rA, D(rB) 4 rA rB D jmp 7 jle 1 jl 2 je 3 jne 4 jge 5 jg 6 mrmovl D(rB), rA 5 rA rB D OPl rA, rB 6 fn rA rB jXX Dest 7 fn Dest call Dest 8 Dest ret 9 pushl rA A rA 8 popl rA B rA 8

main:

hello: Address 0x08048520 does not appear in the disassembly code we can see. What does that tell us? How can we find out what is its value?

hello: Function “puts” is a simplified version of the printf() function. It doesn’t have all printf formats and it always put the newline character in the end of its strings.

main:

even: What kind of a loop is it?

main: Cleaning up the stack!

The C code: