Re: disassembling machine code
On Thu, Mar 20, 2008 at 09:25:00AM -0700, PETER EASTHOPE wrote:
> There was no answer to this question in debian-user.
> Is this the appropriate list?
> I have these 5 bytes of machine code to disassemble.
> b8 12 00 cd 10
> I've looked at gdb and objdump. Appears they
> need a complete object file. What tool can disassemble
> this string?
I'm biased towards libdisasm's x86dis tool:
$ echo -e '\xb8\x12\x00\xcd\x10' | x86dis -r 0 5 -s att
00000000 B8 12 00 mov $0x0012, %ax
00000003 CD 10 int $0x10
Kees Cook @outflux.net