Re: How to read .so lib file
first, there's a #re channel on freenode that might be able to help
you better. though, i'd first brush up on my assembly and gdb before
looking there :)
basically, you can link a program against a library (or find a program
that calls a library - ldd or strace come to mind), open it up with
gdb, run it, disassemble it, and then step through it and look at how
registers change. but, if you have no idea what a library is for, i
don't know how you'd link against it to start that process....
also, you might look at 'Lenas Reversing for Newbies' it is mainly
windows, but same concepts.
all that said, i have a feeling i've misunderstood your question or
you have no idea what a linkable library is (for)?
On Thu, Aug 18, 2011 at 15:36, Wayne Topa <linuxtwo@gmail.com> wrote:
>
> On Aug 19, 2011, at 0:57, Wayne Topa <linuxtwo@gmail.com> wrote:
>
>
> Putting this back on the list. It is against DU Code of Conduct to reply to
> list messages off list unless asked to.
>
> Others may have the same question and it is unfair to them to take it off
> list.
>
>
>
>
>> On 08/18/2011 12:37 PM, lina wrote:
>>>
>>> Hi,
>>>
>>> I don't know how to read the .so file under /usr/lib/
>>>
>>> the Binary file.
>>>
>>
>> Then it probably will not help you but you can read a binary file by using
>> 'more', instead of 'less' but you wont be able to understand it.
>
> SORRY I missed typed I meant to write most , NOT more
>
>>> Then how does someone can use some bash script or sed command work >> on
>>> .so file without reading it.
>
> They don't. .so files are library files and users do not normally do
> ANYTHING to them other them use them.
>
> Try using most filename.whatever.so to read them and you will see why I said
> you would not understand it.
>
>
>>> I tried cat, all unreadable.
> cat, less and more are used to read ASCII files. see man most
>
> Here is a small example:
> most /lib/libproc-3.2.8.so
> 0x00000000: 7F454C46 02010100 00000000 00000000 .ELF............
> 0x00000010: 03003E00 01000000 B0410000 00000000 ..>.....°A......
> 0x00000020: 40000000 00000000 801E0100 00000000 @...............
> 0x00000030: 00000000 40003800 06004000 1D001C00 ....@.8...@.....
> 0x00000040: 01000000 05000000 00000000 00000000 ................
> 0x00000050: 00000000 00000000 00000000 00000000 ................
> 0x00000060: 74060100 00000000 74060100 00000000 t.......t.......
> 0x00000070: 00002000 00000000 01000000 06000000 .. .............
> 0x00000080: 00100100 00000000 00102100 00000000 ..........!.....
> 0x00000090: 00102100 00000000 840D0000 00000000 ..!.............
> 0x000000A0: 583D0100 00000000 00002000 00000000 X=........ .....
> 0x000000B0: 02000000 06000000 40170100 00000000 ........@.......
> 0x000000C0: 40172100 00000000 40172100 00000000 @.!.....@.!.....
> 0x000000D0: E0010000 00000000 E0010000 00000000 à.......à.......
> 0x000000E0: 08000000 00000000 04000000 04000000 ................
> 0x000000F0: 90010000 00000000 90010000 00000000 ................
> 0x00000100: 90010000 00000000 24000000 00000000 ........$.......
> 0x00000110: 24000000 00000000 04000000 00000000 $...............
> 0x00000120: 50E57464 04000000 B8F70000 00000000 Påtd....¸÷......
> 0x00000130: B8F70000 00000000 B8F70000 00000000 ¸÷......¸÷......
> 0x00000140: E4020000 00000000 E4020000 00000000 ä.......ä.......
> 0x00000150: 04000000 00000000 51E57464 06000000 ........Qåtd....
> 0x00000160: 00000000 00000000 00000000 00000000 ................
> 0x00000170: 00000000 00000000 00000000 00000000 ................
> 0x00000180: 00000000 00000000 08000000 00000000 ................
> 0x00000190: 04000000 14000000 03000000 474E5500 ............GNU.
> 0x000001A0: 0AF01829 963B92EE 4123DA14 E0EBADCE .ð.).;.îA#Ú.àëÎ
> 0x000001B0: 2D19665C 00000000 83000000 99000000 -.f\............
>
> Wayne
>
>
>
> --
> To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org with a subject
> of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> Archive: [🔎] 4E4D69B4.2020604@gmail.com">http://lists.debian.org/[🔎] 4E4D69B4.2020604@gmail.com
>
>
Reply to: