|
http://www.hackerschool.org/HS_Boards/zboard.php?id=Free_Lectures&no=616 [복사]
리눅스에서 gdb를 사용해서 디스어셈블 해볼때 AT&T 문법으로 나와서 intel 문법으로 공부하신분들은 헷갈릴수도 있고 보기 힘들때가 있습니다.
그럴땐 이 한줄로 intel 문법으로 바꾸어 보실수 있습니다.
(gdb) set disassembly-flavor intel
아래는 적용시키기 전과 후를 디스어셈블 해본 것 입니다.
(gdb) disass main
Dump of assembler code for function main:
0x08048328 <main+0>: push %ebp
0x08048329 <main+1>: mov %esp,%ebp
0x0804832b <main+3>: sub $0x18,%esp
0x0804832e <main+6>: and $0xfffffff0,%esp
0x08048331 <main+9>: mov $0x0,%eax
0x08048336 <main+14>: sub %eax,%esp
0x08048338 <main+16>: movl $0xa,0xfffffffc(%ebp)
0x0804833f <main+23>: mov 0x8048418,%eax
0x08048344 <main+28>: mov 0x804841c,%edx
0x0804834a <main+34>: mov %eax,0xfffffff0(%ebp)
0x0804834d <main+37>: mov %edx,0xfffffff4(%ebp)
0x08048350 <main+40>: sub $0x4,%esp
0x08048353 <main+43>: lea 0xfffffff0(%ebp),%eax
0x08048356 <main+46>: push %eax
0x08048357 <main+47>: pushl 0xfffffffc(%ebp)
0x0804835a <main+50>: push $0x8048420
0x0804835f <main+55>: call 0x8048268 <printf>
0x08048364 <main+60>: add $0x10,%esp
0x08048367 <main+63>: leave
0x08048368 <main+64>: ret
0x08048369 <main+65>: nop
0x0804836a <main+66>: nop
---Type <return> to continue, or q <return> to quit---
0x0804836b <main+67>: nop
End of assembler dump.
(gdb) set disassembly-flavor intel
(gdb) disass main
Dump of assembler code for function main:
0x08048328 <main+0>: push ebp
0x08048329 <main+1>: mov ebp,esp
0x0804832b <main+3>: sub esp,0x18
0x0804832e <main+6>: and esp,0xfffffff0
0x08048331 <main+9>: mov eax,0x0
0x08048336 <main+14>: sub esp,eax
0x08048338 <main+16>: mov DWORD PTR [ebp-4],0xa
0x0804833f <main+23>: mov eax,ds:0x8048418
0x08048344 <main+28>: mov edx,ds:0x804841c
0x0804834a <main+34>: mov DWORD PTR [ebp-16],eax
0x0804834d <main+37>: mov DWORD PTR [ebp-12],edx
0x08048350 <main+40>: sub esp,0x4
0x08048353 <main+43>: lea eax,[ebp-16]
0x08048356 <main+46>: push eax
0x08048357 <main+47>: push DWORD PTR [ebp-4]
0x0804835a <main+50>: push 0x8048420
0x0804835f <main+55>: call 0x8048268 <printf>
0x08048364 <main+60>: add esp,0x10
0x08048367 <main+63>: leave
0x08048368 <main+64>: ret
0x08048369 <main+65>: nop
0x0804836a <main+66>: nop
---Type <return> to continue, or q <return> to quit---
0x0804836b <main+67>: nop
End of assembler dump.
(gdb)
|
Hit : 6744 Date : 2007/02/20 10:15
|
1581, 
35/80 
