Re: disassembler
Aryeh Friedman wrote: I should of said USB drive I just think of all USB drives as flash drives... it is a Lacie external drive If this is a 3.5 drive with an external power supply, then the drive itself might be okay but the circuitry adapting it to the USB connector might have developed a problem - I not long ago had this happen to me, and the drive, when extracted (with some difficulty) from the case, could be accessed when connected directly to a P-ATA interface. -- - Andrew I MacIntyre These thoughts are mine alone... E-mail: andy...@bullseye.apana.org.au (pref) | Snail: PO Box 370 andy...@pcug.org.au (alt) |Belconnen ACT 2616 Web:http://www.andymac.org/ |Australia ___ freebsd-hackers@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to freebsd-hackers-unsubscr...@freebsd.org
Re: disassembler
No the issue is a drive that has roughly 10 years of work on it died
and I was asked to see if it is readable/reviable... I already know
the format of the MBR but I need to also read the code to see if
something is wakey (I have written MBR's {with inline assemble in GCC)
for an OS I am working on but never disambled one)
On Fri, Aug 27, 2010 at 2:50 AM, Jim Bryant kc5vdj.free...@gmail.com wrote:
umm, dude
you writing a boot sector virus or something?
funny though
http://www.freebsd.org/doc/en_US.ISO8859-1/books/arch-handbook/boot-boot0.html
given your skill and goals are questionable, you can find it in the source
tree yourself.
Aryeh Friedman wrote:
On Thu, Aug 26, 2010 at 11:36 PM, Aryeh Friedman
aryeh.fried...@gmail.com wrote:
On Thu, Aug 26, 2010 at 10:46 PM, Dirk Engling erdge...@erdgeist.org
wrote:
On 27.08.10 04:17, Aryeh Friedman wrote:
Is there a disassembler in the base system if not what is a good
option from ports?
Try objdump -d,
erdgeist
flosoft# objdump -d /dev/da0
objdump: Warning: '/dev/da0' is not an ordinary file
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to freebsd-hackers-unsubscr...@freebsd.org
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to freebsd-hackers-unsubscr...@freebsd.org
Re: disassembler
umm, dude you writing a boot sector virus or something? funny though http://www.freebsd.org/doc/en_US.ISO8859-1/books/arch-handbook/boot-boot0.html given your skill and goals are questionable, you can find it in the source tree yourself. Aryeh Friedman wrote: On Thu, Aug 26, 2010 at 11:36 PM, Aryeh Friedman aryeh.fried...@gmail.com wrote: On Thu, Aug 26, 2010 at 10:46 PM, Dirk Engling erdge...@erdgeist.org wrote: On 27.08.10 04:17, Aryeh Friedman wrote: Is there a disassembler in the base system if not what is a good option from ports? Try objdump -d, erdgeist flosoft# objdump -d /dev/da0 objdump: Warning: '/dev/da0' is not an ordinary file ___ freebsd-hackers@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to freebsd-hackers-unsubscr...@freebsd.org ___ freebsd-hackers@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to freebsd-hackers-unsubscr...@freebsd.org
Re: disassembler
ah, ok.
if it's a flash drive, the data may be toast. depends on how many dead
cells there are.
best of luck to you.
Aryeh Friedman wrote:
No the issue is a drive that has roughly 10 years of work on it died
and I was asked to see if it is readable/reviable... I already know
the format of the MBR but I need to also read the code to see if
something is wakey (I have written MBR's {with inline assemble in GCC)
for an OS I am working on but never disambled one)
On Fri, Aug 27, 2010 at 2:50 AM, Jim Bryant kc5vdj.free...@gmail.com wrote:
umm, dude
you writing a boot sector virus or something?
funny though
http://www.freebsd.org/doc/en_US.ISO8859-1/books/arch-handbook/boot-boot0.html
given your skill and goals are questionable, you can find it in the source
tree yourself.
Aryeh Friedman wrote:
On Thu, Aug 26, 2010 at 11:36 PM, Aryeh Friedman
aryeh.fried...@gmail.com wrote:
On Thu, Aug 26, 2010 at 10:46 PM, Dirk Engling erdge...@erdgeist.org
wrote:
On 27.08.10 04:17, Aryeh Friedman wrote:
Is there a disassembler in the base system if not what is a good
option from ports?
Try objdump -d,
erdgeist
flosoft# objdump -d /dev/da0
objdump: Warning: '/dev/da0' is not an ordinary file
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to freebsd-hackers-unsubscr...@freebsd.org
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to freebsd-hackers-unsubscr...@freebsd.org
Re: disassembler
I should of said USB drive I just think of all USB drives as flash
drives... it is a Lacie external drive
On Fri, Aug 27, 2010 at 4:27 AM, Jim Bryant kc5vdj.free...@gmail.com wrote:
ah, ok.
if it's a flash drive, the data may be toast. depends on how many dead
cells there are.
best of luck to you.
Aryeh Friedman wrote:
No the issue is a drive that has roughly 10 years of work on it died
and I was asked to see if it is readable/reviable... I already know
the format of the MBR but I need to also read the code to see if
something is wakey (I have written MBR's {with inline assemble in GCC)
for an OS I am working on but never disambled one)
On Fri, Aug 27, 2010 at 2:50 AM, Jim Bryant kc5vdj.free...@gmail.com
wrote:
umm, dude
you writing a boot sector virus or something?
funny though
http://www.freebsd.org/doc/en_US.ISO8859-1/books/arch-handbook/boot-boot0.html
given your skill and goals are questionable, you can find it in the
source
tree yourself.
Aryeh Friedman wrote:
On Thu, Aug 26, 2010 at 11:36 PM, Aryeh Friedman
aryeh.fried...@gmail.com wrote:
On Thu, Aug 26, 2010 at 10:46 PM, Dirk Engling erdge...@erdgeist.org
wrote:
On 27.08.10 04:17, Aryeh Friedman wrote:
Is there a disassembler in the base system if not what is a good
option from ports?
Try objdump -d,
erdgeist
flosoft# objdump -d /dev/da0
objdump: Warning: '/dev/da0' is not an ordinary file
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to
freebsd-hackers-unsubscr...@freebsd.org
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to freebsd-hackers-unsubscr...@freebsd.org
Re: disassembler
On Friday 27 August 2010 10:27:38 Jim Bryant wrote: ah, ok. if it's a flash drive, the data may be toast. depends on how many dead cells there are. Hi, dd if=/dev/da0 of=/root/temp.mbr bs=512 count=1 Then use objcopy to convert /root/temp.mbr into something that objdump can read, and it should disassemble it for you :-) You might want to look at photorec in ports too. Good luck. --HPS ___ freebsd-hackers@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to freebsd-hackers-unsubscr...@freebsd.org
Re: disassembler
On Fri, 27 Aug 2010 02:53:53 -0400
Aryeh Friedman aryeh.fried...@gmail.com wrote:
No the issue is a drive that has roughly 10 years of work on it died
and I was asked to see if it is readable/reviable... I already know
the format of the MBR but I need to also read the code to see if
something is wakey (I have written MBR's {with inline assemble in GCC)
for an OS I am working on but never disambled one)
On Fri, Aug 27, 2010 at 2:50 AM, Jim Bryant kc5vdj.free...@gmail.com wrote:
umm, dude
you writing a boot sector virus or something?
funny though
http://www.freebsd.org/doc/en_US.ISO8859-1/books/arch-handbook/boot-boot0.html
given your skill and goals are questionable, you can find it in the source
tree yourself.
Aryeh Friedman wrote:
On Thu, Aug 26, 2010 at 11:36 PM, Aryeh Friedman
aryeh.fried...@gmail.com wrote:
On Thu, Aug 26, 2010 at 10:46 PM, Dirk Engling erdge...@erdgeist.org
wrote:
On 27.08.10 04:17, Aryeh Friedman wrote:
Is there a disassembler in the base system if not what is a good
option from ports?
Try objdump -d,
__erdgeist
flosoft# objdump -d /dev/da0
objdump: Warning: '/dev/da0' is not an ordinary file
There are quite a few diassemblers under ports but I doubt they're
designed to work on raw disks.
If you just want to save the data then why not plug the disk into
a different box and save them?
--
Gary Jennejohn
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to freebsd-hackers-unsubscr...@freebsd.org
Re: disassembler
On Thursday, August 26, 2010 11:42:25 pm Aryeh Friedman wrote: On Thu, Aug 26, 2010 at 11:36 PM, Aryeh Friedman aryeh.fried...@gmail.com wrote: On Thu, Aug 26, 2010 at 10:46 PM, Dirk Engling erdge...@erdgeist.org wrote: On 27.08.10 04:17, Aryeh Friedman wrote: Is there a disassembler in the base system if not what is a good option from ports? Try objdump -d, erdgeist flosoft# objdump -d /dev/da0 objdump: Warning: '/dev/da0' is not an ordinary file For a raw file of x86 instructions use ndisasm from the 'nasm' port. Note that it assumes 16-bit code by default, but you can use ndisasm -U to parse 32-bit instructions instead. For a typical MBR boot loader, plain ndisasm should work fine: # ndisasm /dev/twed0 FCcld 0001 31C0 xor ax,ax 0003 8EC0 mov es,ax 0005 8ED8 mov ds,ax 0007 8ED0 mov ss,ax 0009 BC007Cmov sp,0x7c00 000C BE1A7Cmov si,0x7c1a 000F BF1A06mov di,0x61a 0012 B9E601mov cx,0x1e6 0015 F3A4 rep movsb 0017 E9008Ajmp word 0x8a1a 001A 31F6 xor si,si ... etc. I would dd the first sector of your disk off to a file and run ndisasm on that though rather than on the live disk. -- John Baldwin ___ freebsd-hackers@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to freebsd-hackers-unsubscr...@freebsd.org
Re: disassembler
On Fri, Aug 27, 2010 at 11:36:55AM +0200, Gary Jennejohn wrote: There are quite a few diassemblers under ports but I doubt they're designed to work on raw disks. ndisasm should work nicely; it's in the devel/nasm port. Regards, -- Rink P.W. Springer- http://rink.nu The power of accurate observation is commonly called cynicism by those who have not got it. - George Bernard Shaw ___ freebsd-hackers@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to freebsd-hackers-unsubscr...@freebsd.org
disassembler
Is there a disassembler in the base system if not what is a good option from ports? ___ freebsd-hackers@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to freebsd-hackers-unsubscr...@freebsd.org
Re: disassembler
On 27.08.10 04:17, Aryeh Friedman wrote: Is there a disassembler in the base system if not what is a good option from ports? Try objdump -d, erdgeist ___ freebsd-hackers@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to freebsd-hackers-unsubscr...@freebsd.org
Re: disassembler
On Thu, Aug 26, 2010 at 11:36 PM, Aryeh Friedman aryeh.fried...@gmail.com wrote: On Thu, Aug 26, 2010 at 10:46 PM, Dirk Engling erdge...@erdgeist.org wrote: On 27.08.10 04:17, Aryeh Friedman wrote: Is there a disassembler in the base system if not what is a good option from ports? Try objdump -d, erdgeist flosoft# objdump -d /dev/da0 objdump: Warning: '/dev/da0' is not an ordinary file ___ freebsd-hackers@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to freebsd-hackers-unsubscr...@freebsd.org
Re: disassembler
On Fri, Aug 27, 2010 at 12:37 AM, Aryeh Friedman aryeh.fried...@gmail.com wrote: Not really I need to look at the MBR for a flash drive (both the partiion table and the boot code) On Fri, Aug 27, 2010 at 12:32 AM, Rodrigo Mizobe m1z...@gmail.com wrote: hexdump could help you? what is your need? ___ freebsd-hackers@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to freebsd-hackers-unsubscr...@freebsd.org
Re: x86 Disassembler
In message: [EMAIL PROTECTED] Bruce M Simpson [EMAIL PROTECTED] writes: : On Tue, Aug 12, 2003 at 05:18:12PM -0400, Ryan Sommers wrote: : Are there any tools to disassemble an x86 binary file? objdump does a nice : job on most files. However, I'm messing with some machine-code binary : files that don't have ELF headers or anything other then the machine-code : (ie MBR's). I'd like to disassemble them on FreeBSD, possibly to a format : that G(as) could reassemble. Then I don't have to use something like : debug.exe. : If you need something more elaborate, try the trial version of DataRescue's : IDA. The console version works well under WINE. sourcer even runs with doscmd last time I checked. Warner ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: x86 Disassembler
On Tue, Aug 12, 2003, Ryan Sommers wrote: Are there any tools to disassemble an x86 binary file? objdump does a nice job on most files. However, I'm messing with some machine-code binary files that don't have ELF headers or anything other then the machine-code (ie MBR's). I'd like to disassemble them on FreeBSD, possibly to a format that G(as) could reassemble. Then I don't have to use something like debug.exe. One kludge that may work is to use objcopy --add-section to insert the machine code into an ELF file. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: x86 Disassembler
On Tue, Aug 12, 2003 at 05:18:12PM -0400, Ryan Sommers wrote: Are there any tools to disassemble an x86 binary file? objdump does a nice job on most files. However, I'm messing with some machine-code binary files that don't have ELF headers or anything other then the machine-code (ie MBR's). I'd like to disassemble them on FreeBSD, possibly to a format that G(as) could reassemble. Then I don't have to use something like debug.exe. nasm and ndisasm work splendidly for me. If you need something more elaborate, try the trial version of DataRescue's IDA. The console version works well under WINE. BMS ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to [EMAIL PROTECTED]
x86 Disassembler
Are there any tools to disassemble an x86 binary file? objdump does a nice job on most files. However, I'm messing with some machine-code binary files that don't have ELF headers or anything other then the machine-code (ie MBR's). I'd like to disassemble them on FreeBSD, possibly to a format that G(as) could reassemble. Then I don't have to use something like debug.exe. -- Ryan leadZERO Sommers Gamer's Impact President [EMAIL PROTECTED] ICQ: 1019590 AIM/MSN: leadZERO -= http://www.gamersimpact.com =- ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to [EMAIL PROTECTED]
