Re: intelligent disassembly



Terence <tbwright@xxxxxxxxx> writes:

Debug is fine for DOS boot sectors.

Thanks, that's very good to know. The boot sector I want to look at
is actually one produced by Lilo, produced on a RH Linux system and
apparently produced using as86 and ld86. Linux doesn't seem to have
any tools for disassembly of the 8086 binary files that are produced,
but I have FREEDOS installed on another partition on the same machine,
so I figured I'd try to use something from that platform. Is there a
way to save a transcript of the DEBUG session?

I'm aware of dosemu under Linux but it doesn't work very well on my
system.

I've even worked out how some very nasty viruses worked (back when we
competed to report them and identify critical parts), with DEBUG.
However, Bubble, Dasm, Dis86, IDA, and Sicetool are usable programs
all available - try via Google to find these as freeware or shareware
(and I have Sourcerer on a CD somewhere I can't lay my hands on now..)

I did a Google search of the disassemblers you mentioned and was led
to a Wikipedia page that also mentions Norman Ramsay's New Jersey Toolkit,
which he uses to construct disassemblers for various machines. The source
code comes in the form of a literate program and I'm a big fan of literate
programming. So, I've downloaded that and will try to make sense of it.
That might let me stay in Linux and do this.

Of course, the boot sector that is produced by Lilo derives from source code
that is freely available and which I have a copy of. But I'd like to compare
the final product with the sources, hence the need to look at the boot sector.
--
Ignorantly,
Allan Adler <ara@xxxxxxxxxxxxxxxxxxxx>
* Disclaimer: I am a guest and *not* a member of the MIT CSAIL. My actions and
* comments do not reflect in any way on MIT. Also, I am nowhere near Boston.
.



Relevant Pages

  • Re: booting from hdb with lilo
    ... When you run LILO under Linux (so that it re-writes ... code you get during the boot process doesn't bode well, ... to install the boot sector. ... to boot to Linux, haven't you? ...
    (Debian-User)
  • LINUX NEED SUPPORT FROM MS?!: booting from hdb with lilo
    ... boot into 98 and use loadlin, if it were win2k or XP, ... DOES LINUX NEED SUPPORT ... if lilo could do the job, ... Reading boot sector from /dev/hdb3 ...
    (Debian-User)
  • Re: DVD burner query
    ... including boot sector and what have you, not the simple brain dead partition ... automount that MS Sofffware does. ... And I'd like you to propose a Linux install which automatically mounts ...
    (rec.video.production)
  • Re: LILO with root-raid nightmare - please help.
    ... Kernel & BIOS return differing head/sector geometries for device 0x80 ... /dev/hda is not on the first disk /boot/boot.0300 exists - no boot sector backup copy made. ... I believe the problem may have stemmed from the fact that I originally set up the array on woody with a version of lilo that needed to overwrite the mbr of each of the physical disks, apparently this isn't the default behavior for raid in newer versions of lilo. ...
    (Debian-User)
  • Re: grubby: unable to open /boot/boot.b: No such file or directory
    ... Thomas Rabaix wrote: ... Development beyond version 21 Copyright 1999-2006 John Coffman ... The boot sector and the map file have *NOT* been altered. ... this is true, as noted in 1st line of lilo response, it proves out ...
    (Fedora)