The Disassembler


The disassembler written for this task, tld.pl, resolves the functions in the binary file provided by matching them against those in the library the binary is thought to compiled against. This is done by searching for the functions byte by byte in the binary. The disassembler uses 'objdump' to disassembly the binary file and the library object files, it then matches the functions based on the disassembly of each library function. The disassembler can match multiple functions from the library to the same location in the binary being analysed, which occured in this case, and also match the same library function to multiple palces in the binary.

The disassembler resolved about 90% of the functions in 'the-binary' using libc5.3.12 object files, the output is written in html, with links to the library functions where they have been resolved, and also to several other instructions such as jmp, and others similar.