313 B
313 B
Lecture notes 1/31/2023
Setup
- Load file into byte array
- check if ELF
- parse file header
- get offset and length of text section
- virtual addresses and size
- get function addresses
Disassembly
- Use something like Capstone
- feed address and offset in linear sweep to find instruction