Hi can u try disassemble this?

Question

Hi can u try disassemble this?

opened this issue 5 years ago · comments

It's not working for me when use ur script
this file isn't disassembling

Not working for me
If it works for you than can you try giving me the database of this exported from Ida ?

idl3r · Answer 1 · Tue Mar 26 2019 10:35:13 GMT+0800 (China Standard Time)

Actually, it works. You need to extract the real linux kernel image from the boot.img first. You can do that with abootimg, binwalk, dd and gzip, all are common utilities. Search XDA for tutorials.

I'm using Ghidra now, this is the output for Ghidra load with GhidraVmlinuxLoader. For practice, you shall extract the kernel image (vmlinux) yourself.
vmlinux.sym.json.zip

Droidimg was designed for experienced researchers. But seems there are wider user base of it now. I'll update the README with a section describing how to quickly check if a file is a valid vmlinux image.

Deleted user · Answer 2 · Tue Mar 26 2019 13:48:01 GMT+0800 (China Standard Time)

Dude I have extracted image from kernel with one of the utilities you have mentioned above and it still not showing on Ida page

idl3r · Answer 3 · Tue Mar 26 2019 14:35:25 GMT+0800 (China Standard Time)

The loader did almost no check on image to determine whether is loadable. In short, it is more likely to be an IDA issue. My suggestion is either contacting IDA support, or try Ghidra/R2/Binja