windows下可执行文件的coff文件信息叫pe,Linux下叫elf。
查看elf信息
readelf -h 文件名
回显:
ELF Header:
Magic: 7f 45 4c 46 01 01 01 00 00 00 00 00 00 00 00 00
Class: ELF32
Data: 2's complement, little endian
Version: 1 (current)
OS/ABI: UNIX - System V
ABI Version: 0
Type: DYN (Shared object file)
Machine: Intel 80386
Version: 0x1
Entry point address: 0x10a0
Start of program headers: 52 (bytes into file)
Start of section headers: 15480 (bytes into file)
Flags: 0x0
Size of this header: 52 (bytes)
Size of program headers: 32 (bytes)
Number of program headers: 11
Size of section headers: 40 (bytes)
Number of section headers: 34
Section header string table index: 33
Entry point address: 0x10a010a0
就是程序入口点
使用objdump
反汇编程序,查看入口
objdump -d 文件名|grep 10a0
回显
000010a0 <_start>:
10a0: 31 ed xor %ebp,%ebp
看到10a0
就是程序入口。
Comments | NOTHING