From owner-freebsd-hackers@FreeBSD.ORG Fri Aug 27 08:42:29 2010 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id ECEDC1065696 for ; Fri, 27 Aug 2010 08:42:29 +0000 (UTC) (envelope-from hselasky@c2i.net) Received: from swip.net (mailfe08.swip.net [212.247.154.225]) by mx1.freebsd.org (Postfix) with ESMTP id 752868FC1A for ; Fri, 27 Aug 2010 08:42:29 +0000 (UTC) X-Cloudmark-Score: 0.000000 [] X-Cloudmark-Analysis: v=1.1 cv=A9i2abt5RTkKnggEwMfGtMsecE7KHeOxIgKEeBb2Lvo= c=1 sm=1 a=8nJEP1OIZ-IA:10 a=M8b_wTzEtboA:10 a=MnI1ikcADjEx7bvsp0jZvQ==:17 a=i0QcCXJJrt8ueKhABZAA:9 a=jgg34Gwsg-8TtivDp53w7fBLYzcA:4 a=wPNLvfGTeEIA:10 a=MnI1ikcADjEx7bvsp0jZvQ==:117 Received: from [188.126.201.140] (account mc467741@c2i.net HELO laptop002.hselasky.homeunix.org) by mailfe08.swip.net (CommuniGate Pro SMTP 5.2.19) with ESMTPA id 11919650; Fri, 27 Aug 2010 10:32:19 +0200 From: Hans Petter Selasky To: freebsd-hackers@freebsd.org Date: Fri, 27 Aug 2010 10:28:26 +0200 User-Agent: KMail/1.13.5 (FreeBSD/8.1-STABLE; KDE/4.4.5; amd64; ; ) References: <4C7776FA.5070601@gmail.com> In-Reply-To: <4C7776FA.5070601@gmail.com> X-Face: +~\`s("[*|O,="7?X@L.elg*F"OA\I/3%^p8g?ab%RN'(; _IjlA: hGE..Ew, XAQ*o#\/M~SC=S1-f9{EzRfT'|Hhll5Q]ha5Bt-s|oTlKMusi:1e[wJl}kd}GR Z0adGx-x_0zGbZj'e(Y[(UNle~)8CQWXW@:DX+9)_YlB[tIccCPN$7/L' MIME-Version: 1.0 Content-Type: Text/Plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <201008271028.26529.hselasky@c2i.net> Cc: Dirk Engling , Aryeh Friedman , Jim Bryant Subject: Re: disassembler X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Aug 2010 08:42:30 -0000 On Friday 27 August 2010 10:27:38 Jim Bryant wrote: > ah, ok. > > if it's a flash drive, the data may be toast. depends on how many dead > cells there are. > Hi, dd if=/dev/da0 of=/root/temp.mbr bs=512 count=1 Then use objcopy to convert /root/temp.mbr into something that objdump can read, and it should disassemble it for you :-) You might want to look at photorec in ports too. Good luck. --HPS