How to print eax value with Radare2?How to print from pointers in radare2 in debug sessionHow to debug (like...
Could be quantum mechanics necessary to analyze some biology scenarios?
I am on the US no-fly list. What can I do in order to be allowed on flights which go through US airspace?
Proof by Induction - New to proofs
How do we edit a novel that's written by several people?
What was the population of late Pre-Islamic Arabia and the population of Arabic speakers before Islam?
Table enclosed in curly brackets
What's the purpose of these copper coils with resitors inside them in A Yamaha RX-V396RDS amplifier?
Where is this triangular-shaped space station from?
How to mitigate "bandwagon attacking" from players?
LTSpice: When running a linear AC simulation, how to view the voltage ratio between two voltages?
raspberry pi change directory (cd) command not working with USB drive
What to do when being responsible for data protection in your lab, yet advice is ignored?
Predict mars robot position
Activating a Alphanet Faucet Wallet Remotely (without tezos-client)
Find the number of ways to express 1050 as sum of consecutive integers
Can the Count of Monte Cristo's calculation of poison dosage be explained?
Wanted: 5.25 floppy to usb adapter
Obtaining a matrix of complex values from associations giving the real and imaginary parts of each element?
How can I improve my fireworks photography?
Do any poskim exempt 13-20-year-olds from Mussaf?
Word to be used for "standing with your toes pointing out"
Finding the number of integers that are a square and a cube at the same time
How should I state my MS degree in my CV when it was in practice a joint-program?
Why can I easily sing or whistle a tune I've just heard, but not as easily reproduce it on an instrument?
How to print eax value with Radare2?
How to print from pointers in radare2 in debug sessionHow to debug (like gdb) with radare2?How to print from pointers in radare2 in debug sessionDumping binary with radare2How to debug a hang application with radare2?Split view radare2 print heapHow To Print Addresses in Radare2How do you print fixed width strings with radare's print format `pf`?grep -E with Radare2Disassembly - Why the CMP instruction is multiplying by 2 the value being comparedHow to print the value of register with Radare 2
I am solving a crack me challenge but I am stuck. The challenge executes several jne tests. The first test is the simpliest but I don't arrive to print the eax value to know the content of cmp instruction. According to this block of code :
| ; DATA XREF from sym.main (0x804848e)
| 0x08048497 b88a55ea8b mov eax, 0x8bea558a
| 0x0804849c 45 inc ebp
| 0x0804849d f4 hlt
| 0x0804849e 83c004 add eax, 4
| 0x080484a1 8a00 mov al, byte [eax]
| 0x080484a3 38c2 cmp dl, al
|,=< 0x080484a5 753d jne 0x80484e4
How can I print the eax value to understand what are compared in the instruction ?
0x080484a1 8a00 mov al, byte [eax]
According to this question, I tried the 0x080484a1 but when I enter the command pxr 1 @ eax+0x4, nothing appears. If I enter the command pxr @ eax+0x4, this code appears :
0x080c288c 0x6f6c6165 ealo ascii
0x080c2890 0x00796768 hgy. ascii
The ascii printed is linked with the string compared ksuiealohgy.
debugging radare2 debuggers
asked 5 hours ago
AnonymeAnonyme
414
add a comment |
I am solving a crack me challenge but I am stuck. The challenge executes several jne tests. The first test is the simpliest but I don't arrive to print the eax value to know the content of cmp instruction. According to this block of code :
| ; DATA XREF from sym.main (0x804848e)
| 0x08048497 b88a55ea8b mov eax, 0x8bea558a
| 0x0804849c 45 inc ebp
| 0x0804849d f4 hlt
| 0x0804849e 83c004 add eax, 4
| 0x080484a1 8a00 mov al, byte [eax]
| 0x080484a3 38c2 cmp dl, al
|,=< 0x080484a5 753d jne 0x80484e4
How can I print the eax value to understand what are compared in the instruction ?
0x080484a1 8a00 mov al, byte [eax]
According to this question, I tried the 0x080484a1 but when I enter the command pxr 1 @ eax+0x4, nothing appears. If I enter the command pxr @ eax+0x4, this code appears :
0x080c288c 0x6f6c6165 ealo ascii
0x080c2890 0x00796768 hgy. ascii
The ascii printed is linked with the string compared ksuiealohgy.
debugging radare2 debuggers
asked 5 hours ago
AnonymeAnonyme
414
add a comment |
I am solving a crack me challenge but I am stuck. The challenge executes several jne tests. The first test is the simpliest but I don't arrive to print the eax value to know the content of cmp instruction. According to this block of code :
| ; DATA XREF from sym.main (0x804848e)
| 0x08048497 b88a55ea8b mov eax, 0x8bea558a
| 0x0804849c 45 inc ebp
| 0x0804849d f4 hlt
| 0x0804849e 83c004 add eax, 4
| 0x080484a1 8a00 mov al, byte [eax]
| 0x080484a3 38c2 cmp dl, al
|,=< 0x080484a5 753d jne 0x80484e4
How can I print the eax value to understand what are compared in the instruction ?
0x080484a1 8a00 mov al, byte [eax]
According to this question, I tried the 0x080484a1 but when I enter the command pxr 1 @ eax+0x4, nothing appears. If I enter the command pxr @ eax+0x4, this code appears :
0x080c288c 0x6f6c6165 ealo ascii
0x080c2890 0x00796768 hgy. ascii
The ascii printed is linked with the string compared ksuiealohgy.
debugging radare2 debuggers
asked 5 hours ago
AnonymeAnonyme
414
I am solving a crack me challenge but I am stuck. The challenge executes several jne tests. The first test is the simpliest but I don't arrive to print the eax value to know the content of cmp instruction. According to this block of code :
| ; DATA XREF from sym.main (0x804848e)
| 0x08048497 b88a55ea8b mov eax, 0x8bea558a
| 0x0804849c 45 inc ebp
| 0x0804849d f4 hlt
| 0x0804849e 83c004 add eax, 4
| 0x080484a1 8a00 mov al, byte [eax]
| 0x080484a3 38c2 cmp dl, al
|,=< 0x080484a5 753d jne 0x80484e4
How can I print the eax value to understand what are compared in the instruction ?
0x080484a1 8a00 mov al, byte [eax]
According to this question, I tried the 0x080484a1 but when I enter the command pxr 1 @ eax+0x4, nothing appears. If I enter the command pxr @ eax+0x4, this code appears :
0x080c288c 0x6f6c6165 ealo ascii
0x080c2890 0x00796768 hgy. ascii
The ascii printed is linked with the string compared ksuiealohgy.
debugging radare2 debuggers
debugging radare2 debuggers
asked 5 hours ago
AnonymeAnonyme
414
asked 5 hours ago
AnonymeAnonyme
414
asked 5 hours ago
AnonymeAnonyme
414
asked 5 hours ago
AnonymeAnonyme
414
asked 5 hours ago
AnonymeAnonyme
414
414
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
Not sure why you used pxr as you could get the output with px 1 @ eax+0x4. But another options would be that you could run this opcode and then read the register value of al to get that. But in order to do that you need to use debugger commands instead (of course you need to be in debugging mode):
[0x7f5953803e90]> dr?
Usage: dr Registers commands
| dr Show 'gpr' registers
<snip>
So to get the value of al execute during debugging session:
[0x7f5953803e90]> dr al
0x00000090
answered 4 hours ago
Paweł ŁukasikPaweł Łukasik
2,4461520
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "489"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
noCode: true, onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2freverseengineering.stackexchange.com%2fquestions%2f20762%2fhow-to-print-eax-value-with-radare2%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Not sure why you used pxr as you could get the output with px 1 @ eax+0x4. But another options would be that you could run this opcode and then read the register value of al to get that. But in order to do that you need to use debugger commands instead (of course you need to be in debugging mode):
[0x7f5953803e90]> dr?
Usage: dr Registers commands
| dr Show 'gpr' registers
<snip>
So to get the value of al execute during debugging session:
[0x7f5953803e90]> dr al
0x00000090
answered 4 hours ago
Paweł ŁukasikPaweł Łukasik
2,4461520
add a comment |
Not sure why you used pxr as you could get the output with px 1 @ eax+0x4. But another options would be that you could run this opcode and then read the register value of al to get that. But in order to do that you need to use debugger commands instead (of course you need to be in debugging mode):
[0x7f5953803e90]> dr?
Usage: dr Registers commands
| dr Show 'gpr' registers
<snip>
So to get the value of al execute during debugging session:
[0x7f5953803e90]> dr al
0x00000090
answered 4 hours ago
Paweł ŁukasikPaweł Łukasik
2,4461520
add a comment |
Not sure why you used pxr as you could get the output with px 1 @ eax+0x4. But another options would be that you could run this opcode and then read the register value of al to get that. But in order to do that you need to use debugger commands instead (of course you need to be in debugging mode):
[0x7f5953803e90]> dr?
Usage: dr Registers commands
| dr Show 'gpr' registers
<snip>
So to get the value of al execute during debugging session:
[0x7f5953803e90]> dr al
0x00000090
answered 4 hours ago
Paweł ŁukasikPaweł Łukasik
2,4461520
Not sure why you used pxr as you could get the output with px 1 @ eax+0x4. But another options would be that you could run this opcode and then read the register value of al to get that. But in order to do that you need to use debugger commands instead (of course you need to be in debugging mode):
[0x7f5953803e90]> dr?
Usage: dr Registers commands
| dr Show 'gpr' registers
<snip>
So to get the value of al execute during debugging session:
[0x7f5953803e90]> dr al
0x00000090
answered 4 hours ago
Paweł ŁukasikPaweł Łukasik
2,4461520
answered 4 hours ago
Paweł ŁukasikPaweł Łukasik
2,4461520
answered 4 hours ago
Paweł ŁukasikPaweł Łukasik
2,4461520
answered 4 hours ago
Paweł ŁukasikPaweł Łukasik
2,4461520
2,4461520
add a comment |
add a comment |
Thanks for contributing an answer to Reverse Engineering Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2freverseengineering.stackexchange.com%2fquestions%2f20762%2fhow-to-print-eax-value-with-radare2%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
