Bari Wiki

• spusteni gdb

 $gdb -q ./a.out

• nastaveni breakpointu na fci main

 (gdb) break main

• spusteni programu :)

 (gdb) run

• vypsani info o registrech (kdyz program stoji na breakpoint)

 (gdb) info registers

• nastaveni assembleru na intel

 (gdb) set dis intel

 $objdump -D -M intel ./a.out

• parametry
  • -D - dissassemble all
  • -M - typ asembleru (default AT&T)

• syntax assembleru INTEL

  4004e4:       55                      push   rbp
  4004e5:       48 89 e5                mov    rbp,rsp
  4004e8:       48 83 ec 10             sub    rsp,0x10

• syntax assembleru AT&T

  4004e4:       55                      push   %rbp
  4004e5:       48 89 e5                mov    %rsp,%rbp
  4004e8:       48 83 ec 10             sub    $0x10,%rsp

• EIP - instruction pointer
• EAX, ECX, EDX, EBX - univerzalni registry - Accumulator, Counter, Data, base
• ESP, EBP, ESI, EDI - dalsi univerzalni registry
• EFLAGS - bitove identifikatory

• stejne registry jako x86, ale misto prefixu e pouziva prefix r
• navic registry r8-r15

(gdb) info registers
rax            0x7ffff7dd9ee8   140737351884520
rbx            0x0      0
rcx            0x0      0
rdx            0x7fffffffe7a8   140737488349096
rsi            0x7fffffffe798   140737488349080
rdi            0x1      1
rbp            0x7fffffffe6b0   0x7fffffffe6b0
rsp            0x7fffffffe6b0   0x7fffffffe6b0
r8             0x7ffff7dd8320   140737351877408
r9             0x7ffff7deb040   140737351954496
r10            0x0      0
r11            0x7ffff7a78db0   140737348341168
r12            0x400400 4195328
r13            0x7fffffffe790   140737488349072
r14            0x0      0
r15            0x0      0
rip            0x4004e8 0x4004e8 <main+4>
eflags         0x246    [ PF ZF IF ]
cs             0x33     51
ss             0x2b     43
ds             0x0      0
es             0x0      0
fs             0x0      0
gs             0x0      0