radare

[Riko Ho]

Everyone, Idwer,

I have radare question :

I played until this point :
c:>radare2 -e asm.bits=16 -e io.va=true i946gz.bin
  -- radare2 is WYSIWYF - what you see is what you fix
[f000:fff0]> S $s-0x10000 0xF000:0x0000 0x10000 0x10000 bootblk rwx
[f000:fff0]> e asm.segoff=true
[f000:fff0]> s 0xf000:0xffff0
[f000:ffff]>

How can I see the assembler code from there ? It's started from 
FFFF0....I'm sure the last byte instruction is jump to 0x00000

Cheers

[Rafael Machado]

Hi

You can use the pd command.
p = Print
d = disassemby

You can also add the number of instruction you whant to see. For example:

pd 10

Thanks
Rafael Machado

Em qua, 2 de nov de 2016 às 04:01, Riko Ho 
escreveu:
> Everyone, Idwer,
>
> I have radare question :
>
> I played until this point :
> c:>radare2 -e asm.bits=16 -e io.va=true i946gz.bin
>   -- radare2 is WYSIWYF - what you see is what you fix
> [f000:fff0]> S $s-0x10000 0xF000:0x0000 0x10000 0x10000 bootblk rwx
> [f000:fff0]> e asm.segoff=true
> [f000:fff0]> s 0xf000:0xffff0
> [f000:ffff]>
>
> How can I see the assembler code from there ? It's started from
> FFFF0....I'm sure the last byte instruction is jump to 0x00000
>
> Cheers

[Idwer Vollering]

First you'll need to clone radare2 from git. Then apply the patch from
https://github.com/radare/radare2/pull/6125 and build and install
radare. After opening the binary, enter 'Vp' then follow the [1]
shortcut on the far right. 's f000:0' will seek to the start of the
bootblock.

2016-11-02 6:59 GMT+01:00 Riko Ho :
> Everyone, Idwer,
>
> I have radare question :
>
> I played until this point :
> c:>radare2 -e asm.bits=16 -e io.va=true i946gz.bin
>  -- radare2 is WYSIWYF - what you see is what you fix
> [f000:fff0]> S $s-0x10000 0xF000:0x0000 0x10000 0x10000 bootblk rwx
> [f000:fff0]> e asm.segoff=true
> [f000:fff0]> s 0xf000:0xffff0
> [f000:ffff]>
>
> How can I see the assembler code from there ? It's started from FFFF0....I'm
> sure the last byte instruction is jump to 0x00000
>
> Cheers