/usr/share/doc/radare-doc/html/Section11.2.html is in radare-doc 1:1.5.2-6.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 | <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN"
"http://www.w3.org/TR/html4/strict.dtd">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=US-ASCII">
<title>Entrypoint</title>
<link rel="previous" href="Section11.1.html">
<link rel="ToC" href="contents.html">
<link rel="next" href="Section11.3.html">
</head>
<body>
<h1><a name="rabin-ep"></a>11.2 Entrypoint</h1>
<p>
The flag "-e" lets us know the program entrypoint.
</p>
<pre><code>$ rabin -e /bin/ls
0x08049a40
</code></pre>
<p>
Again, if we mix it with -v we get a better human readable output.
</p>
<pre><code>$ rabin -ev /bin/ls
[Entrypoint]
Memory address: 0x08049a40
</code></pre>
<p>
With -vv we will get more information, in this case the memory location as well as the file offset.
</p>
<pre><code>$ rabin -evv /bin/ls
[Entrypoint]
Memory address: 0x08049a40
File offset: 0x00001a40
</code></pre>
<p>
Combined with -r radare will create a new flag space called "symbols", and it will add a flag named "entrypoint" which points to the program's entrypoint. Thereupon, radare will seek it.
</p>
<pre><code>$ rabin -er /bin/ls
fs symbols
f entrypoint @ 0x08049a40
s entrypoint
</code></pre>
<!-- version IDs:
$Id: radare.but 2009-04-25 pancake $
-->
</body>
</html>
|