radare-doc 1:1.5.2-6 / usr / share / doc / radare-doc / html / Section3.1.html

This file is indexed.

/usr/share/doc/radare-doc/html/Section3.1.html is in radare-doc 1:1.5.2-6.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below. 

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN"
"http://www.w3.org/TR/html4/strict.dtd">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=US-ASCII">
<title>Seeking</title>
<link rel="previous" href="Chapter3.html">
<link rel="ToC" href="contents.html">
<link rel="next" href="Section3.1.1.html">
</head>
<body>
<h1><a name="seek"></a>3.1 Seeking</h1>
<p>
The command 's' is used to seek. It accepts a math expression as argument that can be composed by shift operations, basic math ones and memory access.
</p>
<p>
The 's'eek command supports '+-*!' characters as arguments to perform acts on the seek history.
</p>
<pre><code>[0x4A13B8C0]&gt; s?
Usage: &gt; s 0x128 ; absolute seek
       &gt; s +33   ; relative seek
       &gt; sn      ; seek to next opcode
       &gt; sb      ; seek to opcode branch
       &gt; sc      ; seek to call index (pd)
       &gt; sx N    ; seek to code xref N
       &gt; sX N    ; seek to data reference N
       &gt; sS N    ; seek to section N (fmi: 'S?')
       &gt; s-      ; undo seek
       &gt; s+      ; redo seek
       &gt; s*      ; show seek history
       &gt; .s*     ; flag them all
       &gt; s!      ; reset seek history
</code></pre>
<p>
The '&gt;' and '&lt;' commands are used to seek into the file using a block-aligned base.
</p>
<pre><code>&gt; &gt;&gt;&gt;         ; seek 3 aligned blocks forward
&gt; 3&gt;          ; 3 times block-seeking
&gt; s +30       ; seek 30 bytes forward from current seek
&gt; s 0x300     ; seek at 0x300
&gt; s [0x400]   ; seek at 4 byte dword at offset 0x400
&gt; s 10+0x80   ; seek at 0x80+10
</code></pre>
<p>
The 'sn' and 'sb' commands uses the code analysis module to determine information about the opcode in the current seek and seek to the next one (sn) or branch where it points (sb).
</p>
<pre><code>[0x4A13B8C0]&gt; :pd 1
0x4A13B8C0, mov eax, esp
[0x4A13B8C0]&gt; sn              ; seek next opcode
[0x4A13B8C2]&gt; :pd 1
0x4A13B8C2  call 0x4a13c000     
[0x4A13B8C2]&gt; sb              ; seek to branch address
[0x4A13C000]&gt; :pd 1
0x4A13C000, push ebp            
[0x4A13C000]&gt; 
</code></pre>
<p>
To 'query' the math expression you can evaluate them using the '?' command and giving the math operation as argument. And getting the result in hexa, decimal, octal and binary.
</p>
<pre><code>&gt; ? 0x100+200
0x1C8 ; 456d ; 710o ; 1100 1000  
</code></pre>

<ul>
<li><a href="Section3.1.1.html#undo-seek">3.1.1 Undo seek</a></li>
</ul>

<!-- version IDs:
$Id: radare.but 2009-04-25 pancake $
-->
</body>
</html>

APT Browse - Built by Thomas Orozco.