1

Remembering all register contents may be exhausting so I would like to find a solution to be able to see all register contents at a chosen instruction in the Listing. I know debuggers got this function when you set a breakpoint at the instruction you are interested in and move to it, you can see the contents of all registers but is there a way to integrate this functionality into Ghidra? Some kind of plugin?

1 Answer 1

1

Ghidra is a static disassembler / decompiler, i.e., it is not able to perform instructions.

It means that there is no possibility to see the registers' values, to follow their changes, or to log them.

You need a debugger to reach it, such as x64dbg or IDA Pro.

EDIT:

This answer is appropriate for Ghidra releases up to 9.x.y (I used 9.2.4 making this answer).
From release 10.0 Ghidra has a debugger (thanks blabb for his note).

5
  • isnt it possible to somehow integrate the debugger into ghidra via some plugin?
    – REpro1337
    Mar 25, 2022 at 14:28
  • 1
    ghidra has a debugger for last 2 3 releases
    – blabb
    Mar 25, 2022 at 16:28
  • @blabb, thanks for your comment, I didn't know about it, now I upgraded to the latest release.
    – MarianD
    Mar 25, 2022 at 22:54
  • @REpro - for older releases of Ghidra (without a debugger) it is not possible. For now I how no experience with releases 10+, which have the debugger, I'm sorry.
    – MarianD
    Mar 25, 2022 at 23:07
  • @blabb how do I find it?
    – REpro1337
    Mar 28, 2022 at 8:13

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.