Remembering all register contents may be exhausting so I would like to find a solution to be able to see all register contents at a chosen instruction in the Listing. I know debuggers got this function when you set a breakpoint at the instruction you are interested in and move to it, you can see the contents of all registers but is there a way to integrate this functionality into Ghidra? Some kind of plugin?
1 Answer
Ghidra is a static disassembler / decompiler, i.e., it is not able to perform instructions.
It means that there is no possibility to see the registers' values, to follow their changes, or to log them.
You need a debugger to reach it, such as x64dbg or IDA Pro.
EDIT:
This answer is appropriate for Ghidra releases up to 9.x.y (I used 9.2.4 making this answer).
From release 10.0 Ghidra has a debugger (thanks blabb for his note).
-
isnt it possible to somehow integrate the debugger into ghidra via some plugin? Mar 25, 2022 at 14:28
-
1
-
@blabb, thanks for your comment, I didn't know about it, now I upgraded to the latest release.– MarianDMar 25, 2022 at 22:54
-
@REpro - for older releases of Ghidra (without a debugger) it is not possible. For now I how no experience with releases 10+, which have the debugger, I'm sorry.– MarianDMar 25, 2022 at 23:07
-