How it works...

We start by telling EDB to run the ch08-SalesFigure binary in step 1, which opens EDB and the binary in a paused state on the first executable instruction:

In step 2, we run the binary within EDB which, by default, adds a breakpoint at the start of the main function. This means that execution is stopped just before the first instruction under main is executed, which is the push rbp instruction, as shown in the following screenshot:

Next, in step 3, we add our own breakpoint to the first mov instruction at address 00400782

Get Binary Analysis Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.