a
Analysis commands
Usage: a[abdefFghoprxstc] [...]
Tips
- Use
afn
to rename function. Usedr
in visual mode - To see cross references for strings, use
axt @@ str.*
. The@@
is a for i in x operator in radare2.
-
aa[?]
analyze all (fcns + bbs) (aa0 to avoid sub renaming) -
ab [hexpairs]
analyze bytesab
is not calleda8
ac [cycles]
analyze which op could be executed in [cycles]-
ad[?]
analyze data trampoline (wip) ad [from] [to]
analyze data pointers to (from-to)-
ae[?] [expr]
analyze opcode eval expression (see ao) -
af[?]
analyze Functions aF
same as above, but using anal.depth=1-
ag[?] [options]
output Graphviz code -
ah[?]
analysis hints (force opcode size, ...) ai [addr]
address information (show perms, stack, heap, ...)an [name] [@addr]
show/rename/create whatever flag/function is used at addr- 🚀
ao[?] [len]
analyze Opcodes (or emulate it) asciinema aO
Analyze N instructions in M bytesap
find prelude for current offset-
ar[?]
like 'dr' but for the esil vm. (registers) -
as[?] [num]
analyze syscall using dbg.reg av[?] [.]
show vtables-
ax[?]
manage refs/xrefs (see also afx?)
aa ab ac ad ae af aF ag ah ai an ao aO ap ar as av ax