a Analysis commands

Usage: a[abdefFghoprxstc] [...]

Tips

• Use afn to rename function. Use dr in visual mode
• To see cross references for strings, use axt @@ str.* . The @@ is a for i in x operator in radare2.

---

• aa[?] analyze all (fcns + bbs) (aa0 to avoid sub renaming)
• ab [hexpairs] analyze bytes
  • ab is not called a8
• ac [cycles] analyze which op could be executed in [cycles]
• ad[?] analyze data trampoline (wip)
• ad [from] [to] analyze data pointers to (from-to)
• ae[?] [expr] analyze opcode eval expression (see ao)
• af[?] analyze Functions
• aF same as above, but using anal.depth=1
• ag[?] [options] output Graphviz code
• ah[?] analysis hints (force opcode size, ...)
• ai [addr] address information (show perms, stack, heap, ...)
• an [name] [@addr] show/rename/create whatever flag/function is used at addr
• 🚀 ao[?] [len] analyze Opcodes (or emulate it) asciinema
• aO Analyze N instructions in M bytes
• ap find prelude for current offset
• ar[?] like 'dr' but for the esil vm. (registers)
• as[?] [num] analyze syscall using dbg.reg
• av[?] [.] show vtables
• ax[?] manage refs/xrefs (see also afx?)