anal
anal.a2f
Use the new WIP analysis algorithm (core/p/a2f), anal.depth ignored atm Default is falseanal.afterjmp
Continue analysis after jmp/ujmp Default is trueanal.arch
Select the architecture to use Default is x86anal.armthumb
aae computes arm/thumb changes (lot of false positives ahead) Default is falseanal.autoname
Automatically set a name for the functions, may result in some false positives Default is trueanal.bb.align
Possible space between basic blocks Default is 0x10anal.bb.maxsize
Maximum basic block size Default is 1024anal.brokenrefs
Follow function references as well if function analysis was failed Default is falseanal.calls
Make basic af analysis walk into calls Default is falseanal.cjmpref
Create references for conditional jumps Default is falseanal.cpp.abi
Select C++ ABI (Compiler) Default is itaniumanal.cpu
Specify the anal.cpu to use Default is x86anal.datarefs
Follow data references for code coverage Default is falseanal.depth
Max depth at code analysis Default is 16anal.endsize
Adjust function size at the end of the analysis (known to be buggy)anal.eobjmp
jmp is end of block mode (option) Default is falseanal.esil
Use the new ESIL code analysis Default is falseanal.fcnprefix
Prefix new function names with this Default is fcnanal.from
Lower limit on the address range for analysis Default is 0xffffffffffffffffanal.gp
Set the value of the GP register (MIPS) Default is 0anal.gp2
Set anal.gp before emulating each instruction (workaround) Default is falseanal.hasnext
Continue analysis after each function Default is false-
anal.hasnext
Forces to find a function, after the end of a function. anal.hpskip
Skipmov reg, reg
and `lea reg, [reg] at the beginning of functions Default is falseanal.in
Specify search boundaries for analysis Default is io.mapsanal.jmpabove
Jump above function pointer Default is trueanal.jmpref
Create references for unconditional jumps Default is trueanal.jmptbl
Analyze jump tables in switch statements Default is true-
anal.jmptbl
Helps in analyzing jump tables. Creates a new flags called switch and jmptbl -
anal.jmptbl
Set value to true before analysis to analyze jump tables. asciinema anal.limits
Restrict analysis to address range [anal.from Default is falseanal.maxreflines
Maximum number of reflines to be analyzed and displayed in asm.lines with pd Default is 0anal.noncode
Analyze data as code Default is falseanal.nopskip
Skip nops at the beginning of functions Default is trueanal.prelude
Specify an hexpair to find preludes in codeanal.ptrdepth
Maximum number of nested pointers to follow in analysis Default is 3anal.pushret
Analyze push+ret as jmp Default is falseanal.recont
End block after splitting a basic block instead of error Default is falseanal.refstr
Search string references in data references Default is falseanal.rnr
(Recursive no return checks (EXPERIMENTAL)) Default is falseanal.sleep
Sleep N usecs every so often during analysis. Avoid 100% CPU usage Default is 0anal.split
Split functions into basic blocks in analysis Default is trueanal.strings
Identify and register strings during analysis (aar only) Default is false-
anal.strings
Disables bin.strings option. Only gets strings that are referenced by code anal.timeout
Stop analyzing after a couple of seconds Default is 0anal.to
Upper limit on the address range for analysis Default is 0xffffffffffffffffanal.vars
Analyze local variables and arguments Default is trueanal.vinfun
Search values in functions (aav) (false by default to only find on non-code) Default is trueanal.vinfunrange
Search values outside function ranges (requires anal.vinfun=false) Default is false
anal.a2f anal.afterjmp anal.arch anal.armthumb anal.autoname anal.bb.align anal.bb.maxsize anal.bb.split anal.brokenrefs anal.calls anal.cjmpref anal.cpu anal.datarefs anal.depth anal.eobjmp anal.esil anal.fcnprefix anal.from anal.gp anal.hasnext anal.hpskip Skip mov reg, reg and anal.jmpabove anal.jmpref anal.jmptbl anal.limits anal.maxreflines anal.noncode anal.nopskip anal.prelude anal.ptrdepth anal.pushret anal.recont anal.refstr anal.sleep anal.split anal.strings anal.timeout anal.to anal.vars anal.vinfun anal.vinfunrange jump table