asm

  • asm.anal Analyze code and refs while disassembling (see anal.strings) Default is false
  • asm.arch Set the arch to be used by asm Default is x86
  • asm.armimm Display # for immediates in ARM Default is 0
  • asm.asciidot Enable a char filter for string comments that passes through chars in the range 0x20-0x7e and turns the rest into dots (except some control chars) Default is false
  • asm.assembler Set the plugin name to use when assembling
  • asm.bbinfo Show basic block information Default is false
  • asm.bbline Show empty line after every basic block Default is false
  • asm.bb.middle Realign disassembly if a basic block starts in the middle of an instruction Default is true
  • asm.bits Word size in bits at assembler Default is 64
  • asm.bytes Display the bytes of each instruction Default is true
  • asm.bytespace Separate hexadecimal bytes with a whitespace Default is false
  • asm.calls Show callee function related info as comments in disasm Default is true
  • asm.capitalize Use camelcase at disassembly Default is false
  • asm.cmt.col Column to align comments Default is 71
  • asm.cmt.flgrefs Show comment flags associated to branch reference Default is true
  • asm.cmt.fold Fold comments, toggle with Vz Default is false
  • asm.cmt.off Show offset comment in disasm (true, false, nodup) Default is nodup
  • asm.cmt.patch Show patch comments in disasm Default is false
  • asm.cmt.refs Show flag and comments from refs in disasm Default is false
  • asm.cmt.right Show comments at right of disassembly if they fit in screen Default is true
    • print call hints when asm.cmt.right=0

  • asm.comments Show comments in disassembly view Default is true
  • asm.cpu Set the kind of asm.arch cpu Default is x86
    • Example: asm.cpu=cortex when architecture is ARM.

  • asm.cycles Show CPU-cycles taken by instruction at disassembly Default is false
  • asm.cyclespace Indent instructions depending on CPU-cycles Default is false
  • asm.decode Use code analysis as a disassembler Default is false
  • asm.decoff Show segmented address in prompt (x86-16) Default is false
  • asm.demangle Show demangled symbols in disasm Default is true
  • asm.describe Show opcode description Default is false
  • asm.dwarf Show dwarf comment at disassembly Default is false
    • asm.dwarf along with dir.source can be used for source code debugging

  • asm.dwarf.abspath Show absolute path in asm.dwarf Default is false
  • asm.dwarf.file Show filename of asm.dwarf in pd Default is true
  • asm.emu Run ESIL emulation analysis on disasm Default is false (cpu emulation)
  • asm.emu This can be used for instruction emulation where the register values are printed after each instruction executes (not debugger)

  • 🚀 Set e asm.emu =1 to emulate cpu instructions asciinema

  • asm.emu.pre Run ESIL emulation starting at the closest flag in pd Default is false

    • asm.emu.pre this will do the emulation of the instructions before the current offset to get better disasm hints

  • asm.emu.skip Skip metadata of given types in asm.emu Default is ds
  • asm.emu.stack Create a temporary fake stack when emulating in disasm (asm.emu) Default is false
  • asm.emu.str Show only strings if any in the asm.emu output Default is false
  • asm.emu.str Handy when analyzing objective c binaries

  • asm.emu.strflag Also show flag (if any) for asm.emu string Default is true
  • asm.emu.strinv Color-invert asm.emu strings Default is true
  • asm.emu.stroff Always show offset when printing asm.emu strings
  • asm.emu.write Allow asm.emu to modify memory (WARNING) Default is false
  • asm.esil Show ESIL instead of mnemonic Default is false
  • asm.family Show family name in disasm Default is false
  • asm.fcncalls Show functions calls Default is true
  • asm.fcnlines Show function boundary lines Default is true
  • asm.features Specify supported features by the target CPU
  • asm.filter Replace numeric values by flags (e.g. 0x4003e0 -> sym.imp.printf) Default is true
  • asm.flags Show flags Default is true
  • asm.flags.inbytes Display flags inside the bytes space
  • asm.flags.middle Realign disassembly if there is a flag in the middle of an instruction
  • asm.flags.offset Show offset in flags
  • asm.flags.real Show flags unfiltered realnames instead of names- asm.flgoff Show offset in flags Default is false
  • asm.functions Show functions in disassembly Default is true
  • asm.highlight Highlight current line
    • Use asm.highlight to highlight current seek. Example: e asm.highlight = $$ or e asm.highlight = rip. Change color of highlight using ec line_highlight

  • asm.hints Show hints for magic numbers in disasm Default is false
  • asm.immstr Show immediates values as strings Default is false
  • asm.imm.str treat shortened strings as false positives
  • asm.immtrim Remove all offsets and constants from disassembly Default is false
  • asm.indent Indent disassembly based on reflines depth Default is false
  • asm.indentspace How many spaces to indent the code Default is 2
  • asm.invhex Show invalid instructions as hexadecimal numbers Default is false
  • asm.jmphints Show jump hints [numbers] in disasm Default is true
  • asm.jmpsub Always substitute jump, call and branch targets in disassembly Default is false
    • asm.jmpsub Substitutes targets of jmp, call and branch ops in disassembly based on jump target in RAnalOp structure

  • asm.lbytes Align disasm bytes to left Default is true
  • asm.leahints Show LEA hints [numbers] in disasm Default is false
  • asm.lines Show ASCII-art lines at disassembly Default is true
  • asm.lines.bb Show flow lines at jumps Default is true
  • asm.lines.call Enable call lines Default is false
  • asm.lines.fcn Show function boundary lines Default is true
  • asm.lines.out Show out of block lines Default is true
  • asm.lines.ret Show separator lines after ret Default is false
  • asm.lines.right Show lines before opcode instead of offset Default is false
  • asm.lines.wide Put a space between lines Default is false
  • asm.lines.width Number of columns for program flow arrows Default is 7
  • asm.lines.jmp- asm.marks Show marks before the disassembly Default is true
  • asm.maxrefs Maximum number of xrefs to be displayed as list (use columns above) Default is 5
  • asm.meta Display the code/data/format conversions in disasm Default is true
  • asm.midcursor Cursor in visual disasm mode breaks the instruction Default is false
  • asm.middle Allow disassembling jumps in the middle of an instruction Default is false
  • asm.midflags Realign disassembly if there is a flag in the middle of an instruction Default is 2
  • asm.minicols Only show the instruction in the column disasm Default is false
  • asm.minvalsub Minimum value to substitute in instructions (asm.varsub) Default is 256
    • asm.minvalsub is used to reduce low immediate values
  • asm.nbytes Number of bytes for each opcode at disassembly Default is 6
  • asm.nodup Do not show dupped instructions (collapse disasm) Default is false
  • asm.noisy Show comments considered noisy but possibly useful Default is true
  • asm.offset Show offsets at disassembly Default is true
  • asm.os Select operating system (kernel) Default is linux
  • asm.parser Set the asm parser to use Default is x86.pseudo
  • asm.payloads Show payload bytes in disasm Default is false
  • asm.pcalign Only recognize as valid instructions aligned to this value Default is 0
  • asm.pseudo Enable pseudo syntax Default is false
  • asm.reloff Show relative offsets instead of absolute address in disasm Default is false
  • asm.reloff.flags Show relative offsets to flags (not only functions) Default is false
  • asm.relsub Substitute pc relative expressions in disasm Default is true
  • asm.section Show section name before offset Default is false
  • asm.section.col Columns width to show asm.section Default is 20
  • asm.section.sub Show offsets in disasm prefixed with section/map name Default is false
  • asm.section.perm Show section permissions in the disasm Default is false
  • asm.section.name Show section name in the disasm Default is true
  • asm.seggrn Segment granularity in bits (x86-16) Default is 4
  • asm.segoff Show segmented address in prompt (x86-16) Default is false
  • asm.shortcut Shortcut position (-1, 0, 1) Default is 1
  • asm.size Show size of opcodes in disassembly (pd) Default is false
  • asm.slow Perform slow analysis operations in disasm Default is true
  • asm.stackptr Show stack pointer at disassembly Default is false
  • asm.strenc Assumed string encoding for disasm Default is guess
  • asm.strip Removes garbage instructions from disassembly
  • asm.symbol Show symbol+delta instead of absolute offset Default is false
  • asm.symbol.col Columns width to show asm.section Default is 40
  • asm.syntax Select assembly syntax Default is intel
  • asm.tabs Use tabs in disassembly Default is 0
  • asm.tabsoff tabulate spaces after the offset Default is 0
  • asm.tabsonce Only tabulate the opcode, not the arguments Default is false
  • asm.tailsub Replace addresses with prefix .. syntax Default is false
  • 🚀asm.trace Show execution traces for each opcode Default is false asciinema
  • asm.tracespace Indent disassembly with trace.count information Default is false
  • asm.ucase Use uppercase syntax at disassembly Default is false
  • asm.usercomments Show user comments even if asm.comments is false Default is false
  • asm.vars Show local function variables in disassembly Default is true
  • asm.varsub Substitute variables in disassembly Default is true
  • asm.varsub_only Substitute the entire variable expression with the local variable name (e.g. [local10h] instead of [ebp+local10h]) Default is true
  • asm.varsum Show variables summary instead of full list in disasm Default is false
  • asm.varxs Show accesses of local variables Default is false
  • asm.xrefs Show xrefs in disassembly Default is true
  • asm.xrefs.fold Maximum number of xrefs to be displayed as list (use columns above) Default is 5
  • asm.xrefs.max Maximum number of xrefs to be displayed without folding Default is 20