asm

• asm.anal Analyze code and refs while disassembling (see anal.strings) Default is false
• asm.arch Set the arch to be used by asm Default is x86
• asm.armimm Display # for immediates in ARM Default is 0
• asm.asciidot Enable a char filter for string comments that passes through chars in the range 0x20-0x7e and turns the rest into dots (except some control chars) Default is false
• asm.assembler Set the plugin name to use when assembling
• asm.bbinfo Show basic block information Default is false
• asm.bbline Show empty line after every basic block Default is false
• asm.bb.middle Realign disassembly if a basic block starts in the middle of an instruction Default is true
• asm.bits Word size in bits at assembler Default is 64
• asm.bytes Display the bytes of each instruction Default is true
• asm.bytespace Separate hexadecimal bytes with a whitespace Default is false
• asm.calls Show callee function related info as comments in disasm Default is true
• asm.capitalize Use camelcase at disassembly Default is false
• asm.cmt.col Column to align comments Default is 71
• asm.cmt.flgrefs Show comment flags associated to branch reference Default is true
• asm.cmt.fold Fold comments, toggle with Vz Default is false
• asm.cmt.off Show offset comment in disasm (true, false, nodup) Default is nodup
• asm.cmt.patch Show patch comments in disasm Default is false
• asm.cmt.refs Show flag and comments from refs in disasm Default is false
• asm.cmt.right Show comments at right of disassembly if they fit in screen Default is true

  • print call hints when asm.cmt.right=0

• asm.comments Show comments in disassembly view Default is true
• asm.cpu Set the kind of asm.arch cpu Default is x86

  • Example: asm.cpu=cortex when architecture is ARM.

• asm.cycles Show CPU-cycles taken by instruction at disassembly Default is false
• asm.cyclespace Indent instructions depending on CPU-cycles Default is false
• asm.decode Use code analysis as a disassembler Default is false
• asm.decoff Show segmented address in prompt (x86-16) Default is false
• asm.demangle Show demangled symbols in disasm Default is true
• asm.describe Show opcode description Default is false
• asm.dwarf Show dwarf comment at disassembly Default is false

  • asm.dwarf along with dir.source can be used for source code debugging

• asm.dwarf.abspath Show absolute path in asm.dwarf Default is false
• asm.dwarf.file Show filename of asm.dwarf in pd Default is true
• asm.emu Run ESIL emulation analysis on disasm Default is false (cpu emulation)

• asm.emu This can be used for instruction emulation where the register values are printed after each instruction executes (not debugger)

• 🚀 Set e asm.emu =1 to emulate cpu instructions asciinema

• asm.emu.pre Run ESIL emulation starting at the closest flag in pd Default is false

  • asm.emu.pre this will do the emulation of the instructions before the current offset to get better disasm hints

• asm.emu.skip Skip metadata of given types in asm.emu Default is ds
• asm.emu.stack Create a temporary fake stack when emulating in disasm (asm.emu) Default is false
• asm.emu.str Show only strings if any in the asm.emu output Default is false

• asm.emu.str Handy when analyzing objective c binaries

• asm.emu.strflag Also show flag (if any) for asm.emu string Default is true
• asm.emu.strinv Color-invert asm.emu strings Default is true
• asm.emu.stroff Always show offset when printing asm.emu strings
• asm.emu.write Allow asm.emu to modify memory (WARNING) Default is false
• asm.esil Show ESIL instead of mnemonic Default is false
• asm.family Show family name in disasm Default is false
• asm.fcncalls Show functions calls Default is true
• asm.fcnlines Show function boundary lines Default is true
• asm.features Specify supported features by the target CPU
• asm.filter Replace numeric values by flags (e.g. 0x4003e0 -> sym.imp.printf) Default is true
• asm.flags Show flags Default is true
• asm.flags.inbytes Display flags inside the bytes space
• asm.flags.middle Realign disassembly if there is a flag in the middle of an instruction
• asm.flags.offset Show offset in flags
• asm.flags.real Show flags unfiltered realnames instead of names- asm.flgoff Show offset in flags Default is false
• asm.functions Show functions in disassembly Default is true
• asm.highlight Highlight current line

  • Use asm.highlight to highlight current seek. Example: e asm.highlight = $$ or e asm.highlight = rip. Change color of highlight using ec line_highlight

• asm.hints Show hints for magic numbers in disasm Default is false
• asm.immstr Show immediates values as strings Default is false
• asm.imm.str treat shortened strings as false positives
• asm.immtrim Remove all offsets and constants from disassembly Default is false
• asm.indent Indent disassembly based on reflines depth Default is false
• asm.indentspace How many spaces to indent the code Default is 2
• asm.invhex Show invalid instructions as hexadecimal numbers Default is false
• asm.jmphints Show jump hints [numbers] in disasm Default is true
• asm.jmpsub Always substitute jump, call and branch targets in disassembly Default is false

  • asm.jmpsub Substitutes targets of jmp, call and branch ops in disassembly based on jump target in RAnalOp structure

• asm.lbytes Align disasm bytes to left Default is true
• asm.leahints Show LEA hints [numbers] in disasm Default is false
• asm.lines Show ASCII-art lines at disassembly Default is true
• asm.lines.bb Show flow lines at jumps Default is true
• asm.lines.call Enable call lines Default is false
• asm.lines.fcn Show function boundary lines Default is true
• asm.lines.out Show out of block lines Default is true
• asm.lines.ret Show separator lines after ret Default is false
• asm.lines.right Show lines before opcode instead of offset Default is false
• asm.lines.wide Put a space between lines Default is false
• asm.lines.width Number of columns for program flow arrows Default is 7
• asm.lines.jmp- asm.marks Show marks before the disassembly Default is true
• asm.maxrefs Maximum number of xrefs to be displayed as list (use columns above) Default is 5
• asm.meta Display the code/data/format conversions in disasm Default is true
• asm.midcursor Cursor in visual disasm mode breaks the instruction Default is false
• asm.middle Allow disassembling jumps in the middle of an instruction Default is false
• asm.midflags Realign disassembly if there is a flag in the middle of an instruction Default is 2
• asm.minicols Only show the instruction in the column disasm Default is false
• asm.minvalsub Minimum value to substitute in instructions (asm.varsub) Default is 256
  • asm.minvalsub is used to reduce low immediate values
• asm.nbytes Number of bytes for each opcode at disassembly Default is 6
• asm.nodup Do not show dupped instructions (collapse disasm) Default is false
• asm.noisy Show comments considered noisy but possibly useful Default is true
• asm.offset Show offsets at disassembly Default is true
• asm.os Select operating system (kernel) Default is linux
• asm.parser Set the asm parser to use Default is x86.pseudo
• asm.payloads Show payload bytes in disasm Default is false
• asm.pcalign Only recognize as valid instructions aligned to this value Default is 0
• asm.pseudo Enable pseudo syntax Default is false
• asm.reloff Show relative offsets instead of absolute address in disasm Default is false
• asm.reloff.flags Show relative offsets to flags (not only functions) Default is false
• asm.relsub Substitute pc relative expressions in disasm Default is true
• asm.section Show section name before offset Default is false
• asm.section.col Columns width to show asm.section Default is 20
• asm.section.sub Show offsets in disasm prefixed with section/map name Default is false
• asm.section.perm Show section permissions in the disasm Default is false
• asm.section.name Show section name in the disasm Default is true
• asm.seggrn Segment granularity in bits (x86-16) Default is 4
• asm.segoff Show segmented address in prompt (x86-16) Default is false
• asm.shortcut Shortcut position (-1, 0, 1) Default is 1
• asm.size Show size of opcodes in disassembly (pd) Default is false
• asm.slow Perform slow analysis operations in disasm Default is true
• asm.stackptr Show stack pointer at disassembly Default is false
• asm.strenc Assumed string encoding for disasm Default is guess
• asm.strip Removes garbage instructions from disassembly
• asm.symbol Show symbol+delta instead of absolute offset Default is false
• asm.symbol.col Columns width to show asm.section Default is 40
• asm.syntax Select assembly syntax Default is intel
• asm.tabs Use tabs in disassembly Default is 0
• asm.tabsoff tabulate spaces after the offset Default is 0
• asm.tabsonce Only tabulate the opcode, not the arguments Default is false
• asm.tailsub Replace addresses with prefix .. syntax Default is false
• 🚀asm.trace Show execution traces for each opcode Default is false asciinema
• asm.tracespace Indent disassembly with trace.count information Default is false
• asm.ucase Use uppercase syntax at disassembly Default is false
• asm.usercomments Show user comments even if asm.comments is false Default is false
• asm.vars Show local function variables in disassembly Default is true
• asm.varsub Substitute variables in disassembly Default is true
• asm.varsub_only Substitute the entire variable expression with the local variable name (e.g. [local10h] instead of [ebp+local10h]) Default is true
• asm.varsum Show variables summary instead of full list in disasm Default is false
• asm.varxs Show accesses of local variables Default is false
• asm.xrefs Show xrefs in disassembly Default is true
• asm.xrefs.fold Maximum number of xrefs to be displayed as list (use columns above) Default is 5
• asm.xrefs.max Maximum number of xrefs to be displayed without folding Default is 20