f Add flag at current address
Usage: f [?] [flagname] # Manage offset-name flags
Tips
- > To show all the contents of a flag space, use fs [space_name]; f
flist flags (will only list flags from selected flagspaces)-
To create a new flag, use
f flag_name @ offset -
To rename / substitute the value of an offset, use a
.in the flag name. Examplef some.flag=@0x00123456`
-
f?flagnamecheck if flag exists or not, See ?? and ?!f. [*[*]]list local per-function flags (*) as r2 commandsf.blah=$$+12set local function label named 'blah'f*list flags in r commandsf name 12 @ 33set flag 'name' with length 12 at offset 33f name = 33alias for 'f name @ 33' or 'f name 1 33'f name 12 33 [cmt]same as above + optional commentf-.blah@fcn.foodelete local label from function at current seek (also f.-)f--delete all flags and flagspaces (deinit)f+name 12 @ 33like above but creates new one if doesnt existf-nameremove flag 'name'f-@addrremove flag at address expressionf. fnamelist all local labels for the given functionf= [glob]list range bars graphics with flag offsets and sizes-
Screenshot

-
fa [name] [alias]alias a flag to evaluate an expression fb [addr]set base address for new flags-
fb [addr] [flag*]move flags matching 'flag' to relative addr -
fC [name] [cmt]🚀 set comment for given flag asciinema -
fe-resets the enumerator counter fe [name]create flag name.#num# enumerated flag. See fe?-
🚀
fecan be used to iterate in a loop and create numbered flags. asciinema
-
ff ([glob])distance in bytes to reach the next flag (see sn/sp)ffsnothing documentedfi [size] | [from] [to]show flags in current block or rangefgbring visual mode to foreground-
fgappears to do exactly whatVdoes
-
fjlist flags in JSON formatfl (@[flag]) [size]show or set flag length (size)fla [glob]automatically compute the size of all flags matching globfm addrmove flag at current offset to new addressfnlist flags displaying the real name (demangled)foshow fortunes-
fr [old] [[new]]rename flag (if no new flag current seek one is used) -
fR[?] [f] [t] [m]relocate all flags matching f&~m 'f'rom, 't'o, 'm'ask -
fS[on]sort flags by offset or name ftflag tags twitterfV[*-] [nkey] [offset]dump/restore visual marks (mK/'K)fx[d]show hexdump (or disasm) of flag:flagsize-
fqlist flags in quiet mode -
fz[?][name]add named flag zone -name to delete. see fz?[name]
f+ f- f= fC fe fe- fg fj fl fla fm fn fo fr fR fs fS fV fx fq fz ff ffs ft