2012-02-01 01:22:43 +00:00
|
|
|
add comment ?i Comment;CC `?y`
|
|
|
|
list comments CC;?ik
|
|
|
|
change block size ?i block size;b `?y`
|
2012-01-31 01:45:17 +00:00
|
|
|
analyze all aa
|
|
|
|
analyze function af
|
|
|
|
analyze preludes ap
|
2012-01-31 02:42:27 +00:00
|
|
|
continue process execution dc;?i
|
|
|
|
disable colors e scr.color=0
|
|
|
|
enable colors e scr.color=1
|
2014-08-29 23:09:09 +00:00
|
|
|
randomize colors ecr
|
|
|
|
hide bytes in disassembly e asm.bytes=false
|
|
|
|
show bytes in disassembly e asm.bytes=true
|
2012-02-01 01:22:43 +00:00
|
|
|
list imports ii;?ik
|
|
|
|
list sections iS;?ik
|
|
|
|
list symbols is;?ik
|
2014-08-29 23:09:09 +00:00
|
|
|
list processes dp*;?ik
|
2012-02-01 01:22:43 +00:00
|
|
|
run command ?i cmd;`?y`;?ik
|
2012-01-31 02:42:27 +00:00
|
|
|
seek to entrypoint s entry0
|
|
|
|
seek to main s main
|
|
|
|
set breakpoint db;?i new breakpoint address;db `?y`
|
2013-06-27 17:15:59 +00:00
|
|
|
remove breakpoint ?i delete breakpoint at given address;db-`?y`
|
2012-02-01 01:22:43 +00:00
|
|
|
show backtrace dbt;?ik
|
2012-01-31 02:42:27 +00:00
|
|
|
show bytes in disassembly e asm.bytes=1
|
2012-02-01 01:22:43 +00:00
|
|
|
show debugger register values dr;?ik
|
|
|
|
show process memory maps dm;?ik
|
|
|
|
step instruction sr pc;pd 1;ds;?ik
|
2012-05-30 16:50:29 +00:00
|
|
|
step over call sr pc;pd 1;dso;?ik
|
2012-02-01 01:22:43 +00:00
|
|
|
write string ?i string;w `?y`
|
2012-01-31 02:42:27 +00:00
|
|
|
write hexadecimal data in current offset ?i hexpairs;wx `?y`
|
2012-01-31 02:34:23 +00:00
|
|
|
xor current block with hexpair key ?i hexpair key;wox `?y`
|
2012-02-01 01:22:43 +00:00
|
|
|
edit eval configuration Veq
|
|
|
|
calculator ?i enter math expression;? `?y`;?ik
|
2012-02-01 01:56:35 +00:00
|
|
|
disassemble 1024 bytes and pipe to less(1) b 1024;pd|less -R
|
2014-09-16 22:14:44 +00:00
|
|
|
rename function ?i New name;afn `?y`
|
2014-08-29 23:09:09 +00:00
|
|
|
set flag ?i Flag name;f `?y`
|
|
|
|
unset flag ?i Flag name to delete;f-`?y`
|