- open in debug mode:
r2 -d file - open in debug mode and analyze:
r2 -Ad file
General:
- analyze all and autoname functions:
aaa(not necessary with-Ad) - list functions:
afl - seek:
s [address|function name] - visual mode:
v - force quit:
q!
Printing:
- print disassembled instructions:
pd [count] - print disassembled function:
pdf - print hexadecimal quad-words:
pxq [@] [register] - math:
? rax-0x10
Debug:
- add breakpoint:
db [address|function name] - continue execution until next breakpoint:
dc - show registers values:
dr - show previous (old) register values:
dro - set register value:
dr [register]=[value]
- step:
s - step (over function calls):
S - interactive graph:
V - command mode:
: - add comment:
; - delete comment:
;- - return to normal mode:
q