Flags are conceptually similar to bookmarks. They associate a name with a given offset in a file. Flags can be grouped into 'flag spaces'. A flag space is a namespace for flags, grouping together flags of similar characteristics or type. Examples for flag spaces: sections, registers, symbols.

To create a flag type:

 [0x4A13B8C0]> f flag_name @ offset

You can remove a flag by appending the - character to command. Most commands accept - as argument-prefix as an indication to delete something.

 [0x4A13B8C0]> f- flag_name

To switch between or create new flagspaces use the fs command:

 # List flag spaces
 [0x4A13B8C0]> fs

 00   symbols
 01   imports
 02   sections
 03   strings
 04   regs
 05   maps

 [0x4A13B8C0]> fs symbols ; select only flags in symbols flagspace
 [0x4A13B8C0]> f          ; list only flags in symbols flagspace
 [0x4A13B8C0]> fs *       ; select all flagspaces
 [0x4A13B8C0]> f myflag   ; create a new flag called 'myflag'
 [0x4A13B8C0]> f- myflag  ; delete the flag called 'myflag'

You can rename flags with fr.

results matching ""

    No results matching ""