Flags are conceptually similar to bookmarks. They associate a name with a given offset in a file. Flags can be grouped into 'flag spaces'. A flag space is a namespace for flags, grouping together flags of similar characteristics or type. Examples for flag spaces: sections, registers, symbols.
To create a flag type:
[0x4A13B8C0]> f flag_name @ offset
You can remove a flag by appending the
- character to command. Most commands accept
- as argument-prefix as an indication to delete something.
To switch between or create new flagspaces use the
# List flag spaces [0x4A13B8C0]> fs 00 symbols 01 imports 02 sections 03 strings 04 regs 05 maps [0x4A13B8C0]> fs symbols ; select only flags in symbols flagspace [0x4A13B8C0]> f ; list only flags in symbols flagspace [0x4A13B8C0]> fs * ; select all flagspaces [0x4A13B8C0]> f myflag ; create a new flag called 'myflag' [0x4A13B8C0]> f-myflag ; delete the flag called 'myflag'
You can rename flags with