Radare 社区似乎普遍看不起简单地运行AAA或AAAA声称您需要学习细粒度分析和他们做什么。但是,似乎没有关于此的文档。
我在哪里可以了解到这些是做什么的?这为我提供了什么?
> a~analyze
| aa[?] analyze all (fcns + bbs) (aa0 to avoid sub renaming)
| a8 [hexpairs] analyze bytes
| ab[b] [addr] analyze block at given address
| abb [len] analyze N basic blocks in [len] (section.size by default)
| ac [cycles] analyze which op could be executed in [cycles]
| ad[?] analyze data trampoline (wip)
| ad [from] [to] analyze data pointers to (from-to)
| ae[?] [expr] analyze opcode eval expression (see ao)
| af[?] analyze Functions
| ao[?] [len] analyze Opcodes (or emulate it)
| as[?] [num] analyze syscall using dbg.reg
它只会变得更可怕aa,
aab - perform basic-block analysis ("Nucleus" algorithm)
aac - analyze function calls from one (selected or current function)
aaf - analyze all function calls
aar - analyze data references
aad - analyze pointers to pointers references
我只是想看到一些东西把这些结合在一起。有关于这些的教程吗?似乎有数百个选项提供了对分析的细粒度控制,但几乎无法解释它们所提供的内容,而不是上述词语。