Ghidra Help

• Welcome to Ghidra Help
  • Introduction
  • Getting Started
    • Starting Ghidra
    • Error Dialogs
    • Overview
    • Docking Windows
    • Ghidra Project Window
    • Ghidra Server
    • About Ghidra
  • Ghidra Projects
    • New Project
    • Open Project
    • Close Project
    • Reopen Project
    • Save Project
    • Archive Current Project
    • Restore Project
    • Project Repository
    • Project Access List
  • Programs
    • Import Program
    • Batch Import
    • Export Program
    • Open Program
    • Close Program
    • Navigate Programs
    • Rename Program
    • Save Program
    • Delete Program
    • About Program
    • Merge Programs
  • Tools
    • Configure Tool
    • Default Tools
    • Tool Options Dialog
    • Create Tool
    • Run Tool
    • Close Tool
    • Save Tool
    • Tool Connections
    • Edit Plugin Path
    • Import Tools
    • Import Default Tools
    • Export Tool
  • Ghidra Functionality
    • Assembler
    • Byte Viewer
      • Formats
      • Byte Editing
      • Configuration Options
    • Code Browser
      • Browser Field Formatter
      • Markers
      • Cursor Text Highlight
      • Configuration Options
      • Program Differences
    • Debugger
      • Getting Started
        • Launching a Target
      • Troubleshooting
      • Targets
        • Tool Actions
      • Debug Console
      • Copy Actions
      • Commands and Objects
      • Interpreters
      • Threads and Traces
      • Trace Management
      • Emulation
      • Registers
      • Memory
      • Dynamic Listing
      • Disassembly and Assembly
      • Stack
      • Breakpoints
        • In the Listings
      • Memory Regions
      • Time
      • Modules and Sections
        • Static Mappings
      • Watches
      • Editing Machine State
      • Memview Plot
      • P-code Stepper
      • Comparing Times
      • Platform Selection
      • Bots: Workflow Automation
    • Decompiler
      • Decompiler Concepts
        • P-code
        • The HighFunction
        • SLEIGH Specification Files
      • Program Annotations Affecting the Decompiler
        • Machine Instructions
        • Comments
        • Variable Annotations
        • Function Prototypes
        • Data Mutability
        • Constant Annotations
        • Register Values
      • Decompiler Options
        • General Options
        • Analysis Options
        • Display Options
        • Program Options
        • Specification Extensions
      • Decompiler Window
        • Display
        • Main Window
        • Snapshot Windows
        • Undefined Functions
        • Tool Bar
        • Mouse Actions
        • Pop-up Menu and Keyboard Actions
    • Eclipse Integration
    • Entropy Overview
      • Entropy Calculation
      • Data Encoding
      • Color Palette
      • Configuration Options
    • FileSystem Browser
    • Function Bit Patterns Explorer
      • Byte Sequences
      • Instruction Sequences
      • Function Start Alignment
      • Context Register Information
      • Pattern Clipboard
    • Function ID
      • Function ID Analyzer
        • Overview
        • Analysis Options
        • Scoring and Disambiguation
      • Function ID Plugin
        • Enabling the Plug-in
        • Plug-in Functionality
        • Preparing Libraries for a Function ID Database
        • False Positives
      • Function ID Debug Plugin
        • Enabling the Plug-in
        • Plug-in Functionality
    • Graphing
      • Function Call Graph
      • Function Graph
        • Primary View
        • Satellite View
        • Vertices
          • Vertex Grouping
        • Graph Actions
        • Popups
        • Zooming
        • Layouts
      • Graph Services
        • Default Graph Display
        • Exporting a Graph
      • Graphing the Program
    • Memory Map
      • Editing a Memory Block
      • Operations on Memory Blocks
        • Add
        • Move
        • Split
        • Expand Up
        • Expand Down
        • Merge
        • Delete
        • Set Image Base
    • Program Annotation
      • Auto Analysis
        • Forcing Analysis
        • Auto Analysis Options Panel
        • Implemented Auto Analyzers
          • Entry Point Analyzer
          • Subroutine Analyzer
          • Scalar Operand Analyzer
          • Data Reference Analyzer
          • MIPS address markup Analyzer
          • PowerPC Address Markup Analyzer
          • ARM Analyzer
          • Data Archive Analyzer
          • Demangler Analyzer
          • Decompiler Parameter ID Analyzer
          • Windows x86 Analyzer
          • Address Table Analyzer
          • Aggressive Instruction Finder
          • Condense Filler Bytes
      • Disassembly
        • Dynamic Disassembly
        • Static Disassembly
        • Restricted Disassembly
        • Processor Options
      • Data
        • Create Data
        • Data Types
        • Data Type Manager
          • Basic Concepts
          • Data Type Window
          • Archives
          • Categories
          • Data Types
          • Managing Archives
        • Structure Editor
        • Enum Editor
        • Save Image
        • Translate Strings
      • Labels
        • Label Source
        • Default Label
        • Label Properties
        • Add/Edit Labels
        • Set Label
        • Label Operations
          • Adding a Label
          • Renaming a Label
          • Removing a Label
          • Setting the Namespace
          • Setting an External Entry Point
          • Making a Label Primary
          • Setting a Label in an Operand
          • Show Label History
      • Comments
        • Add or Edit Comments
        • Delete Comments
        • Navigating in Codebrowser through Comments
        • Displaying Comment History
      • References
        • Forward References
          • Memory References
            • Offset References
            • Offcut References
          • Stack References
          • Register References
          • External References
        • Back References
      • Equates
        • Set Equate
        • Remove Equate
        • Apply Enum
        • View Equates
        • Convert
          • Signed Decimal
          • Unsigned Decimal
          • Octal
          • Signed Hex
          • Unsigned Hex
          • Char / Char Sequence
          • Binary
      • Functions
        • Create Function
        • Re-create Function
        • Thunk Functions
        • External Functions
        • Create Multiple Functions
        • Rename Function
        • Delete Function
        • Function Purge
        • Function Repeatable Comment
        • Stack Depth Change
        • Function Signature and Variables
        • Function Tags
      • Set Register Values
      • Bookmarks
      • Clear
      • View Properties
      • Set Fallthrough Address
      • Navigation
        • Go to Address Label
        • Go to Next/Previous
        • Margin and Navigation Markers
      • Selection
        • Selection by Flow
        • Selection Highlighting
      • Program Search
        • Memory
        • Text
        • Strings
        • Scalars
        • Instruction Patterns
        • Address Tables
        • Direct References
        • Query Results Window
      • DWARF External Debug Files
      • PDB
        • Load PDB File
        • PDB Parser (README_PDB)
    • Program Tree
      • Create view
      • Folders and Fragments
      • Control the View
      • Delete view
      • Cut/Copy/Paste and Drag and Drop
      • Rename view
      • Close view
      • Program Organizations
    • Program Validator
    • Relocation Table
    • Scripting
      • Listing Scripts by Category
      • Information in Script Table
      • Finding Scripts with Search Filter
      • Script Manager Actions
        • Run a Script
        • Edit a Script
        • Edit a Script with Eclipse
        • Save a Script
        • Save a Script As...
        • Undo the Actions of a Script
        • Redo the Actions of a Script
        • Select Font in Script Editor
        • Assign Key Bindings for Scripts
        • Delete a Script
        • Rename a Script
        • Create a New Script
        • Refresh Script List
        • Add and Remove Script Directories
      • Console
      • Ghidra Script Development
      • Ghidra Bundles
      • Python Interpreter
    • Symbol Table
      • Symbol References
      • Symbol Tree
    • Version Tracking
      • Workflow
        • Preconditions
        • Example Workflow
        • Workflow FAQ
        • Common Problems
      • Program Correlators
        • Data Match Correlator
        • Function Match Correlator
        • Implied Match Correlator
        • Legacy Import Match Correlator
        • Manual Match Correlator
        • Symbol Name Match Correlator
      • Session Wizard
      • Tool
        • Matches Table
        • Markup Items Table
        • Functions Table
        • Related Matches Table
        • Implied Matches Table
  • Support
    • Headless Analyzer
  • Undo/Redo
  • Glossary
  • What's New
  • Tips of the Day
  • Appendix
    • Block Models
    • Languages