Ghidra Help
Welcome to Help
Introduction
Getting Started
Starting Ghidra
Error Dialogs
Overview
Docking Windows
Ghidra Project Window
Ghidra Server
About Ghidra
Ghidra Projects
New Project
Open Project
Close Project
Reopen Project
Save Project
Archive Current Project
Restore Project
Project Repository
Project Access List
Programs
Import Program
Batch Import
Export Program
Open Program
Close Program
Navigate Programs
Rename Program
Save Program
Delete Program
About Program
Merge Programs
Tools
Configure Tool
Default Tools
Tool Options Dialog
Create Tool
Run Tool
Close Tool
Save Tool
Tool Connections
Edit Plugin Path
Import Tools
Import Default Tools
Export Tool
Ghidra Functionality
Assembler
Byte Viewer
Formats
Byte Editing
Configuration Options
Data Type Manager
Basic Concepts
Data Type Window
Archives
Categories
Structure Editor
Data Types
Enum Editor
Managing Archives
Code Browser
Browser Field Formatter
Markers
Cursor Text Highlight
Configuration Options
Program Differences
Debugger
Getting Started
Launching a Target
Troubleshooting
Targets
Tool Actions
Debug Console
Copy Actions
Commands and Objects
Interpreters
Threads and Traces
Trace Management
Emulation
Registers
Memory
Dynamic Listing
Disassembly and Assembly
Stack
Breakpoints
In the Listings
Memory Regions
Time
Modules and Sections
Static Mappings
Watches
Variable Hovers
Control and Machine State
Memview Plot
P-code Stepper
Comparing Times
Platform Selection
Bots: Workflow Automation
Decompiler
Decompiler Concepts
P-code
The HighFunction
SLEIGH Specification Files
Program Annotations Affecting the Decompiler
Machine Instructions
Comments
Variable Annotations
Function Prototypes
Data Mutability
Constant Annotations
Register Values
Decompiler Options
General Options
Analysis Options
Display Options
Program Options
Specification Extensions
Decompiler Window
Display
Main Window
Snapshot Windows
Undefined Functions
Tool Bar
Mouse Actions
Pop-up Menu and Keyboard Actions
Eclipse Integration
Entropy Overview
Entropy Calculation
Data Encoding
Color Palette
Configuration Options
FileSystem Browser
Function Bit Patterns Explorer
Byte Sequences
Instruction Sequences
Function Start Alignment
Context Register Information
Pattern Clipboard
Function ID
Function ID Analyzer
Overview
Analysis Options
Scoring and Disambiguation
Function ID Plugin
Enabling the Plug-in
Plug-in Functionality
Preparing Libraries for a Function ID Database
False Positives
Function ID Debug Plugin
Enabling the Plug-in
Plug-in Functionality
Graphing
Function Call Graph
Function Graph
Primary View
Satellite View
Vertices
Vertex Grouping
Graph Actions
Popups
Zooming
Layouts
Graph Services
Default Graph Display
Exporting a Graph
Graphing the Program
Memory Map
Editing a Memory Block
Operations on Memory Blocks
Add
Move
Split
Expand Up
Expand Down
Merge
Delete
Set Image Base
Program Annotation
Auto Analysis
Forcing Analysis
Auto Analysis Options Panel
Implemented Auto Analyzers
Entry Point Analyzer
Subroutine Analyzer
Scalar Operand Analyzer
Data Reference Analyzer
MIPS address markup Analyzer
PowerPC Address Markup Analyzer
ARM Analyzer
Data Archive Analyzer
Demangler Analyzer
Decompiler Parameter ID Analyzer
Windows x86 Analyzer
Address Table Analyzer
Aggressive Instruction Finder
Condense Filler Bytes
Disassembly
Dynamic Disassembly
Static Disassembly
Restricted Disassembly
Processor Options
Data
Create Data
Data Types
Save Image
Translate Strings
Labels
Label Source
Default Label
Label Properties
Add/Edit Labels
Set Label
Label Operations
Adding a Label
Renaming a Label
Removing a Label
Setting the Namespace
Setting an External Entry Point
Making a Label Primary
Setting a Label in an Operand
Show Label History
Comments
Add or Edit Comments
Delete Comments
Navigating in Codebrowser through Comments
Displaying Comment History
References
Forward References
Memory References
Offset References
Offcut References
Stack References
Register References
External References
Back References
Equates
Set Equate
Remove Equate
Apply Enum
View Equates
Convert
Signed Decimal
Unsigned Decimal
Octal
Signed Hex
Unsigned Hex
Char / Char Sequence
Binary
Functions
Create Function
Re-create Function
Thunk Functions
External Functions
Create Multiple Functions
Rename Function
Delete Function
Function Purge
Function Repeatable Comment
Stack Depth Change
Function Signature and Variables
Function Tags
Set Register Values
Bookmarks
Clear
View Properties
Set Fallthrough Address
Navigation
Go to Address Label
Go to Next/Previous
Margin and Navigation Markers
Selection
Selection by Flow
Selection Highlighting
Program Search
Memory
Text
Strings
Scalars
Instruction Patterns
Address Tables
Direct References
Query Results Window
DWARF External Debug Files
PDB
Load PDB File
PDB Parser (README_PDB)
Program Tree
Create view
Folders and Fragments
Control the View
Delete view
Cut/Copy/Paste and Drag and Drop
Rename view
Close view
Program Organizations
Program Validator
Relocation Table
Scripting
Listing Scripts by Category
Information in Script Table
Finding Scripts with Search Filter
Script Manager Actions
Run a Script
Edit a Script
Edit a Script with Eclipse
Save a Script
Save a Script As...
Undo the Actions of a Script
Redo the Actions of a Script
Select Font in Script Editor
Assign Key Bindings for Scripts
Delete a Script
Rename a Script
Create a New Script
Refresh Script List
Add and Remove Script Directories
Console
Ghidra Script Development
Ghidra Bundles
Python Interpreter
Symbol Table
Symbol References
Symbol Tree
Version Tracking
Workflow
Preconditions
Example Workflow
Workflow FAQ
Common Problems
Program Correlators
Data Match Correlator
Function Match Correlator
Implied Match Correlator
Legacy Import Match Correlator
Manual Match Correlator
Symbol Name Match Correlator
Session Wizard
Tool
Matches Table
Markup Items Table
Functions Table
Related Matches Table
Implied Matches Table
Support
Headless Analyzer
Undo/Redo
Glossary
What's New
Tips of the Day
Theming
Overview
Editing Themes
Architecture
Developer's Guide
Appendix
Block Models
Languages