Functions

Listing Functions

Use the afl command to list the available functions. The afll command provides the list of available commands in verbose mode.

[0x0804923c]> afl
0x08049040    1      6 sym.imp.__libc_start_main
0x08049050    1      6 sym.imp.fflush
0x08049060    1      6 sym.imp.gets
0x08049070    1      6 sym.imp.puts
0x08049080    1      6 sym.imp.system
0x08049090    1     44 entry0
0x080490bd    1      4 fcn.080490bd
0x080490f0    4     40 sym.deregister_tm_clones
0x08049130    4     53 sym.register_tm_clones
0x08049170    3     34 sym.__do_global_dtors_aux
0x080491a0    1      6 sym.frame_dummy
0x080490e0    1      4 sym.__x86.get_pc_thunk.bx
0x08049258    1     24 sym._fini
0x080491a6    4     73 sym.win
0x080490d0    1      5 sym._dl_relocate_static_pie
0x0804923c    1     24 main
0x08049254    1      4 sym.__x86.get_pc_thunk.ax
0x080491ef    1     77 sym.read_in
0x08049000    3     36 sym._init

You can use the aflm command to list the commands based on the function they're called in.

[0x0804923c]> aflm
entry0:
    fcn.080490bd
    sym.imp.__libc_start_main

sym.__do_global_dtors_aux:
    sym.deregister_tm_clones

sym._fini:
    sym.__x86.get_pc_thunk.bx

sym.win:
    sym.__x86.get_pc_thunk.ax
    sym.imp.puts
    sym.imp.system

main:
    sym.__x86.get_pc_thunk.ax
    sym.read_in

sym.read_in:
    sym.__x86.get_pc_thunk.bx
    sym.imp.puts
    sym.imp.fflush
    sym.imp.gets

sym._init:
    sym.__x86.get_pc_thunk.bx

Calling Conventions

Virtual Tables

System Calls

Last updated