Skip to content
Home
Ghidra 12.1 PUBLIC
Ghidra 12.0.4 PUBLIC
Initializing search
Home
Ghidra 12.1 PUBLIC
Ghidra 12.0.4 PUBLIC
Ghidra Help
Home
Ghidra 12.1 PUBLIC
Ghidra 12.1 PUBLIC
Introduction
Getting Started
Getting Started
Starting Ghidra
Error Dialogs
Overview
Docking Windows
Ghidra Project Window
Ghidra Server
About Ghidra
Ghidra Projects
Ghidra Projects
New Project
Open Project
Close Project
Reopen Project
Save Project
Archive Current Project
Restore Project
Project Repository
Project Access List
Programs
Programs
Import Program
Batch Import
Export Program
Open Program
Close Program
Navigate Programs
Rename Program
Save Program
Delete Program
About Program
Merge Programs
Tools
Tools
Configure Tool
Default Tools
Tool Options Dialog
Create Tool
Run Tool
Close Tool
Save Tool
Tool Connections
Edit Plugin Path
Import Tools
Import Default Tools
Export Tool
Ghidra Functionality
Ghidra Functionality
Assembler
BSim
BSim
BSim Database Configuration
BSim Database Configuration
Overview
Server Configuration
Creating a Database
Tailoring BSim Meta-data
Ingesting Executables
Ingesting Executables
Ingest Process
Tailoring Analysis
Analysis Effects on Feature Extraction
Maintenance
Migration
BSim Search
BSim Search
Enabling the BSim Search Plugin
Defining And Managing BSim Database Definitions
Overview Query
Overview Query Results
Similar Function Search
Similar Function Search Results
Authentication
Features and Weights
Features and Weights
Features of Software Functions
Weighting Software Features
Comparing Feature Vectors
BSim Feature Visualizer
Command-Line Utility Reference
Command-Line Utility Reference
BSim Control (bsim_ctl)
BSim Command (bsim)
Byte Viewer
Byte Viewer
Formats
Byte Editing
Configuration Options
Data Type Manager
Data Type Manager
Basic Concepts
Data Type Window
Archives
Categories
Data Types
Managing Archives
Structure Editor
Enum Editor
Code Browser
Code Browser
Browser Field Formatter
Markers
Cursor Text Highlight
Configuration Options
Program Differences
Debugger
Debugger
Getting Started
Getting Started
Launching a Target
Launchers
Launchers
drgn Integration
drgn Integration
Attach
Core Dump
Linux Kernel
GDB Integration
GDB Integration
gdbserver via SSH
Local
QEMU
Remote
rr
Via SSH
Via SSH (to Windows cmd shell)
Wine
Java Debugger Integration
Java Debugger Integration
Attach b PID
Attach by JDWP
Local
LLDB Integration
LLDB Integration
Android (native)
Local
macOS Kernel
Remote
Via SSH
Via SSH (to Windows cmd shell)
WinDbg (dbgeng.dll) Integration
WinDbg (dbgeng.dll) Integration
Attach
Extended Local
Local
Process Server
Remote
Remote via SSH
TTD (Time-Travel Debugging)
Windows Kernel
x64dbg integration via x64dbg_automate
x64dbg integration via x64dbg_automate
Attach
Local
Remote via SSH
Connection Manager
Troubleshooting
Debug Console
Copy Actions
Model
Threads
Trace Management
Emulation
Memory
Registers
Dynamic Listing
Disassembly and Assembly
Stack
Breakpoints
Breakpoints
In the Listings
Memory Regions
Time
Modules and Sections
Modules and Sections
Static Mappings
Static Synchronization
Watches
Variable Hovers
Control and Machine State
Memview Plot
Time Overview Sidebar
P-code Stepper
Comparing Times
Platform Selection
Decompiler
Decompiler
Decompiler Concepts
Decompiler Concepts
P-code
The HighFunction
SLEIGH Specification Files
Program Annotations Affecting the Decompiler
Program Annotations Affecting the Decompiler
Machine Instructions
Comments
Variable Annotations
Function Prototypes
Data Mutability
Constant Annotations
Register Values
Decompiler Options
Decompiler Options
General Options
Analysis Options
Display Options
Program Options
Specification Extensions
Decompiler Window
Decompiler Window
Display
Main Window
Snapshot Windows
Undefined Functions
Tool Bar
Mouse Actions
Pop-up Menu and Keyboard Actions
Decompiler Taint
Eclipse Integration
Entropy Overview
Entropy Overview
Entropy Calculation
Data Encoding
Color Palette
Configuration Options
FileSystem Browser
Function Bit Patterns Explorer
Function Bit Patterns Explorer
Byte Sequences
Instruction Sequences
Function Start Alignment
Context Register Information
Pattern Clipboard
Function ID
Function ID
Function ID Analyzer
Function ID Analyzer
Analysis Options
Scoring and Disambiguation
Function ID Plugin
Function ID Plugin
Enabling the Plug-in
Plug-in Functionality
Preparing Libraries for a Function ID Database
False Positives
Function ID Debug Plugin
Function ID Debug Plugin
Enabling the Plug-in
Plug-in Functionality
Graphing
Graphing
Graph Services
Graph Services
Default Graph Display
Exporting a Graph
Data Graph
Data Graph
Vertices
Vertices
Vertex Grouping
Graph Actions
Popups
Layout
Function Call Graph
Function Graph
Function Graph
Primary View
Satellite View
Zooming
Layouts
Program Graph
Visual Graphs
Memory Map
Memory Map
Editing a Memory Block
Operations on Memory Blocks
Operations on Memory Blocks
Add
Move
Split
Expand Up
Expand Down
Merge
Delete
Set Image Base
Program Annotation
Program Annotation
Address Expressions
Auto Analysis
Auto Analysis
Forcing Analysis
Auto Analysis Options Panel
Implemented Auto Analyzers
Implemented Auto Analyzers
Entry Point Analyzer
Subroutine Analyzer
Scalar Operand Analyzer
Data Reference Analyzer
MIPS address markup Analyzer
PowerPC Address Markup Analyzer
ARM Analyzer
Data Archive Analyzer
Demangler Analyzer
Decompiler Parameter ID Analyzer
Windows x86 Analyzer
Address Table Analyzer
Aggressive Instruction Finder
Condense Filler Bytes
Disassembly
Disassembly
Dynamic Disassembly
Static Disassembly
Restricted Disassembly
Processor Options
Data
Data
Create Data
Data Types
Translate Strings
Translate Strings
LibreTranslate
Charsets
Save Image
Labels
Labels
Label Source
Default Label
Label Properties
Add/Edit Labels
Set Label
Label Operations
Label Operations
Adding a Label
Renaming a Label
Removing a Label
Setting the Namespace
Setting an External Entry Point
Making a Label Primary
Setting a Label in an Operand
Show Label History
Comments
Comments
Add or Edit Comments
Delete Comments
Navigating in Codebrowser through Comments
Displaying Comment History
References
References
Forward References
Forward References
Memory References
Memory References
Offset References
Offcut References
Stack References
Register References
External References
Back References
Equates
Equates
Set Equate
Remove Equate
Apply Enum
View Equates
Convert
Convert
Signed Decimal
Unsigned Decimal
Octal
Signed Hex
Unsigned Hex
Char / Char Sequence
Binary
Functions
Functions
Create Function
Re-create Function
Thunk Functions
External Functions
Create Multiple Functions
Rename Function
Delete Function
Function Purge
Function Repeatable Comment
Stack Depth Change
Function Signature and Variables
Function Tags
Set Register Values
Bookmarks
Clear
View Properties
Set Fallthrough Address
Navigation
Navigation
Go to Address Label
Go to Next/Previous
Margin and Navigation Markers
Selection
Selection
Selection by Flow
Selection Highlighting
Program Search
Program Search
Memory
Text
Search and Replace
Strings
Decompiled Text
Scalars
Instruction Patterns
Address Tables
Direct References
Query Results Window
DWARF External Debug Files
PDB
PDB
Load PDB File
PDB Parser (README_PDB)
SARIF
Program Tree
Program Tree
Folders and Fragments
Control the View
Cut/Copy/Paste and Drag and Drop
Program Organizations
Create view
Delete view
Rename view
Close view
Program Validator
Relocation Table
Scripting
Scripting
Listing Scripts by Category
Information in Script Table
Finding Scripts with Search Filter
Script Manager Actions
Script Manager Actions
Run a Script
Edit a Script
Edit a Script with Eclipse
Save a Script
Save a Script As...
Undo the Actions of a Script
Redo the Actions of a Script
Select Font in Script Editor
Assign Key Bindings for Scripts
Delete a Script
Rename a Script
Create a New Script
Refresh Script List
Add and Remove Script Directories
Console
Ghidra Script Development
Ghidra Bundles
PyGhidra Interpreter
Symbol Table
Symbol Table
Symbol References
Symbol Tree
Temporary Symbol Table
Version Tracking
Version Tracking
Workflow
Workflow
Preconditions
Example Workflow
Workflow FAQ
Common Problems
Program Correlators
Program Correlators
BSim Program Correlator
Data Match Correlator
Function Match Correlator
Implied Match Correlator
Legacy Import Match Correlator
Manual Match Correlator
Symbol Name Match Correlator
Session Wizard
Tool
Tool
Matches Table
Markup Items Table
Functions Table
Related Matches Table
Implied Matches Table
Wildcard Assembler
Support
Support
GhidraGo
Headless Analyzer
Keyboard Navigation
Undo/Redo
Glossary
Tips of the Day
Theming
Theming
User's Guide
Developer's Guide
Architecture
Appendix
Appendix
Block Models
Languages
Ghidra 12.0.4 PUBLIC
Ghidra 12.0.4 PUBLIC
Introduction
Getting Started
Getting Started
Starting Ghidra
Error Dialogs
Overview
Docking Windows
Ghidra Project Window
Ghidra Server
About Ghidra
Ghidra Projects
Ghidra Projects
New Project
Open Project
Close Project
Reopen Project
Save Project
Archive Current Project
Restore Project
Project Repository
Project Access List
Programs
Programs
Import Program
Batch Import
Export Program
Open Program
Close Program
Navigate Programs
Rename Program
Save Program
Delete Program
About Program
Merge Programs
Tools
Tools
Configure Tool
Default Tools
Tool Options Dialog
Create Tool
Run Tool
Close Tool
Save Tool
Tool Connections
Edit Plugin Path
Import Tools
Import Default Tools
Export Tool
Ghidra Functionality
Ghidra Functionality
Assembler
BSim
BSim
BSim Database Configuration
BSim Database Configuration
Overview
Server Configuration
Creating a Database
Tailoring BSim Meta-data
Ingesting Executables
Ingesting Executables
Ingest Process
Tailoring Analysis
Analysis Effects on Feature Extraction
Maintenance
Migration
BSim Search
BSim Search
Enabling the BSim Search Plugin
Defining And Managing BSim Database Definitions
Overview Query
Overview Query Results
Similar Function Search
Similar Function Search Results
Authentication
Features and Weights
Features and Weights
Features of Software Functions
Weighting Software Features
Comparing Feature Vectors
BSim Feature Visualizer
Command-Line Utility Reference
Command-Line Utility Reference
BSim Control (bsim_ctl)
BSim Command (bsim)
Byte Viewer
Byte Viewer
Formats
Byte Editing
Configuration Options
Data Type Manager
Data Type Manager
Basic Concepts
Data Type Window
Archives
Categories
Data Types
Managing Archives
Structure Editor
Enum Editor
Code Browser
Code Browser
Browser Field Formatter
Markers
Cursor Text Highlight
Configuration Options
Program Differences
Debugger
Debugger
Getting Started
Getting Started
Launching a Target
Launchers
Launchers
drgn Integration
drgn Integration
Attach
Core Dump
Linux Kernel
GDB Integration
GDB Integration
gdbserver via SSH
Local
QEMU
Remote
rr
Via SSH
Wine
Java Debugger Integration
Java Debugger Integration
Attach b PID
Attach by JDWP
Local
LLDB Integration
LLDB Integration
Android (native)
Local
macOS Kernel
Remote
Via SSH
WinDbg (dbgeng.dll) Integration
WinDbg (dbgeng.dll) Integration
Attach
Extended Local
Local
Process Server
Remote
TTD (Time-Travel Debugging)
Windows Kernel
Connection Manager
Troubleshooting
Debug Console
Copy Actions
Model
Threads
Trace Management
Emulation
Memory
Registers
Dynamic Listing
Disassembly and Assembly
Stack
Breakpoints
Breakpoints
In the Listings
Memory Regions
Time
Modules and Sections
Modules and Sections
Static Mappings
Static Synchronization
Watches
Variable Hovers
Control and Machine State
Memview Plot
Time Overview Sidebar
P-code Stepper
Comparing Times
Platform Selection
Decompiler
Decompiler
Decompiler Concepts
Decompiler Concepts
P-code
The HighFunction
SLEIGH Specification Files
Program Annotations Affecting the Decompiler
Program Annotations Affecting the Decompiler
Machine Instructions
Comments
Variable Annotations
Function Prototypes
Data Mutability
Constant Annotations
Register Values
Decompiler Options
Decompiler Options
General Options
Analysis Options
Display Options
Program Options
Specification Extensions
Decompiler Window
Decompiler Window
Display
Main Window
Snapshot Windows
Undefined Functions
Tool Bar
Mouse Actions
Pop-up Menu and Keyboard Actions
Decompiler Taint
Eclipse Integration
Entropy Overview
Entropy Overview
Entropy Calculation
Data Encoding
Color Palette
Configuration Options
FileSystem Browser
Function Bit Patterns Explorer
Function Bit Patterns Explorer
Byte Sequences
Instruction Sequences
Function Start Alignment
Context Register Information
Pattern Clipboard
Function ID
Function ID
Function ID Analyzer
Function ID Analyzer
Analysis Options
Scoring and Disambiguation
Function ID Plugin
Function ID Plugin
Enabling the Plug-in
Plug-in Functionality
Preparing Libraries for a Function ID Database
False Positives
Function ID Debug Plugin
Function ID Debug Plugin
Enabling the Plug-in
Plug-in Functionality
Graphing
Graphing
Graph Services
Graph Services
Default Graph Display
Exporting a Graph
Data Graph
Data Graph
Layout
Function Call Graph
Function Graph
Function Graph
Primary View
Satellite View
Vertices
Vertices
Vertex Grouping
Graph Actions
Popups
Zooming
Layouts
Program Graph
Visual Graphs
Memory Map
Memory Map
Editing a Memory Block
Operations on Memory Blocks
Operations on Memory Blocks
Add
Move
Split
Expand Up
Expand Down
Merge
Delete
Set Image Base
Program Annotation
Program Annotation
Address Expressions
Auto Analysis
Auto Analysis
Forcing Analysis
Auto Analysis Options Panel
Implemented Auto Analyzers
Implemented Auto Analyzers
Entry Point Analyzer
Subroutine Analyzer
Scalar Operand Analyzer
Data Reference Analyzer
MIPS address markup Analyzer
PowerPC Address Markup Analyzer
ARM Analyzer
Data Archive Analyzer
Demangler Analyzer
Decompiler Parameter ID Analyzer
Windows x86 Analyzer
Address Table Analyzer
Aggressive Instruction Finder
Condense Filler Bytes
Disassembly
Disassembly
Dynamic Disassembly
Static Disassembly
Restricted Disassembly
Processor Options
Data
Data
Create Data
Data Types
Translate Strings
Translate Strings
LibreTranslate
Save Image
Labels
Labels
Label Source
Default Label
Label Properties
Add/Edit Labels
Set Label
Label Operations
Label Operations
Adding a Label
Renaming a Label
Removing a Label
Setting the Namespace
Setting an External Entry Point
Making a Label Primary
Setting a Label in an Operand
Show Label History
Comments
Comments
Add or Edit Comments
Delete Comments
Navigating in Codebrowser through Comments
Displaying Comment History
References
References
Forward References
Forward References
Memory References
Memory References
Offset References
Offcut References
Stack References
Register References
External References
Back References
Equates
Equates
Set Equate
Remove Equate
Apply Enum
View Equates
Convert
Convert
Signed Decimal
Unsigned Decimal
Octal
Signed Hex
Unsigned Hex
Char / Char Sequence
Binary
Functions
Functions
Create Function
Re-create Function
Thunk Functions
External Functions
Create Multiple Functions
Rename Function
Delete Function
Function Purge
Function Repeatable Comment
Stack Depth Change
Function Signature and Variables
Function Tags
Set Register Values
Bookmarks
Clear
View Properties
Set Fallthrough Address
Navigation
Navigation
Go to Address Label
Go to Next/Previous
Margin and Navigation Markers
Selection
Selection
Selection by Flow
Selection Highlighting
Program Search
Program Search
Memory
Text
Search and Replace
Strings
Decompiled Text
Scalars
Instruction Patterns
Address Tables
Direct References
Query Results Window
DWARF External Debug Files
PDB
PDB
Load PDB File
PDB Parser (README_PDB)
SARIF
Program Tree
Program Tree
Folders and Fragments
Control the View
Cut/Copy/Paste and Drag and Drop
Program Organizations
Create view
Delete view
Rename view
Close view
Program Validator
Relocation Table
Scripting
Scripting
Listing Scripts by Category
Information in Script Table
Finding Scripts with Search Filter
Script Manager Actions
Script Manager Actions
Run a Script
Edit a Script
Edit a Script with Eclipse
Save a Script
Save a Script As...
Undo the Actions of a Script
Redo the Actions of a Script
Select Font in Script Editor
Assign Key Bindings for Scripts
Delete a Script
Rename a Script
Create a New Script
Refresh Script List
Add and Remove Script Directories
Console
Ghidra Script Development
Ghidra Bundles
Jython Interpreter
PyGhidra Interpreter
Symbol Table
Symbol Table
Symbol References
Symbol Tree
Temporary Symbol Table
Version Tracking
Version Tracking
Workflow
Workflow
Preconditions
Example Workflow
Workflow FAQ
Common Problems
Program Correlators
Program Correlators
BSim Program Correlator
Data Match Correlator
Function Match Correlator
Implied Match Correlator
Legacy Import Match Correlator
Manual Match Correlator
Symbol Name Match Correlator
Session Wizard
Tool
Tool
Matches Table
Markup Items Table
Functions Table
Related Matches Table
Implied Matches Table
Wildcard Assembler
Support
Support
GhidraGo
Headless Analyzer
Keyboard Navigation
Undo/Redo
Glossary
Tips of the Day
Theming
Theming
User's Guide
Developer's Guide
Architecture
Appendix
Appendix
Block Models
Languages
Table of contents
Contents
ProgramGraphPlugin
¶
← Back to Home
Contents
¶
Program Graph
Back to top