Welcome to Ghidra Help

Ghidra provides context sensitive help on menu items, dialogs, buttons, and tool windows. To access the help, press F1 or Help on any menu item or dialog. If specific help is not available for an item, this page will be displayed.

---

What's New

• What's New in Ghidra
• Change History

---

Table of Contents

• Introduction
• Getting Started
  • Starting Ghidra
  • Error Dialogs
  • Overview
  • Docking Windows
  • Ghidra Project Window
  • Ghidra Server
  • About Ghidra
• Ghidra Projects
  • New Project
  • Open Project
  • Close Project
  • Reopen Project
  • Save Project
  • Archive Current Project
  • Restore Project
  • Project Repository
  • Project Access List
• Programs
  • Import Program
  • Batch Import
  • Export Program
  • Open Program
  • Close Program
  • Navigate Programs
  • Rename Program
  • Save Program
  • Delete Program
  • About Program
  • Merge Programs
• Tools
  • Configure Tool
  • Default Tools
  • Tool Options Dialog
  • Create Tool
  • Run Tool
  • Close Tool
  • Save Tool
  • Tool Connections
  • Edit Plugin Path
  • Import Tools
  • Import Default Tools
  • Export Tool
• Ghidra Functionality
  • Assembler
  • BSim
    • BSim Database Configuration
      • Overview
      • Server Configuration
      • Creating a Database
      • Tailoring BSim Meta-data
    • Ingesting Executables
      • Ingest Process
      • Tailoring Analysis
      • Analysis Effects on Feature Extraction
      • Maintenance
      • Migration
    • BSim Search
      • Enabling the BSim Search Plugin
      • Defining And Managing BSim Database Definitions
      • Overview Query
      • Overview Query Results
      • Similar Function Search
      • Similar Function Search Results
      • Authentication
    • Features and Weights
      • Features of Software Functions
      • Weighting Software Features
      • Comparing Feature Vectors
      • BSim Feature Visualizer
    • Command-Line Utility Reference
      • BSim Control (bsim_ctl)
      • BSim Command (bsim)
  • Byte Viewer
    • Formats
    • Byte Editing
    • Configuration Options
  • Data Type Manager
    • Basic Concepts
    • Data Type Window
    • Archives
    • Categories
    • Data Types
    • Managing Archives
    • Structure Editor
    • Enum Editor
  • Code Browser
    • Browser Field Formatter
    • Markers
    • Cursor Text Highlight
    • Configuration Options
    • Program Differences
  • Debugger
    • Getting Started
      • Launching a Target
    • Launchers
      • drgn Integration
        • Attach
        • Core Dump
        • Linux Kernel
      • GDB Integration
        • gdbserver via SSH
        • Local
        • QEMU
        • Remote
        • rr
        • Via SSH
        • Via SSH (to Windows cmd shell)
        • Wine
      • Java Debugger Integration
        • Attach b PID
        • Attach by JDWP
        • Local
      • LLDB Integration
        • Android (native)
        • Local
        • macOS Kernel
        • Remote
        • Via SSH
        • Via SSH (to Windows cmd shell)
      • WinDbg (dbgeng.dll) Integration
        • Attach
        • Extended Local
        • Local
        • Process Server
        • Remote
        • Remote via SSH
        • TTD (Time-Travel Debugging)
        • Windows Kernel
      • x64dbg integration via x64dbg_automate
        • Attach
        • Local
        • Remote via SSH
    • Connection Manager
    • Troubleshooting
    • Debug Console
    • Copy Actions
    • Model
    • Threads
    • Trace Management
    • Emulation
    • Memory
    • Registers
    • Dynamic Listing
    • Disassembly and Assembly
    • Stack
    • Breakpoints
      • In the Listings
    • Memory Regions
    • Time
    • Modules and Sections
      • Static Mappings
      • Static Synchronization
    • Watches
    • Variable Hovers
    • Control and Machine State
    • Memview Plot
    • Time Overview Sidebar
    • P-code Stepper
    • Comparing Times
    • Platform Selection
  • Decompiler
    • Decompiler Concepts
      • P-code
      • The HighFunction
      • SLEIGH Specification Files
    • Program Annotations Affecting the Decompiler
      • Machine Instructions
      • Comments
      • Variable Annotations
      • Function Prototypes
      • Data Mutability
      • Constant Annotations
      • Register Values
    • Decompiler Options
      • General Options
      • Analysis Options
      • Display Options
      • Program Options
      • Specification Extensions
    • Decompiler Window
      • Display
      • Main Window
      • Snapshot Windows
      • Undefined Functions
      • Tool Bar
      • Mouse Actions
      • Pop-up Menu and Keyboard Actions
    • Decompiler Taint
  • Eclipse Integration
  • Entropy Overview
    • Entropy Calculation
    • Data Encoding
    • Color Palette
    • Configuration Options
  • FileSystem Browser
  • Function Bit Patterns Explorer
    • Byte Sequences
    • Instruction Sequences
    • Function Start Alignment
    • Context Register Information
    • Pattern Clipboard
  • Function ID
    • Function ID Analyzer
      • Analysis Options
      • Scoring and Disambiguation
    • Function ID Plugin
      • Enabling the Plug-in
      • Plug-in Functionality
      • Preparing Libraries for a Function ID Database
      • False Positives
    • Function ID Debug Plugin
      • Enabling the Plug-in
      • Plug-in Functionality
  • Graphing
    • Graph Services
      • Default Graph Display
      • Exporting a Graph
    • Data Graph
      • Vertices
        • Vertex Grouping
      • Graph Actions
      • Popups
      • Layout
    • Function Call Graph
    • Function Graph
      • Primary View
      • Satellite View
      • Zooming
      • Layouts
    • Program Graph
    • Visual Graphs
  • Memory Map
    • Editing a Memory Block
    • Operations on Memory Blocks
      • Add
      • Move
      • Split
      • Expand Up
      • Expand Down
      • Merge
      • Delete
      • Set Image Base
  • Program Annotation
    • Address Expressions
    • Auto Analysis
      • Forcing Analysis
      • Auto Analysis Options Panel
      • Implemented Auto Analyzers
        • Entry Point Analyzer
        • Subroutine Analyzer
        • Scalar Operand Analyzer
        • Data Reference Analyzer
        • MIPS address markup Analyzer
        • PowerPC Address Markup Analyzer
        • ARM Analyzer
        • Data Archive Analyzer
        • Demangler Analyzer
        • Decompiler Parameter ID Analyzer
        • Windows x86 Analyzer
        • Address Table Analyzer
        • Aggressive Instruction Finder
        • Condense Filler Bytes
    • Disassembly
      • Dynamic Disassembly
      • Static Disassembly
      • Restricted Disassembly
      • Processor Options
    • Data
      • Create Data
      • Data Types
      • Translate Strings
        • LibreTranslate
      • Charsets
      • Save Image
    • Labels
      • Label Source
      • Default Label
      • Label Properties
      • Add/Edit Labels
      • Set Label
      • Label Operations
        • Adding a Label
        • Renaming a Label
        • Removing a Label
        • Setting the Namespace
        • Setting an External Entry Point
        • Making a Label Primary
        • Setting a Label in an Operand
        • Show Label History
    • Comments
      • Add or Edit Comments
      • Delete Comments
      • Navigating in Codebrowser through Comments
      • Displaying Comment History
    • References
      • Forward References
        • Memory References
          • Offset References
          • Offcut References
        • Stack References
        • Register References
        • External References
      • Back References
    • Equates
      • Set Equate
      • Remove Equate
      • Apply Enum
      • View Equates
      • Convert
        • Signed Decimal
        • Unsigned Decimal
        • Octal
        • Signed Hex
        • Unsigned Hex
        • Char / Char Sequence
        • Binary
    • Functions
      • Create Function
      • Re-create Function
      • Thunk Functions
      • External Functions
      • Create Multiple Functions
      • Rename Function
      • Delete Function
      • Function Purge
      • Function Repeatable Comment
      • Stack Depth Change
      • Function Signature and Variables
      • Function Tags
    • Set Register Values
    • Bookmarks
    • Clear
    • View Properties
    • Set Fallthrough Address
    • Navigation
      • Go to Address Label
      • Go to Next/Previous
      • Margin and Navigation Markers
    • Selection
      • Selection by Flow
      • Selection Highlighting
    • Program Search
      • Memory
      • Text
      • Search and Replace
      • Strings
      • Decompiled Text
      • Scalars
      • Instruction Patterns
      • Address Tables
      • Direct References
      • Query Results Window
    • DWARF External Debug Files
    • PDB
      • Load PDB File
      • PDB Parser (README_PDB)
    • SARIF
  • Program Tree
    • Folders and Fragments
    • Control the View
    • Cut/Copy/Paste and Drag and Drop
    • Program Organizations
    • Create view
    • Delete view
    • Rename view
    • Close view
  • Program Validator
  • Relocation Table
  • Scripting
    • Listing Scripts by Category
    • Information in Script Table
    • Finding Scripts with Search Filter
    • Script Manager Actions
      • Run a Script
      • Edit a Script
      • Edit a Script with Eclipse
      • Save a Script
      • Save a Script As...
      • Undo the Actions of a Script
      • Redo the Actions of a Script
      • Select Font in Script Editor
      • Assign Key Bindings for Scripts
      • Delete a Script
      • Rename a Script
      • Create a New Script
      • Refresh Script List
      • Add and Remove Script Directories
    • Console
    • Ghidra Script Development
    • Ghidra Bundles
    • PyGhidra Interpreter
  • Symbol Table
    • Symbol References
    • Symbol Tree
    • Temporary Symbol Table
  • Version Tracking
    • Workflow
      • Preconditions
      • Example Workflow
      • Workflow FAQ
      • Common Problems
    • Program Correlators
      • BSim Program Correlator
      • Data Match Correlator
      • Function Match Correlator
      • Implied Match Correlator
      • Legacy Import Match Correlator
      • Manual Match Correlator
      • Symbol Name Match Correlator
    • Session Wizard
    • Tool
      • Matches Table
      • Markup Items Table
      • Functions Table
      • Related Matches Table
      • Implied Matches Table
  • Wildcard Assembler
• Support
  • GhidraGo
  • Headless Analyzer
• Keyboard Navigation
• Undo/Redo
• Glossary
• Tips of the Day
• Theming
  • User's Guide
  • Developer's Guide
  • Architecture
• Appendix
  • Block Models
  • Languages

---

Generated from Ghidra HTML help documentation