radare2
Static Analysis
Run the automatic analysis to identify functions and code, and then list the functions to see what we're working with:
r2 -qc 'aaa; afl' encrypt
Disassemble the main function
r2 -qc 's main; pdf' encrypt
Sometimes the automatic analysis don't create a function called main
. In that case, identify the memory where the main logic starts, and then print the disassembly from there:
r2 -qc 'aaa; s 0x00001289; pdf' encrypt
Last updated