NAME

     xrefs — Find crossed assembly references

SYNOPSIS

     xrefs [-vqVhe] [-a arch] [-f from] [-t to] [-r range] [-s size] [-d offset] [-X offset]
           [file] [offset]

DESCRIPTION

     This program is part of the radare project.

     Find crossed references to a certain offset on x86, arm and powerpc binaries. It supports
     options for swaping endiannes.

     This program can't autodetect xrefs done by registers or data pointers. Only relative ones
     in jumps or calls.

     Xrefs autodetects the binary architecture parsing the ELF or PE headers found in the target
     file.

     -v          Verbose mode. Useful for debugging.

     -q          Quite mode. Useful for scripting. Shows the resulting offset number.

     -V          Show version information and exits.

     -e          Use big endian instead of little endian when searching the related offsets. It's
                 automatically defined by the '-a' flag when choosing the target architecture.

     -a arch     Selects the architecture to be used. Available options: 'x86', 'arm' and 'ppc'.

     -f from     Start looking for related offsets at a certain seek inside the file.

     -t to       Finish xrefs search at a certain offset of the target file.

     -r range    Cut range of valid xrefs. This flag can be used instead of the '-f' and '-t'
                 flags.

     -s size     Define the size of the offset variable. (4 bytes for x86 and 3 for arm and
                 powerpc). This value is automatically defined by the '-a' flag.

     -d offset   Sets a negative delta offset as padding. This is normally the size of the
                 jump/call opcode.

     -X offset   Print out debugging information at a certain offset. This flag is for debugging
                 purposes only. See '-v'

     -h          Show usage help message.

HACKING

     This program has been written with poor extensibility in mind. So it can probably be buggy
     on other architectures using them from the commandline. Feel free to send your parches, tips
     and ideas.

     This program has been tested on firmwares, bootloaders, ELF and PE binaries on x86, ppc and
     arm architectures.

     You can use the '-X' and '-v' flags for debugging the xrefs search engine.

SEE ALSO

     radiff(1), hasher(1), radare(1), radarerc(5), rfile(1), rabin(1), rsc(1), rasc(1), rasm(1),
     xc(1)

AUTHORS

     pancake <pancake@youterm.com>