This will define a macro called ‘qwe’ which runs sequentially first ‘pd 4’ then ‘ao’. Calling the macro using syntax is simple:

    1. [0x00404800]> (qwe; pd 4; ao)
    2. [0x00404800]> .(qwe)
    3. 0x00404800  mov eax, 0x61e627      ; "tab"
    4. 0x00404805  push rbp
    5. 0x00404806  sub rax, section_end.LOAD1
    6. 0x0040480c  mov rbp, rsp
    8. address: 0x404800
    9. opcode: mov eax, 0x61e627
    10. prefix: 0
    11. bytes: b827e66100
    12. ptr: 0x0061e627
    13. refptr: 0
    14. size: 5
    15. type: mov
    16. esil: 6415911,rax,=
    17. stack: null
    18. [0x00404800]>

    To list available macroses simply call (*:

    2. (qwe ; pd 4; ao)

    And if want to remove some macro, just add ‘-‘ before the name:

    1. [0x00404800]
    2. [0x004047d0]> (foo x y; pd $0; s +$1)
    3. [0x004047d0]> .(foo 5 6)
    4. ;-- entry0:
    5. 0x004047d0      xor ebp, ebp
    6. 0x004047d2      mov r9, rdx
    7. 0x004047d5      pop rsi
    8. 0x004047d6    mov rdx, rsp
    9. 0x004047d9    and rsp, 0xfffffffffffffff0
    10. [0x004047d6]>

    As you can see, the arguments are named by index, starting from 0: $0, $1, …

    radare2 also offers aliases which might help you save time by quickly executing your most used commands. They are under $?

    The general usage of the feature is: $alias=cmd

    1. [0x00404800]> $disas=pdf

    Apart from commands, you can also alias a text to be printed, when called.

    1. [0x00404800]> $my_alias=$test input
    2. [0x00404800]> $my_alias
    3. test input

    To undefine alias, use $alias=:

    2. $pmore
    3. [0x00404800]> $pmore=
    4. [0x00404800]> $

    A single $ in the above will list all defined aliases. It’s also possible check the aliased command of an alias:

    1. [0x00404800]> $pStart='s 0x0;$pmore'
    2. [0x00404800]> $pStart
    3. - offset -   0 1  2 3  4 5  6 7  8 9  A B  C D  E F  0123456789ABCDEF
    4. 0x00000000  7f45 4c46 0201 0100 0000 0000 0000 0000  .ELF............
    5. 0x00000010  0300 3e00 0100 0000 1014 0000 0000 0000  ..>.............
    6. 0x00000020  4000 0000 0000 0000 5031 0000 0000 0000  @.......P1......
    7. 0x00000030  0000 0000 4000 3800 0d00 4000 1e00 1d00  ....@.8...@.....
    8. 0x00000040  0600 0000 0400 0000 4000 0000 0000 0000  ........@.......
    9. 0x00000050  4000 0000 0000 0000 4000 0000 0000 0000  @.......@.......
    10. 0x00000060  d802 0000 0000 0000 d802 0000 0000 0000  ................
    11. 0x00000070  0800 0000 0000 0000 0300 0000 0400 0000  ................
    12. 0x00000080  1803 0000 0000 0000 1803 0000 0000 0000  ................
    13. 0x00000090  1803 0000 0000 0000 1c00 0000 0000 0000  ................
    14. 0x000000a0  1c00 0000 0000 0000 0100 0000 0000 0000  ................
    15. 0x000000b0  0100 0000 0400 0000 0000 0000 0000 0000  ................
    16. [0x00000000]>