Skip to content

cli-reference.md

Latest commit

 

History

History
172 lines (120 loc) · 4.36 KB

cli-reference.md

File metadata and controls

172 lines (120 loc) · 4.36 KB

CLI Reference

flutterdec info

Usage:

flutterdec info <INPUT> [--json]

Arguments:

  • <INPUT>: APK or libapp.so
  • --json: print JSON output

If adapter metadata is available, JSON output also includes app-package hints:

  • app_package_count_total
  • app_package_counts_top
  • adapter_kind
  • manifest_entry_present
  • adapter_snapshot_hash_match
  • compatibility_warnings

flutterdec decompile

Usage:

flutterdec decompile <INPUT> -o <OUT_DIR> [OPTIONS]

Required:

  • <INPUT>: APK or libapp.so
  • -o, --out <OUT_DIR>

General options:

  • --emit-asm
  • --emit-asm-opcodes (requires --emit-asm; prepends raw 32-bit opcode words in asm/*.s)
  • --emit-ghidra-script (writes ghidra_apply_symbols.py with function/label symbol application helpers)
  • --emit-ida-script (writes ida_apply_symbols.py with function/label symbol application helpers)
  • --emit-ir
  • --focus <FOCUS>
  • --target <TARGET> (decompile/disassemble a specific function by selector: id:<N>, va:0x<ADDR>, 0x<ADDR>, or <N>; ambiguous <N> matches fail and require explicit prefix)
  • --max-functions <N>
  • --function-scope <app-unknown|app|all> (default app-unknown)
  • --app-package <NAME> (repeatable; restricts to selected package:<NAME>/... libraries)
  • --adapter-backend <auto|internal|blutter> (default auto)
  • --require-snapshot-hash-match (fail if adapter-reported snapshot hash differs from loader hash)

Symbol ingestion:

  • --extra-symbol-elf <PATH> (repeatable)
  • --extra-symbol-map-targets <PATH> (repeatable)
  • --include-nearest-symbol-map

Quality-gate options:

  • --max-placeholder-ifs <N> (default 0)
  • --max-unresolved-cf <N> (default 0)
  • --max-indirect-call-ratio <R> (default 0.30)
  • --min-disassembly-ratio <R> (default 0.80)

Analysis-engine profile:

  • --analysis-profile <light|balanced> (default balanced)

Analysis-engine feature toggles:

  • --with-canonical-model-symbols
  • --no-canonical-model-symbols
  • --with-pool-value-hints
  • --no-pool-value-hints
  • --with-pool-semantic-hints
  • --no-pool-semantic-hints
  • --with-semantic-reporting
  • --no-semantic-reporting
  • --with-bootflow-category-seeds
  • --no-bootflow-category-seeds
  • --with-apk-startup-analysis
  • --no-apk-startup-analysis

Conflict rule:

  • each --with-* conflicts with its matching --no-*

Target selection behavior:

  • when --target is set, output is narrowed to the matched function
  • if scope filters exclude that function, target mode may override scope to keep the explicit match
  • selection diagnostics are written to report.json.target_selection

Adapter backend environment:

  • FLUTTERDEC_BLUTTER_CMD: full command to execute Blutter bridge backend
  • FLUTTERDEC_BLUTTER_PY: path to blutter.py (uses current Python interpreter)

flutterdec diff

Usage:

flutterdec diff --old <OLD_INPUT> --new <NEW_INPUT> -o <OUT_DIR> [OPTIONS]

Required:

  • --old <OLD_INPUT>: APK or libapp.so baseline
  • --new <NEW_INPUT>: APK or libapp.so candidate
  • -o, --out <OUT_DIR>

Options:

  • --function-scope <app-unknown|app|all> (default app-unknown)
  • --app-package <NAME> (repeatable; limit compare set to selected app packages)
  • --adapter-backend <auto|internal|blutter> (default auto)
  • --require-snapshot-hash-match (fail if either side has adapter/loader snapshot hash mismatch)
  • --json

Output:

  • writes diff_report.json with function-level deltas and package-level summaries (added_packages_top, removed_packages_top)

flutterdec engine-fingerprint

Usage:

flutterdec engine-fingerprint <INPUT> [--json] [-o <OUT_DIR>] [--max-markers <N>]

Arguments:

  • <INPUT>: ELF file (usually libflutter.so)
  • -o, --out <OUT_DIR>
  • --max-markers <N> (default 24)
  • --json

flutterdec map-symbols

Usage:

flutterdec map-symbols --stripped <PATH> --unstripped <PATH> -o <OUT_DIR> [OPTIONS]

Arguments:

  • --stripped <PATH>
  • --unstripped <PATH>
  • -o, --out <OUT_DIR>
  • --include-branches
  • --nearest-max-distance <N> (default 8192)
  • --require-exec-match
  • --register-local-cache (copy the generated target summary into symbols/ and register it in symbols/manifest.json for later auto-ingestion)
  • --json

flutterdec adapter

Install:

flutterdec adapter install --dart-hash <HASH>

List:

flutterdec adapter list