ZYDISDISASM(1)

✨ ZydisDisasm ✨

Okay bestie, this is the General Commands Manual entry for ZydisDisasm, and I am obsessed πŸŽ€


πŸ’– NAME πŸ’–

So ZydisDisasm is the tool, and its whole job is to disassemble files πŸ¦‹


πŸ“œ SYNOPSIS πŸ“œ

ZydisDisasm machine_mode [input_file]

Basically you pick a machine_mode and can optionally hand it an input_file πŸ’…


🌸 DESCRIPTION 🌸

ZydisDisasm lets you decode X86 & X86-64 assembly files, and it dumps the disassembled instructions out to stdout πŸ–₯️ ✨ With no input_file argument, it reads its input from stdin instead, so you can pipe stuff in and it's giving main character energy 🫢


πŸŽ€ OPTIONS πŸŽ€

ZydisDisasm supports four different machine modes, and yes, you get to choose your vibe 🌈

  • -real β€” real machine mode 🌸
  • -16 β€” 16 bits machine mode πŸ“
  • -32 β€” 32 bits machine mode 🧚
  • -64 β€” 64 bits machine mode πŸ’œ

πŸ”₯ EXAMPLES πŸ”₯

Here's a 64-bit run, and the output is lowkey iconic 😭

$ ZydisDisasm -64 input.hex
and byte ptr ds:[rbx], dh
and byte ptr ds:[r14], r14b
xor eax, 0x20453220
xor byte ptr ds:[rax], r12b
xor r12b, byte ptr ds:[rax]
xor r12d, dword ptr ds:[rax]
xor al, 0x38
and byte ptr ds:[rax], dh
xor dword ptr ds:[rax], esp
xor al, 0x20
cmp dword ptr ds:[rax], edi
and byte ptr ds:[rdx], dh
and byte ptr ds:[r8], sil
xor dword ptr ds:[rax], esp
xor byte ptr ds:[rax], dh
and byte ptr ds:[rax], dh
xor byte ptr ds:[rdx], cl

πŸ¦‹ SEE ALSO πŸ¦‹

Go check out ZydisInfo(1) too, it's the perfect follow-up, periodt πŸ’…


Manual page dated October 2025 🌈 and it's ZYDISDISASM(1) all the way, bestie πŸ’–βœ¨ Stay iconic πŸ‘‘πŸ’…

πŸ“¦ where this page comes from