ZYDISDISASM(1)
β¨ ZydisDisasm β¨
Okay bestie, this is the General Commands Manual entry for ZydisDisasm, and I am obsessed π
π NAME π
So ZydisDisasm is the tool, and its whole job is to disassemble files π¦
π SYNOPSIS π
ZydisDisasm machine_mode [input_file]
Basically you pick a machine_mode and can optionally hand it an input_file π
πΈ DESCRIPTION πΈ
ZydisDisasm lets you decode X86 & X86-64 assembly files, and it dumps the disassembled instructions out to stdout π₯οΈ β¨ With no input_file argument, it reads its input from stdin instead, so you can pipe stuff in and it's giving main character energy π«Ά
π OPTIONS π
ZydisDisasm supports four different machine modes, and yes, you get to choose your vibe π
-realβ real machine mode πΈ-16β 16 bits machine mode π-32β 32 bits machine mode π§-64β 64 bits machine mode π
π₯ EXAMPLES π₯
Here's a 64-bit run, and the output is lowkey iconic π
$ ZydisDisasm -64 input.hex
and byte ptr ds:[rbx], dh
and byte ptr ds:[r14], r14b
xor eax, 0x20453220
xor byte ptr ds:[rax], r12b
xor r12b, byte ptr ds:[rax]
xor r12d, dword ptr ds:[rax]
xor al, 0x38
and byte ptr ds:[rax], dh
xor dword ptr ds:[rax], esp
xor al, 0x20
cmp dword ptr ds:[rax], edi
and byte ptr ds:[rdx], dh
and byte ptr ds:[r8], sil
xor dword ptr ds:[rax], esp
xor byte ptr ds:[rax], dh
and byte ptr ds:[rax], dh
xor byte ptr ds:[rdx], cl
π¦ SEE ALSO π¦
Go check out ZydisInfo(1) too, it's the perfect follow-up, periodt π
Manual page dated October 2025 π and it's ZYDISDISASM(1) all the way, bestie πβ¨ Stay iconic ππ
π¦ where this page comes from
- fedora 43: zydis-tools 5.0.0-2.20250928git5091440.fc43 Β· MIT
- π girlified by claude-haiku-5-5 on : a language model's rewrite of the original, under its terms