CSTOOL(1)

πŸ“¦ version 5.0.6, in centos-stream 10, fedora 43, fedora 44

✨ NAME ✨

okay bestie, welcome to CSTOOL(1) β€” the manual page for Cstool! πŸ’– This is the manual page for Cstool for Capstone Disassembler Engine. No cap, that's literally the whole name. 🫢

πŸ’– DESCRIPTION πŸ’–

Cstool for Capstone Disassembler Engine β€” that's it, that's the description. ✨

Here's the syntax, and yes you need to memorize it (jk, just come back here):

Syntax: cstool [-d|-s|-u|-v] <arch+mode> <assembly-hexstring>
[start-address-in-hex-format]

πŸ¦‹ The following <arch+mode> options are supported: πŸ¦‹

okay so this list is LONG, but we're not skipping a single one because bestie deserves the full tea. β˜•οΈπŸ’…

  • x16 β€” 16-bit mode (X86)
  • x32 β€” 32-bit mode (X86)
  • x64 β€” 64-bit mode (X86)
  • x16att β€” 16-bit mode (X86), syntax AT&T
  • x32att β€” 32-bit mode (X86), syntax AT&T
  • x64att β€” 64-bit mode (X86), syntax AT&T
  • arm β€” arm
  • armbe β€” arm + big endian
  • thumb β€” thumb mode
  • thumbbe β€” thumb + big endian
  • cortexm β€” thumb + cortex-m extensions
  • armv8 β€” arm v8
  • thumbv8 β€” thumb v8
  • armv8be β€” arm v8 + big endian
  • thumbv8be β€” thumb v8 + big endian
  • arm64 β€” aarch64 mode
  • arm64be β€” aarch64 + big endian
  • mips β€” mips32 + little endian
  • mipsbe β€” mips32 + big endian
  • mips64 β€” mips64 + little endian
  • mips64be β€” mips64 + big endian
  • ppc32 β€” ppc32 + little endian
  • ppc32be β€” ppc32 + big endian
  • ppc32qpx β€” ppc32 + qpx + little endian
  • ppc32beqpx β€” ppc32 + qpx + big endian
  • ppc32ps β€” ppc32 + ps + little endian
  • ppc32beps β€” ppc32 + ps + big endian
  • ppc64 β€” ppc64 + little endian
  • ppc64be β€” ppc64 + big endian
  • ppc64qpx β€” ppc64 + qpx + little endian
  • ppc64beqpx β€” ppc64 + qpx + big endian
  • sparc β€” sparc
  • systemz β€” systemz (s390x)
  • xcore β€” xcore
  • m68k β€” m68k + big endian
  • m68k40 β€” m68k_040
  • tms320c64x β€” TMS320C64x
  • m6800 β€” M6800/2
  • m6801 β€” M6801/3
  • m6805 β€” M6805
  • m6808 β€” M68HC08
  • m6809 β€” M6809
  • m6811 β€” M68HC11
  • cpu12 β€” M68HC12/HCS12
  • hd6301 β€” HD6301/3
  • hd6309 β€” HD6309
  • hcs08 β€” HCS08
  • evm β€” Ethereum Virtual Machine
  • 6502 β€” MOS 6502
  • 65c02 β€” WDC 65c02
  • w65c02 β€” WDC w65c02
  • 65816 β€” WDC 65816 (long m/x)
  • wasm: β€” Web Assembly
  • bpf β€” Classic BPF
  • bpfbe β€” Classic BPF + big endian
  • ebpf β€” Extended BPF
  • ebpfbe β€” Extended BPF + big endian
  • riscv32 β€” riscv32
  • riscv64 β€” riscv64
  • sh β€” superh SH1
  • sh2 β€” superh SH2
  • sh2e β€” superh SH2E
  • sh2dsp β€” superh SH2-DSP
  • sh2a β€” superh SH2A
  • sh2afpu β€” superh SH2A-FPU
  • sh3 β€” superh SH3
  • sh3be β€” superh SH3 big endian
  • sh3e β€” superh SH3E
  • sh3ebe β€” superh SH3E big endian
  • sh3-dsp β€” superh SH3-DSP
  • sh3-dspbe β€” superh SH3-DSP big endian
  • sh4 β€” superh SH4
  • sh4be β€” superh SH4 big endian
  • sh4a β€” superh SH4A
  • sh4abe β€” superh SH4A big endian
  • sh4al-dsp β€” superh SH4AL-DSP
  • sh4al-dspbe β€” superh SH4AL-DSP big endian
  • tc110 β€” tricore V1.1
  • tc120 β€” tricore V1.2
  • tc130 β€” tricore V1.3
  • tc131 β€” tricore V1.3.1
  • tc160 β€” tricore V1.6
  • tc161 β€” tricore V1.6.1
  • tc162 β€” tricore V1.6.2
⚠️ bestie, the original manpage had the tricore options squished into a paragraph, but we're preserving every single one, no cap. 🫢

πŸ’… Extra options: πŸ’…

these are the extra lil flags, bestie, use them wisely ✨

  • -d β€” show detailed information of the instructions
  • -s β€” decode in SKIPDATA mode
  • -u β€” show immediates as unsigned
  • -v β€” show version & Capstone core build info

okay so that's literally the whole page. this manual page is from Cstool for Capstone Disassemb... β€” November 2023, and it's section CSTOOL(1). periodt. πŸ’–βœ¨πŸ¦‹
πŸ“¦ where this page comes from