X86DIS(1)

✨ x86dis ✨ — like, the whole manual page, bestie 💅

okay so real talk: this is the x86dis manual, and it lives in section 1 of the libdisasm manual set. it's a tiny command-line bestie that takes a big ol' pile of raw bytes and tells you what Intel x86 instructions are hiding in there. no cap. let's get into it 🦋

---

🌸 NAME 🌸

x86dis — disassemble a bytestream of Intel x86 instructions

literally that's the whole vibe: bytes go in, assembly comes out 💖

---

🎀 SYNTAX 🎀

x86dis [-a offset|--addr=offset]
       [-r offset len|--range=offset len]
       [-e offset|--entry=offset]
       [-s name|--syntax=name]
       [-d name|--desc=name]
       [-f file|--file=file]
       [-o file|--out=file]
       [-l file|--log=file]
       [-p num|--pagesize=num]
       [-h|-?|--help]
       [-v|--version]

---

✨ DESCRIPTION ✨

A command-line interface to the libdisasm disassembler library.

that's it, that's the whole description. it's giving "confident, brief, iconic" 👑

---

💅 OPTIONS 💅

Heads up bestie: at least one option from the list -a, -e, -r must be given. no instructions, no disassembly, no slay. sorry. 😭

• -f, --file=file — read the input bytes from file instead of stdin 🍓
• -o, --out=file — write output to file instead of stdout
• -l, --log=file — log errors to file instead of stderr
• -p, --pagesize=num — set the page size for buffering STDIN to num (default is 512K)
• -s, --syntax=name — set the output syntax to name, where name is one of intel (Intel syntax), att (AT&T syntax), or raw (libdisasm syntax) 🌈
• -d, --desc=name — print a description of syntax name
• -a, --addr=offset — disassemble a single instruction at offset ✨
• -e, --entry=offset — disassemble forward from offset
• -r, --range=offset len — disassemble len bytes starting at offset

---

okay so now the ✨numbers✨ part, because this is where people get got:

All offset and len parameters are expected to follow the conventions used in strtoul(3), where hexadecimal numbers have the prefix 0x, octal numbers have the prefix 0, and decimal numbers have no prefix. A value of 0 for len indicates that that range extends to the end of the file. 🔥

---

🦋 EXAMPLES 🦋

cat `which ls` | x86dis -s intel -e 0x00 -r 0x00 -1 -a 0xEEEE
x86dis -e 0 -s intel < bootsect.img
x86dis -d -s raw -f a.out -e `readelf -h a.out |
      grep Entry |  awk '{ printf( "0x%%x",       strtonum($4) -
0x8048000 ) }` echo '55 89 e5 83 EC 08' | perl -ane 'foreach(@F){print
pack("C",hex);}'| x86dis -e 0 -s att

copy these exactly, i am begging you 🙈

---

💀 NOTES 💀

x86dis performs no file format parsing, nor any verification that its input is in fact executable binary code. All offsets are assumed to be from the start of the file, with no load addresses applied. The intent is to provide a bytestream disassembler rather than an object file disassembler.

fr fr, it does not check anything. you hand it garbage bytes, it disassembles garbage bytes. main character energy, zero impulse control. 😭

Descriptions of the various output formats can be obtained using the -d option. 🎀

---

👑 AUTHORS 👑

mammon_ <mammon_@users.sourceforge.net>

---

🌟 SEE ALSO 🌟

bastard(1), libdisasm(7), x86_disasm(3), x86_format_insn(3), x86_init(3)

---

this page was brought to you by mammon_ (the author, iconic of them), version 0.21, and it belongs to the X86DIS(1) page of the libdisasm manual set. mwah, go disassemble something 💋✨🫶