NAME

       x86dis - disassemble a bytestream of Intel x86 instructions

SYNTAX

       x86dis [-a offset|--addr=offset]
              [-r offset len|--range=offset len]
              [-e offset|--entry=offset]
              [-s name|--syntax=name]
              [-d name|--desc=name]
              [-f file|--file=file]
              [-o file|--out=file]
              [-l file|--log=file]
              [-p num|--pagesize=num]
              [-h|-?|--help]
              [-v|--version]

DESCRIPTION

       A command-line interface to the libdisasm disassembler library.

OPTIONS

       At least one option from the list -a, -e, -r must be given.

       -f, --file=file
              Read input bytes from file instead of stdin

       -o, --out=file
              Write output to file instead of stdout

       -l, --log=file
              Log errors to file instead of stderr

       -p, --pagesize=num
              Set page size for buffering STDIN to num (default 512K)

       -s, --syntax=name
              Set output syntax to name, where name is one of intel
              (Intel syntax), att (AT&T syntax), raw (libdisasm syntax)

       -d, --desc=name
              Print a description of syntax name

       -a, --addr=offset
              Disassemble single instruction at offset

       -e, --entry=offset
              Disassemble forward from offset

       -r, --range=offset len
              Disassemble len bytes starting at offset

       All  offset  and  len  parameters  are  expected  to  follow  the  conventions  used in strtoul(3), where
       hexadecimal numbers have the prefix 0x, octal numbers have the prefix 0,  and  decimal  numbers  have  no
       prefix. A value of 0 for len indicates that that range extends to the end of the file.

EXAMPLES

       cat `which ls` | x86dis -s intel -e 0x00 -r 0x00 -1 -a 0xEEEE
       x86dis -e 0 -s intel < bootsect.img
       x86dis -d -s raw -f a.out -e `readelf -h a.out |
             grep  Entry |  awk '{ printf( "0x%%x",       strtonum($4) - 0x8048000 ) }` echo '55 89 e5 83 EC 08'
       | perl -ane 'foreach(@F){print pack("C",hex);}'| x86dis -e 0 -s att

NOTES

       x86dis performs no file format parsing, nor any verification that its input is in fact executable  binary
       code.  All  offsets  are  assumed  to  be from the start of the file, with no load addresses applied. The
       intent is to provide a bytestream disassembler rather than an object file disassembler.

       Descriptions of the various output formats can be obtained using the -d option.

AUTHORS

       mammon_ <mammon_@users.sourceforge.net>

SEE ALSO

       bastard(1), libdisasm(7), x86_disasm(3), x86_format_insn(3), x86_init(3)