

Information about the more formal aspects of reverse engineering (or, "why are there all of these papers about theoretical computer science and mathematics?") r/ReverseEngineering's Latest Hiring Thread Instead use the x/i command.A moderated community dedicated to all things reverse engineering. If you try using the disassemble command to disassemble code outside any known function, it will fail. We will show several examples of the disassemble command based on the following example:īreakpoint 1 at 0x8048400: file test.c, line 8.ĭump of assembler code for function main:ĭump of assembler code for function func:ĭump of assembler code from 0x80483ed to 0x80483f3:ĭump of assembler code from 0x80483f0 to 0x80483f4: If you want to disassemble memory outside any known function, use the x/i variant of the x command. Note that the disassemble command only works for the code inside functions. mov eax, DWORD PTR ) use the set disassembly-flavor command. To switch to the Intel disassembly style (e.g. mov 0xc(%ebp),%eax) that can be confusing for Windows users. The default disassembly style used by GDB is the AT&T style (e.g. r When this option is specified, the disassemble command will show the raw byte values of all disassembled instructions.

m When this option is specified, the disassemble command will show the source lines that correspond to the disassembled instructions. Length Specifies the amount of bytes to disassemble starting from the given address or function.


If this form is used, the command won't disassemble the entire function, but only the instructions between the starting and ending addresses. Start/End Specifies starting and ending addresses to disassemble. Note that when only one address is specified, this command will disassemble the entire function that includes the given address, including the instructions above it. Address Specifies the address inside a function to disassemble. If specified, the disassemble command will produce the disassembly output of the entire function. Parameters Function Specifies the function to disassemble. Disassemble disassemble disassemble disassemble, disassemble ,+ disassemble ,+ disassemble /m disassemble /r
