Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

disassembler(3) [osf1 man page]

disassembler(3) 					     Library Functions Manual						   disassembler(3)

NAME
disassembler - Disassemble a machine instruction and print the results SYNOPSIS
int disassembler ( unsigned long iadr, int regstyle, char *(*get_symname)(unsigned long address), unsigned long (*get_regvalue)(unsigned regnum), unsigned (*get_bytes)(void), void (*print_header) (unsigned long iadr, unsigned instruction) ); PARAMETERS
Specifies the instruction address to be disassembled. Specifies how registers are named in the disassembly; if the value is 0, compiler names are used; otherwise, hardware names are used. The next four arguments are function pointers, most of which give the caller some flexibility in the appearance of the disassembly. The only function that must be provided is get_bytes. All other functions are optional; pass a NULL for each that is not needed. Is called with no arguments and returns the next byte or bytes to disassemble. Is passed an address, which is the target of a jmp, jsr, or bsr instruction. If NULL is returned or if get_symname is NULL, the disassembler prints the address; otherwise, the string name is printed as returned from get_symname. If not NULL, is passed a register number and returns the current contents of the specified register. The dis- assembler prints this information along with the instruction disassembly. If not NULL, is passed the instruction address iadr and the cur- rent instruction to be disassembled, which is the return value from get_bytes. Print_header can use these parameters to print any desired information before the actual instruction disassembly is printed. DESCRIPTION
The disassembler disassembles and prints a machine instruction on stdout. The program must be linked with the object file access routine library libmld.a. RETURN VALUES
If get_bytes is NULL, the disassembler returns -1 and errno is set to EINVAL; otherwise, the number of bytes that were disassembled is returned. RELATED INFORMATION
ldfcn(4). delim off disassembler(3)

Check Out this Related Man Page

NDISASM(1)                                                    General Commands Manual                                                   NDISASM(1)

NAME
ndisasm - the Netwide Disassembler, an 80x86 binary file disassembler SYNOPSIS
ndisasm [ -o origin ] [ -s sync-point [...]] [ -a | -i ] [ -b bits ] [ -u ] [ -e hdrlen ] [ -k offset,length [...]] infile ndisasm -h ndisasm -r DESCRIPTION
The ndisasm command generates a disassembly listing of the binary file infile and directs it to stdout. OPTIONS -h Causes ndisasm to exit immediately, after giving a summary of its invocation options. -r Causes ndisasm to exit immediately, after displaying its version number. -o origin Specifies the notional load address for the file. This option causes ndisasm to get the addresses it lists down the left hand mar- gin, and the target addresses of PC-relative jumps and calls, right. -s sync-point Manually specifies a synchronisation address, such that ndisasm will not output any machine instruction which encompasses bytes on both sides of the address. Hence the instruction which starts at that address will be correctly disassembled. -e hdrlen Specifies a number of bytes to discard from the beginning of the file before starting disassembly. This does not count towards the calculation of the disassembly offset: the first disassembled instruction will be shown starting at the given load address. -k offset,length Specifies that length bytes, starting from disassembly offset offset, should be skipped over without generating any output. The skipped bytes still count towards the calculation of the disassembly offset. -a or -i Enables automatic (or intelligent) sync mode, in which ndisasm will attempt to guess where synchronisation should be performed, by means of examining the target addresses of the relative jumps and calls it disassembles. -b bits Specifies 16-, 32- or 64-bit mode. The default is 16-bit mode. -u Specifies 32-bit mode, more compactly than using `-b 32'. -p vendor Prefers instructions as defined by vendor in case of a conflict. Known vendor names include intel, amd, cyrix, and idt. The default is intel. RESTRICTIONS
ndisasm only disassembles binary files: it has no understanding of the header information present in object or executable files. If you want to disassemble an object file, you should probably be using objdump(1). Auto-sync mode won't necessarily cure all your synchronisation problems: a sync marker can only be placed automatically if a jump or call instruction is found to refer to it before ndisasm actually disassembles that part of the code. Also, if spurious jumps or calls result from disassembling non-machine-code data, sync markers may get placed in strange places. Feel free to turn auto-sync off and go back to doing it manually if necessary. SEE ALSO
objdump(1). The Netwide Assembler Project NDISASM(1)
Man Page