Re: disassembling machine code

[Kees Cook <kees@outflux.net>]

On Thu, Mar 20, 2008 at 09:25:00AM -0700, PETER EASTHOPE wrote:
> There was no answer to this question in debian-user.
> Is this the appropriate list?
> 
> I have these 5 bytes of machine code to disassemble.
> 
>     b8 12 00 cd 10
> 
> I've looked at gdb and objdump.  Appears they 
> need a complete object file.  What tool can disassemble 
> this string?

I'm biased towards libdisasm's x86dis tool:

$ echo -e '\xb8\x12\x00\xcd\x10' | x86dis -r 0 5 -s att
00000000 B8 12 00                       mov     $0x0012, %ax
00000003 CD 10                          int     $0x10

-- 
Kees Cook                                            @outflux.net