GSP
Quick Navigator

Search Site

Unix VPS
A - Starter
B - Basic
C - Preferred
D - Commercial
MPS - Dedicated
Previous VPSs
* Sign Up! *

Support
Contact Us
Online Help
Handbooks
Domain Status
Man Pages

FAQ
Virtual Servers
Pricing
Billing
Technical

Network
Facilities
Connectivity
Topology Map

Miscellaneous
Server Agreement
Year 2038
Credits
 

USA Flag

 

 

Man Pages


Manual Reference Pages  -  PEDIS (1)

NAME

pedis - disassemble PE sections and functions

CONTENTS

Synopsis
Description
Options
Examples
Reporting Bugs
Copyright

SYNOPSIS

pedis [OPTIONS]... pefile

DESCRIPTION

pedis is a PE disassembler using libudis86 library. It can disassembly entire sections, functions or any position you want. It’s part of pev analysis toolkit.

pefile is a PE32/PE32+ executable or dynamic linked library file.

OPTIONS

--att set AT&T assembly syntax (default is Intel).

-e, --entrypoint
  disassembly at PE entrypoint (EP), until RET/LEAVE instruction appears.

-f, --format <text|csv|xml|html>
  change output format (default is text).

-m, --mode <16|32|64>
  set disassembly mode to 16, 32 or 64-bits (default: auto).

-i <number>
  number of instructions to disassemble.

-n <number>
  number of bytes (lenght) to disassemble.

-o, --offset <offset>
  start disassembly at specified offset, in decimal or hexadecimal format (prefixed with 0x).

-r, --rva <rva>
  start disassembly at specified RVA, in decimal or hexadecimal format (prefixed with 0x).

-s, --section <name>
  start disassembly at specified PE section.

-v, --version
  show program version and exit.

--help show help.

EXAMPLES

Disassemble at RVA 0x4c4df of putty.exe:
$ pedis -r 0x4c4df putty.exe

Disassembly the entrypoint of a 64-bit PE32+ wordpad.exe:
$ pedis -m 64 --entrypoint putty.exe

Disassembly in 16-bits mode, starting from offset 0x40, 32 bytes of code from game.exe:
$ pedis -m 16 -o 0x40 -n 32 game.exe

REPORTING BUGS

Please, check the latest development code and report at https://github.com/merces/pev/issues

COPYRIGHT

Copyright 2013 pev authors. Licensed GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>. This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law.
Search for    or go to Top of page |  Section 1 |  Main Index


PEDIS (1) -->

Powered by GSP Visit the GSP FreeBSD Man Page Interface.
Output converted with manServer 1.07.