pd[?] [sz] [a] [b] disassemble N opcodes (pd) or N bytes (pD)

Usage: p[dD][ajbrfils] [sz] [arch] [bits] # Print Disassembly

• NOTE: len parameter can be negative

• NOTE: Pressing ENTER on empty command will repeat last pd command and also seek to end of disassembled range.

• pd N 🚀 disassemble N instructions asciinema

• pd -N 🚀 disassemble N instructions backward asciinema
• pd-- Context disassembly
• pD N 🚀 disassemble N bytes asciinema
• pda 🚀 disassemble all possible opcodes (byte per byte) asciinema
• pdb 🚀 disassemble basic block asciinema
• pdbj disassemble basic block json output
• pdc 🚀 pseudo disassembler output in C-like syntax asciinema

  • To change the view in panels node V!, do r2pm -i r2dec, and then set e cmd.pdc = pdd

• pdd core plugin for r2dec
• pdC show comments found in N instructions
• pdf 🚀 disassemble function asciinema
• pdfs[j] - disassemble function (summary+cjmp), json)
• pdi 🚀 like 'pi', with offset and bytes asciinema
• pdj disassemble to json
• pdk disassemble all methods of a class
• pdl 🚀 show instruction sizes asciinema
• pdp disassemble by following pointers to read ropchains
• pdr 🚀 recursive disassemble across the function graph asciinema
• pdR[j] 🚀 recursive disassemble block size bytes without analyzing functions asciinema

  • pdR command that doesnt requires previous analaysis and just follow non-conditional jumps

• pds[?] 🚀 disassemble summary (strings, calls, jumps, refs) (see pdsf and pdfs) asciinema

• pds Can be used as either inside function, or assigned an offset pds @offset[func_name]

• pdsb pds[bf] - sumarize N bytes or function (pdfs)
• pdsf 🚀 sumarize N bytes or function (pdfs) asciinema

  • Use pdsf~str to get all strings from a function

• pdt disassemble the debugger traces (see atd)