3.5.7 Disassembly

The 'pd' command is the one used to disassemble code, it accepts a numeric value to specify how many opcodes are wanted to be disassembled. The 'pD' one acts in the same way, but using a number-of-bytes instead of counting instructions.

 d : disassembly N opcodes   count of opcodes
 D : asm.arch disassembler   bsize bytes

If you prefer a smarter disassembly with offset and opcode prefix the 'pd' command with ':'. This is used to temporally drop the verbosity while executing a radare command.

[0x4A13B8C0]> pd 1
      |    0x4A13B8C0,       eip: 89e0            mov eax, esp        

[0x4A13B8C0]> :pd 1
0x4A13B8C0, mov eax, esp        

The ',' near the offset determines if the address is aligned to 'cfg.addrmod' (this is 4 by default).