-h
Causes ndisasm to exit immediately, after giving a summary of its invocation options.
-r|-v
Causes ndisasm to exit immediately, after displaying its version number.
-oorigin
Specifies the notional load address for the file. This option causes ndisasm to get the addresses it
lists down the left hand margin, and the target addresses of PC-relative jumps and calls, right.
-ssync-point
Manually specifies a synchronisation address, such that ndisasm will not output any machine
instruction which encompasses bytes on both sides of the address. Hence the instruction which starts
at that address will be correctly disassembled.
-ehdrlen
Specifies a number of bytes to discard from the beginning of the file before starting disassembly.
This does not count towards the calculation of the disassembly offset: the first disassembled
instruction will be shown starting at the given load address.
-koffset,length
Specifies that length bytes, starting from disassembly offset offset, should be skipped over without
generating any output. The skipped bytes still count towards the calculation of the disassembly
offset.
-a|-i
Enables automatic (or intelligent) sync mode, in which ndisasm will attempt to guess where
synchronisation should be performed, by means of examining the target addresses of the relative jumps
and calls it disassembles.
-bbits
Specifies 16-, 32- or 64-bit mode. The default is 16-bit mode.
-u
Specifies 32-bit mode, more compactly than using ‘-b 32’.
-pvendor
Prefers instructions as defined by vendor in case of a conflict. Known vendor names include intel,
amd, cyrix, and idt. The default is intel.