Command capstone-disassemble

If you have installed the capstone library and its Python bindings, you can use it to disassemble any memory in your debugging session. This plugin was created to offer an alternative to GDB's disassemble function which sometimes gets things mixed up.

You can use its alias cs-disassemble or just cs with the location to disassemble at. If not specified, it will use $pc.

gef➤ cs main

Disassemble more instructions

gef➤ cs length=20

Show instructions before $pc

gef➤ cs nb_prev=3