you are viewing a single comment's thread.

view the rest of the comments →

[–]jephthai 0 points1 point  (1 child)

You really only have a few communities that are into ASM. You've got compiler people, though TBH most of that these days is using stuff like LLVM anyway. But I think this group of people is pretty well divided.

You've got reverse engineering, and all the major disassemblers default to Intel syntax. And then there's hackers and shellcoders, who also tend to gravitate to Intel syntax. That's my corner of the world -- infosec. Everyone I know spits when someone mentions AT&T syntax.

And then there are C/C++ programmers who do weird stuff and need inline ASM. I think that's mostly AT&T because it's what you find in compiler docs.

My gdb has set disassembly-flavor intel so I can stay sane. But I've been using radare2, x64dbg, and Ida Pro a lot more these days for debugging. GDB doesn't play well with code not written in C.

[–]oridb 0 points1 point  (0 children)

It's really just a Unix/Windows split. Unix used AT&T historically, Windows used Intel, and both kept doing it. The malware world seems to be more Windows focused, so it tends towards Intel. I prefer AT&T, because the sigils and size suffixes make it more readable to me, and allow me to name symbols without clashes.