syscall.sh / x86 / read

read

read from a file descriptor

sys_read(unsigned int fd, char *buf, size_t count)
number3 (0x3)
abii386
entry pointsys_read
sinceLinux 3.3
man pageread(2)
sourceelixir.bootlin.com

Registers

registervalue
eax3, the syscall number
ebxunsigned int fd
ecxchar *buf
edxsize_t count
eaxthe return value

Then run int 0x80 to enter the kernel.

Same syscall on other architectures

Get this as JSON: https://api.syscall.sh/v2/syscalls/x86/read