Disassembly special "pop" instruction has a small problem

BeaEngine / beaengine

BeaEngine disasm project

515 stars 122 forks source link

Disassembly special "pop" instruction has a small problem #2

Closed dv0 closed 5 years ago

dv0 commented 9 years ago

For example：pop dword ptr [esp+4]. In this instruction execution is divided into three steps： temp <= [esp] esp <= esp + 4 [esp + 4] <= temp so,in fact the destination address is “[esp+8]”.

BeaEngine commented 9 years ago

ok ok, that's right. let's see how can we solve this specific case.

slovene commented 5 years ago

Has this been fixed yet?