search

MahdiSafsafi / UnivDisasm

x86 Disassembler and Analyzer
Mozilla Public License 2.0
97 stars 36 forks source link

Bug #14

Closed hksoobe closed 7 years ago

hksoobe commented 7 years ago

55 push ebp 8B EC mov ebp,esp 83 C4 F8 add esp,0xfffffffffffffff8 <-----error 53 push ebx 56 push esi

The previous version does not have this error

MahdiSafsafi commented 7 years ago

Hey hksoobe !

That's not a bug ! UnivDisasm syntax uses Imm64 type mostly in all situations ! 83 C4 F8 is equivalent to : add esp, -8 which equals to : add esp, 0xf8 when using Imm8 type. 0xfffffffffffffff8 is the hex representation of (-8) as Imm64. If you don't like it, you can easy build your own syntax based on UnivSyntax !

Regards, Mahdi.

hksoobe commented 7 years ago

thank you