search

gdabah / distorm

Powerful Disassembler Library For x86/AMD64
Other
1.26k stars 238 forks source link

Wrong decoding MOV (0xC7) instruction #98

Closed AlexanderBagel closed 8 years ago

AlexanderBagel commented 8 years ago

Sample: DB 0xC7, 0xC1, 0x08, 0x00, 0x00, 0x00

must be disassembled as: "MOV ECX, 8"

but output: C7 DB 0xC7 C1 08 00 ROR DWORD [EAX], 0x0 00 00 ADD [EAX], AL

AlexanderBagel commented 8 years ago

UPD: This behavior occurs when using library

gdabah commented 8 years ago

Yep, just validated, I broke this instruction. Working on a fix. Thanks!