search

takeshixx / deen

Generic data DEcoding/ENcoding application built with PyQt5.
Apache License 2.0
46 stars 7 forks source link

Disassembling of X86 32 bit not working properly #38

Open murx- opened 5 years ago

murx- commented 5 years ago

Disassembling of x86 32 bit binaries seems to be not working. Deen seems to use always 64 bit for disassembling.

Here is the expected result in capstone:

In [1]: from capstone import *                                                  

In [2]: CODE = b"MZ"                                                            

In [3]: md = Cs(CS_ARCH_X86, CS_MODE_32)                                        

In [4]: for i in md.disasm(CODE, 0x1000): 
   ...:     print("0x%x:\t%s\t%s" %(i.address, i.mnemonic, i.op_str)) 
   ...:                                                                         
0x1000: dec ebp
0x1001: pop edx

In [5]:

However if i use deen and disassemble the string MZ as x86 it states the instruction as pop r10.