I seems HT sometimes does mistakes in disasssembly. On x64 ELF linux file it dumped opcode 48 8d 7c 24 08 as
dec eax lea edi, [esp+8]
but on x64 binary it obviously should be dumped as
lea rdi, [esp+8]
Does it understand 64-bit assembler, btw?
Bugs: #32
This should work. You have to switch to „ELF/image“ to get the x86_64 disassembler. The "disasm/x86“ view is meant for disassembling flat DOS binaries from an ancient time :)
Am 26.01.2014 um 07:16 schrieb Mikhail Veltishchev dichlofos@users.sf.net:
[bugs:#32] Invalid 64-bit machine disassembly Status: open Created: Sun Jan 26, 2014 06:16 AM UTC by Mikhail Veltishchev Last Updated: Sun Jan 26, 2014 06:16 AM UTC Owner: nobody I seems HT sometimes does mistakes in disasssembly. On x64 ELF linux file it dumped opcode 48 8d 7c 24 08 as dec eax lea edi, [esp+8] but on x64 binary it obviously should be dumped as lea rdi, [esp+8] Does it understand 64-bit assembler, btw? Sent from sourceforge.net because you indicated interest in https://sourceforge.net/p/hte/bugs/32/ To unsubscribe from further messages, please visit https://sourceforge.net/auth/subscriptions/
[bugs:#32] Invalid 64-bit machine disassembly
Status: open Created: Sun Jan 26, 2014 06:16 AM UTC by Mikhail Veltishchev Last Updated: Sun Jan 26, 2014 06:16 AM UTC Owner: nobody
dec eax lea edi, [esp+8] but on x64 binary it obviously should be dumped as
lea rdi, [esp+8] Does it understand 64-bit assembler, btw?
Sent from sourceforge.net because you indicated interest in https://sourceforge.net/p/hte/bugs/32/
To unsubscribe from further messages, please visit https://sourceforge.net/auth/subscriptions/
You're absolutely right! I used exactly that view: disasm/x86!
Maybe it worth adding word 'disasm' to 'ELF/image' title to make it obvious, or even hide 'disasm/x86' for ELF files?
Log in to post a comment.
This should work. You have to switch to „ELF/image“ to get the x86_64 disassembler. The "disasm/x86“ view is meant for disassembling flat DOS binaries from an ancient time :)
Am 26.01.2014 um 07:16 schrieb Mikhail Veltishchev dichlofos@users.sf.net:
Related
Bugs: #32
You're absolutely right! I used exactly that view: disasm/x86!
Maybe it worth adding word 'disasm' to 'ELF/image' title to make it obvious, or even hide 'disasm/x86' for ELF files?