From: Peter M. <mac...@gm...> - 2015-01-23 15:43:19
|
Hello, Sorry for butting in. I've never used the Java wrapper so I may be off-base here, but is it possible you're getting nulls for the mnemonic and operands because you're not enabling detail? cs.setDetail(true); // maybe something like this. Thanks, Peter On 23 January 2015 at 15:37, Nguyen Anh Quynh <aq...@gm...> wrote: > > > On Fri, Jan 23, 2015 at 11:15 PM, GROETZ, MICHAEL A CTR USAF AFMC AFRL/RYWA > <mic...@us...> wrote: >> >> When I try to disassemble Test.exe, I get the following: >> >> 0x1000: pop r10 >> 0x1002: npop >> 0x1003 add byte ptr [rbx], a1 >> 0x1005: add byte ptr [rbx], a1 >> > > i can see that you are trying to disasm Test.exe, but dont expect to see its > code: you are actually reading from the beginning of Test.exe, where the PE > header is. the actual code is way behind that. and by default, Capstone > stops at the first ever illegal code, so you only see 4 assembly > instructions like above. > > thanks. > > > ------------------------------------------------------------------------------ > New Year. New Location. New Benefits. New Data Center in Ashburn, VA. > GigeNET is offering a free month of service with a new server in Ashburn. > Choose from 2 high performing configs, both with 100TB of bandwidth. > Higher redundancy.Lower latency.Increased capacity.Completely compliant. > http://p.sf.net/sfu/gigenet > _______________________________________________ > Capstone-users mailing list > Cap...@li... > https://lists.sourceforge.net/lists/listinfo/capstone-users > |