From: GROETZ, M. A C. U. A. AFRL/R. <mic...@us...> - 2015-01-23 17:45:38
|
I have that a shot earlier, no luck. Thanks for the suggestion though. -Mike -----Original Message----- From: Peter Mackay [mailto:mac...@gm...] Sent: Friday, January 23, 2015 10:43 AM To: Capstone disassembly framework (www.capstone-engine.org) Subject: Re: [Capstone-users] Capstone / NetBeans 8.0.2 Help Hello, Sorry for butting in. I've never used the Java wrapper so I may be off-base here, but is it possible you're getting nulls for the mnemonic and operands because you're not enabling detail? cs.setDetail(true); // maybe something like this. Thanks, Peter On 23 January 2015 at 15:37, Nguyen Anh Quynh <aq...@gm...> wrote: > > > On Fri, Jan 23, 2015 at 11:15 PM, GROETZ, MICHAEL A CTR USAF AFMC > AFRL/RYWA <mic...@us...> wrote: >> >> When I try to disassemble Test.exe, I get the following: >> >> 0x1000: pop r10 >> 0x1002: npop >> 0x1003 add byte ptr [rbx], a1 >> 0x1005: add byte ptr [rbx], a1 >> > > i can see that you are trying to disasm Test.exe, but dont expect to > see its > code: you are actually reading from the beginning of Test.exe, where > the PE header is. the actual code is way behind that. and by default, > Capstone stops at the first ever illegal code, so you only see 4 > assembly instructions like above. > > thanks. > > > ---------------------------------------------------------------------- > -------- New Year. New Location. New Benefits. New Data Center in > Ashburn, VA. > GigeNET is offering a free month of service with a new server in Ashburn. > Choose from 2 high performing configs, both with 100TB of bandwidth. > Higher redundancy.Lower latency.Increased capacity.Completely compliant. > http://p.sf.net/sfu/gigenet > _______________________________________________ > Capstone-users mailing list > Cap...@li... > https://lists.sourceforge.net/lists/listinfo/capstone-users > ------------------------------------------------------------------------------ New Year. New Location. New Benefits. New Data Center in Ashburn, VA. GigeNET is offering a free month of service with a new server in Ashburn. Choose from 2 high performing configs, both with 100TB of bandwidth. Higher redundancy.Lower latency.Increased capacity.Completely compliant. http://p.sf.net/sfu/gigenet _______________________________________________ Capstone-users mailing list Cap...@li... https://lists.sourceforge.net/lists/listinfo/capstone-users |