![]() |
|
#3
|
|||
|
|||
|
Hi visu
I assume that your program is running in debug mode.Run for a single step event then decrease values of EIP from CONTEXT(using GetThreadContext).This will be size. If your proram is not running(like disassembler) you should use the cpu reference for instruction structure because the indtruction lengths are various(1-14 byte for intel) sincerely yours
__________________
I should look out my posts,or JMI gets mad on me!
|
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Hex-rays PPC decompiler and bctr instruction | jonwil | General Discussion | 0 | 04-10-2021 20:17 |
| [idaref] IDA Pro Instruction Reference Plugin | sh3dow | Community Tools | 2 | 01-03-2015 19:03 |
| Strange Instruction CTS BE | thomasantony | General Discussion | 2 | 03-23-2005 04:41 |