No replies to this topic

[dargueta]

I'm need help writing a disassembly program for executable programs. Can you answer a few of these following questions? Thanks.

1) How am I supposed to know if, for example, 66h is an operand size override to a regular instruction (i.e. 486 sort of deal, like push or pop or whatever) or if it's part of the opcode to a newer instruction like cvtpd2ps?

2) What would be the best way to deal with code mangling done by a compiler?

3) Anything else I should know about before I really get started?