disassembler

Feature type

Plug-ins

Describe the feature

Is it possible to fix the data wrapper plugin for asm-style, The current version like this

array DB 4Dh, 5Ah, 90h, 00h, 03h, 00h, 00h, 00h, 04h, 00h, 00h, 00h, 0FFh, 0FFh, 00h, 00h,
              0B8h, 00h, 00h, 00h, 00h, 00h, 00h, 00h, 40h, 00h, 00h, 00h, 00h, 00h, 00h, 00h,
              00h, 00h, 00h, 00h, 00h, 00h, 00h, 00h

[0x00000000]> woa 1
Invalid word size. Use 1, 2, 4 or 8
[0x00000000]>

also it will be good to use wo+ and wo- instead of woa and wos imho. not to say we can pass the blocksize as 2nd argument or handle it as its done with wo2 wo4... like woa2 1 instead of having to pass an hexpair string

Tl;dr: Use the workaround from https://github.com/pwndbg/pwndbg/pull/322/files only for broken gdb versions

It's currently always using mov rAX,[moffs] but if it fits in an i32, it's shorter to use mov rAX,[m] with a modrm byte.

The generated mov() methods would need to be updated. This is what the generated C# code looks like:

			if (dst.Value == Register.RAX && Bitness == 64 && src.IsDisplacementOnly) {
				code = Code.Mov_RAX_moffs64;

An extra check would need to be adde

pdgsd does not seem to process PUSH EBP very well, the p-code semantics show up as

    (unique,0x12f0,4) = COPY EBP
    ESP = INT_SUB ESP, 0x4
    (unique,0x12f0,4) = STORE ram[ESP]

which doesn't make sense. Last line should be STORE ram[ESP] = (unique,0x12f0,4)

the raw p-code will show you:

STORE (const,0x55fef11636d0,8) (register,ESP,4) (unique,0x1b50,4)

and the

We should create a corpus of tests to verify that CFG recovery is accurate and complete, and there are no regressions.