Giters

decaf-project / DECAF

DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

About address of instruction

nemare opened this issue · comments

commented

Hello:
May I ask how to get address of instructions like Pin does with INS_Address(ins) ?
Thanks!

commented

If you just want to get the address of the current instruction, you can use
DECAF_getPC().

Heng

On Mon, May 16, 2016 at 2:52 AM nemare notifications@github.com wrote:

Hello:
May I ask how to get address of instructions like Pin does with
INS_Address(ins) ?
Thanks!

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub
#37

commented

Thank you for your answer! Is DECAF_getPC() the same as params->ib.env->eip in INSN_BEGIN_CB? I found it that they print the same result?

commented

Yes.

On Tue, May 17, 2016, 2:55 AM nemare notifications@github.com wrote:

Thank you for your answer! Is DECAF_getPC() the same as
params->ib.env->eip in INSN_BEGIN_CB? I found it that they print the same
result?

—
You are receiving this because you commented.

Reply to this email directly or view it on GitHub
#37 (comment)