-
Hello, the ZydisMachineMode enumeration includes a ZYDIS_MACHINE_MODE_LONG_COMPAT_32, ZYDIS_MACHINE_MODE_LEGACY_32 and a "parallel" pair ZYDIS_MACHINE_MODE_LONG_COMPAT_16, ZYDIS_MACHINE_MODE_LEGACY_16. What's the difference between the COMPAT vs LEGACY mode ? For disassembling Windows and Linux programs, which one should be used ? and why ? Thank you for your help. |
Beta Was this translation helpful? Give feedback.
Answered by
flobernd
Mar 9, 2024
Replies: 2 comments
-
https://en.m.wikipedia.org/wiki/X86 Check: Operating Modes. I would recommend LONG_64 or LONG_COMPAT_32 for recently modern binaries. |
Beta Was this translation helpful? Give feedback.
0 replies
Answer selected by
440bx
-
Thank you Florian. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
https://en.m.wikipedia.org/wiki/X86
Check: Operating Modes.
I would recommend LONG_64 or LONG_COMPAT_32 for recently modern binaries.