ntoskrnl.exe: Fix incorrect interpretation of SIB byte when parsing x86 opcode.
This commit is contained in:
parent
bd6a5de27d
commit
927a44e676
|
@ -139,7 +139,7 @@ static BYTE *INSTR_GetOperandAddr( CONTEXT *context, BYTE *instr,
|
|||
GET_VAL( &sib, BYTE );
|
||||
rm = sib & 7;
|
||||
ss = sib >> 6;
|
||||
switch(sib >> 3)
|
||||
switch((sib >> 3) & 7)
|
||||
{
|
||||
case 0: index = context->Eax; break;
|
||||
case 1: index = context->Ecx; break;
|
||||
|
|
Loading…
Reference in New Issue