What can cause minidump disassemblies to differ from binary disassembly?

I have a minidump accident. At the time of the crash, there is some strange code that should never run successfully. Sort of:

call AnObject::AFunction test byte ptr [eax],cl 

AnObject :: AFunction is a member function that returns a bool. Thus, the result should be stored in eax as 0 or 1. At this point, it makes no sense to play eax.

I parsed the corresponding binary code and indeed, in this function the code is different:

 call AnObject::AFunction test al, al 

Why is the minidump parsing code really different from the actual parsing binary code?

+4
source share

Source: https://habr.com/ru/post/1447405/


All Articles