elements.wlonk.com

Jmp Opcode | X86

FF /4

EB 0B means "jump 11 bytes forward from the end of this instruction." EB F2 (where F2 = -14 decimal) means "jump 14 bytes backward." x86 jmp opcode

If you’ve ever stared at a hex dump and wondered why one jump looks like and another looks like FF /4 EB 0B means "jump 11 bytes

Here, the target address is stored in a memory location. This is common for function pointers in C/C++. x86 jmp opcode

A is used to jump to a different code segment. This is rare in modern application programming (flat memory model) but critical in operating system kernels and legacy 16-bit code. Opcode: EA (Direct) or FF /5 (Indirect).

FF /4 (with memory ModR/M)