3 ms·
You are supposed to annotate what every part of the file is and how you want to display it. It's usually easy to distinguish reasonable assembler code from nons
by HelloNurse 4y ago
You are supposed to annotate what every part of the file is and how you want to display it. It's usually easy to distinguish reasonable assembler code from nonsense instructions interspersed with undecodable islands.
Disassembling all sections just in case they contain code is a common conservative policy for disassemblers: even without malicious payload hiding tricks even definitely never executed sections could contain embedded executable code.
- youngtaff 4y agoThanks, I'll try that approach It's been a while since I've looked at asm in anger so it's taking me a while to get back into it (plus this is a side project ATM)