1 year ago
#351684
Biggs
Does inline ASM in C change disassembly?
I tried my best to search for this question before asking, but could not find an answer. Perhaps this question would be better suited to ask on the Reverse Engineering SE.
I am examining a 32-bit C Portable Executable that I suspect to make use of inline MSVC __asm
inside of main
as an anti-RE technique. Is there anything different about the disassembly of C programs using inline ASM that can help confirm my suspicions? Is it possible to discern from the disassembly if the original programmer used inline ASM?
This question mainly revolves around MSVC, but answers regarding GCC inline ASM may prove helpful to others.
c
reverse-engineering
inline-assembly
disassembly
0 Answers
Your Answer