1 year ago

#351684

test-img

Biggs

Does inline ASM in C change disassembly?

I tried my best to search for this question before asking, but could not find an answer. Perhaps this question would be better suited to ask on the Reverse Engineering SE.

I am examining a 32-bit C Portable Executable that I suspect to make use of inline MSVC __asm inside of main as an anti-RE technique. Is there anything different about the disassembly of C programs using inline ASM that can help confirm my suspicions? Is it possible to discern from the disassembly if the original programmer used inline ASM?

This question mainly revolves around MSVC, but answers regarding GCC inline ASM may prove helpful to others.

c

reverse-engineering

inline-assembly

disassembly

0 Answers

Your Answer

Accepted video resources