Hi guys,
Sorry by stupid question, but, when you disassemble a file it is first executed? How can a disassembler disassemble without executing the file? Thanks by any answer.
Sorry by stupid question, but, when you disassemble a file it is first executed? How can a disassembler disassemble without executing the file? Thanks by any answer.
It is not executed. Why would it have to be? :). A disassembler
typically contains a loader for your fileformat, that loads in the file
more or less as the OS would do it. And of course a disassembler
core that does the same job as the CPU decoders (well, sorta).
From there on, it's a matter of adding some intelligence/logic, and
you have a fully-fledged dissambler. The rest of us use IDA ;)
typically contains a loader for your fileformat, that loads in the file
more or less as the OS would do it. And of course a disassembler
core that does the same job as the CPU decoders (well, sorta).
From there on, it's a matter of adding some intelligence/logic, and
you have a fully-fledged dissambler. The rest of us use IDA ;)
Thanks f0dder.