Section Editor - Disassembler decodes just 2 bytes
Info
It is not clear why the disassembler shows just 2 bytes decoded Expectation is to have all the section (or say 1K) to be disassembled
Details
Drop a file onto the tool, go to the Section Editor Locate .text section (this is a file compiled by MS VS) Right click - Disassemble Section just 2 bytes (CC) being disassembled: http://prntscr.com/jg8go0
is it a known limitation or... ?
At the same time other sections when asked are showing way much more asm lines
Disasm is usually stopped in case of ret or many int 3 or nop instructions.
why is that reasoning? .text section has code and disasm decodes just 2 bytes? thats terrible feature...
- Reason is not to disasm garbage bytes.
- If you need to disasm code, disasm at entry point (Optional Header > Entry Point, press
Dbutton at the right side of EP value).
May be we'll add:
- Option to set how many bytes to disasm regardless of presence of stop-bytes.
- Start address in disasm dialog to disasm from any address within
SizeOfImage