malware_training_vol1 icon indicating copy to clipboard operation
malware_training_vol1 copied to clipboard

Vol1-Mod1-Slide12-WyWiWyG

Open BlueSkeye opened this issue 3 years ago • 2 comments

I feel "decompiled code is identical to the assembly code that you wrote" is sligthly misleading. Both MASM and YASM support macros and equates that are inlined during compilation. Thus, any decompilation process will be unable to recover these syntactic constructions.

BlueSkeye avatar Mar 23 '21 15:03 BlueSkeye

hmm, I will think how to rephrase it to make is less misleading. this is quite nuanced - macros are still representation of some block of instruction in pure assembly, which will be the same in output as they were in the input. and this is what I meant: when we write in the pure assembly: we decide which exact register we want to use, etc. it is not something decided for us by the compiler. and this is something important to highlight.

hasherezade avatar Mar 23 '21 17:03 hasherezade

Ok. You want to emphasis asm = full processor control VS other languages delegating this control to the compiler. If so, my remark about macros is at least useless and could even be confusing for the reader. I suggest you close this issue and forget about macros in your text.

BlueSkeye avatar Mar 23 '21 17:03 BlueSkeye