X86 Fragment Analyzer

Posted | Modified

X86Fragment is an analyzer in HexLasso to recognize x86 instruction fragments in the given data block. The analyzer highlights in color the instruction fragments in the hexdump and tells the coverage of how many bytes are the recognized instruction fragments in size.

X86Fragment analyzer aims to recognize the followings:
  • Relative CALL and JMP instructions
  • Short jump instructions
  • Near jump instructions
  • Instructions with absolute address
  • Function prologue instruction sequences
  • Runs of INT 3 and NOP instructions
  • MOV instructions