X86Fragment is an analyzer in HexLasso to recognize x86 instruction fragments in the given data block. The analyzer highlights in color the instruction fragments in the hexdump and tells the coverage of how many bytes are the recognized instruction fragments in size.
X86Fragment analyzer aims to recognize the followings:
- Relative
CALLandJMPinstructions - Short jump instructions
- Near jump instructions
- Instructions with absolute address
- Function prologue instruction sequences
- Runs of
INT 3andNOPinstructions MOVinstructions