Igor’s Tip of the Week #123: Opcode bytes

When disassembling, you are probably more interested in seeing the code (disassembly or pseudocode) rather than the raw file data, but there may be times you need to see what actually lies behind the instructions.

One option is to use the Hex View, possibly docked and synchronized with IDA View.

But probably a simpler solution is the disassembly option Number of opcode bytes.

By setting it to a non-zero value, IDA will use the specified number of columns …

code data disassembly file hex ida lies malware analysis may non pseudocode solution value