adplus-dvertising
frame-decoration

Question

What does a function’s address relative to the beginning of the module indicate in terms of popularity?

a.

The closer a function is to the beginning of the module, the more popular it is

b.

The closer a function is to the end of the module, the more popular it is

c.

The further a function is from the beginning of the module, the more popular it is

d.

The further a function is from the end of the module, the more popular it is

Posted under Reverse Engineering

Answer: (a).The closer a function is to the beginning of the module, the more popular it is Explanation:Functions that reside very near to the end of the module (those that have higher addresses) are very rarely executed and are probably responsible for some unusual cases such as error cases or rarely used functionality.

Engage with the Community - Add Your Comment

Confused About the Answer? Ask for Details Here.

Know the Explanation? Add it Here.

Q. What does a function’s address relative to the beginning of the module indicate in terms of popularity?