The static analysis phase in our methodology is one where we get to really dive into figuring out how the binary functions. While the tools we have at our disposal are helpful, they are not perfect by any means. This phase in our methodology is a safer means of analysis than the dynamic analysis phase since we are disassembling the binary without actually executing the binary. However, as we'll see in later chapters, there are techniques that some binary authors employ to confuse static analysis tools, or to render these tools completely unreliable. When this happens, we may have to write our own disassembly tool(s). For the sake of this book, however, we'll keep things simple and as straightforward as possible. In later chapters, we will see an example of a binary that tries to confuse static analysis tools.
Up until this point, we've...
