Reply 20 of 22, by mkarcher
Peter Swinkels wrote on 2024-04-23, 07:04:Also, how I am going to figure out the application code if I don't know what C function's they're calling or what part of the binary is application code?
As a DOS EXE file does not contain any kind of function name information, all names displayed by IDA (like _open or __dtoxmode) are there because IDA recognized these functions. While IDA knows the MS C library quite well and is able to recognize nearly all parts of it, it does not know anything about application code, and thus won't recognize application functions. So any named function (except main) is library code, and also flagged as such by the "L" attribute and the bright cyan color coding of the addresses, as already mentioned by llm. You can figure out what parts are application code by just looking at the code that has not yet been named by IDA (and of course by looking at main, too).