Better code reading

volatilityfoundation · Dec 3, 2023 · acb088d · acb088d
1 parent ed2db93
commit acb088d
Showing 1 changed file with 3 additions and 6 deletions.
diff --git a/volatility3/framework/plugins/windows/mftscan.py b/volatility3/framework/plugins/windows/mftscan.py
@@ -258,17 +258,14 @@ def _generator(self):
                                     content = attr.get_resident_filecontent()
                                     if content:
                                         # Preparing for Disassembly
+                                        disasm = interfaces.renderers.BaseAbsentValue
                                         architecture = layer.metadata.get(
                                             "architecture", None
                                         )
-
-                                        disasm = (
-                                            interfaces.renderers.Disassembly(
+                                        if architecture:
+                                            disasm = interfaces.renderers.Disassembly(
                                                 content, 0, architecture.lower()
                                             )
-                                            if architecture
-                                            else interfaces.renderers.BaseAbsentValue
-                                        )
                                     else:
                                         content = renderers.NotAvailableValue
                                         disasm = interfaces.renderers.BaseAbsentValue