Forums before death by AOL, social media and spammers... "We can't have nice things"
|    comp.lang.asm.x86    |    Ahh, the lost art of x86 assembly    |    4,675 messages    |
[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]
|    Message 3,054 of 4,675    |
|    wolfgang kern to Rod Pemberton    |
|    Re: Sandsifter software finds hidden ins    |
|    08 Nov 17 13:35:25    |
      From: nowhere@never.at              Rod Pemberton wrote:              >> PLease let me know if you find any undefined opcode that doesn't       >> raise an exeption or act as NOP. I'd like to check in detail what       >> they may do.              > I'm not able to run the code even though I have Linux.       > The project requires some software or upgrades I don't have.              Flying Bucket's code doesn't work anyway...              To create a list of unknown instruction may just need a decent disassembler       which reports either undefined or illegal or not available in certain CPU       modes (mine is still not fully up to date).              And we can assume all single byte opcodes are well defined (SALC,LAHF,SAHF       may or not work in LM depending on CPU revision), so there could be some       undocumented in the not fully used opcode groups like x87, 3Dnow and       in the 3-byte opcode maps.              My tools allow me to enter any unknown opcode into a free memory area,       pad it with NOPs, set all registers to known values, select RM,PM,CM       16 or 32 or LM, and then hit the single step key. So I see either an       exception or upgraded registers including EIP, flags, FPU/XMM, MMX and stack.       But I have to manually view it and cannot automate the analyse.              If no exception occured I can check if any memory locations pointed to       by 0x9090.., or by my initial register settings, were altered.       I once used this in a loop to detect all present MSRs. Of course a check       on SIMD/XOP/VEX/AVX/FMA instructions must be preceded by enabling it.       __       wolfgang              --- SoupGate-Win32 v1.05        * Origin: you cannot sedate... all the things you hate (1:229/2)    |
[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]
(c) 1994, bbs@darkrealms.ca