Learn how easy it is to sync an existing GitHub or Google Code repo to a SourceForge project! See Demo

Close

#35 Real Multibyte nops

open
nobody
None
5
2011-11-08
2011-11-08
Anonymous
No

Add an OPTION switch to enable real intel/amd multibyte nops instead of the old fillers.
2 bytes
66 NOP
66 90H
3 bytes
NOP DWORD ptr [EAX]
0F 1F 00H
4 bytes
NOP DWORD ptr [EAX + 00H]
0F 1F 40 00H
5 bytes
NOP DWORD ptr [EAX + EAX*1 + 00H]
0F 1F 44 00 00H
6 bytes
66 NOP DWORD ptr [EAX + EAX*1 + 00H]
66 0F 1F 44 00 00H
7 bytes
NOP DWORD ptr [EAX + 00000000H]
0F 1F 80 00 00 00 00H
8 bytes
NOP DWORD ptr [EAX + EAX*1 + 00000000H]
0F 1F 84 00 00 00 00 00H
9 bytes
66 NOP DWORD ptr [EAX + EAX*1 + 00000000H]
66 0F 1F 84 00 00 00 00 00H

Discussion

  • Diederik Huys
    Diederik Huys
    2012-03-03

    Personally I wouldn't do this, because it would be a non-canonic extension to the x86 assembly syntax.

     
  • Diederik Huys
    Diederik Huys
    2012-03-03

    OK forget my previous comment. I found the opcodes in the manual ;-)