Skip to content

Instantly share code, notes, and snippets.

@defuse
Created October 24, 2013 21:15
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save defuse/7145118 to your computer and use it in GitHub Desktop.
Save defuse/7145118 to your computer and use it in GitHub Desktop.
Disassembling TrueCrypt Differences
str = "D0 1D 00 00 00 02 02 00 30 82 1D BD 06 09 2A 86 48 86 F7 0D 01 07 02 A0 82 1D AE 30 82 1D AA 02 01 01 31 0B 30 09 06 05 2B 0E 03 01 1A"
binary = str.split(" ").map { |x| x.to_i(16).chr }.join("")
0.upto(binary.length - 1) do |start|
code = binary[start...binary.length]
File.open("/tmp/foo.bin", "w") do |f|
f.write(code)
end
print `objdump -D -b binary -m i8086 -M intel /tmp/foo.bin`
end
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: d0 1d rcr BYTE PTR [di],1
2: 00 00 add BYTE PTR [bx+si],al
4: 00 02 add BYTE PTR [bp+si],al
6: 02 00 add al,BYTE PTR [bx+si]
8: 30 82 1d bd xor BYTE PTR [bp+si-0x42e3],al
c: 06 push es
d: 09 2a or WORD PTR [bp+si],bp
f: 86 48 86 xchg BYTE PTR [bx+si-0x7a],cl
12: f7 (bad)
13: 0d 01 07 or ax,0x701
16: 02 a0 82 1d add ah,BYTE PTR [bx+si+0x1d82]
1a: ae scas al,BYTE PTR es:[di]
1b: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
1f: 02 01 add al,BYTE PTR [bx+di]
21: 01 31 add WORD PTR [bx+di],si
23: 0b 30 or si,WORD PTR [bx+si]
25: 09 06 05 2b or WORD PTR ds:0x2b05,ax
29: 0e push cs
2a: 03 01 add ax,WORD PTR [bx+di]
2c: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 1d 00 00 sbb ax,0x0
3: 00 02 add BYTE PTR [bp+si],al
5: 02 00 add al,BYTE PTR [bx+si]
7: 30 82 1d bd xor BYTE PTR [bp+si-0x42e3],al
b: 06 push es
c: 09 2a or WORD PTR [bp+si],bp
e: 86 48 86 xchg BYTE PTR [bx+si-0x7a],cl
11: f7 (bad)
12: 0d 01 07 or ax,0x701
15: 02 a0 82 1d add ah,BYTE PTR [bx+si+0x1d82]
19: ae scas al,BYTE PTR es:[di]
1a: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
1e: 02 01 add al,BYTE PTR [bx+di]
20: 01 31 add WORD PTR [bx+di],si
22: 0b 30 or si,WORD PTR [bx+si]
24: 09 06 05 2b or WORD PTR ds:0x2b05,ax
28: 0e push cs
29: 03 01 add ax,WORD PTR [bx+di]
2b: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 00 00 add BYTE PTR [bx+si],al
2: 00 02 add BYTE PTR [bp+si],al
4: 02 00 add al,BYTE PTR [bx+si]
6: 30 82 1d bd xor BYTE PTR [bp+si-0x42e3],al
a: 06 push es
b: 09 2a or WORD PTR [bp+si],bp
d: 86 48 86 xchg BYTE PTR [bx+si-0x7a],cl
10: f7 (bad)
11: 0d 01 07 or ax,0x701
14: 02 a0 82 1d add ah,BYTE PTR [bx+si+0x1d82]
18: ae scas al,BYTE PTR es:[di]
19: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
1d: 02 01 add al,BYTE PTR [bx+di]
1f: 01 31 add WORD PTR [bx+di],si
21: 0b 30 or si,WORD PTR [bx+si]
23: 09 06 05 2b or WORD PTR ds:0x2b05,ax
27: 0e push cs
28: 03 01 add ax,WORD PTR [bx+di]
2a: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 00 00 add BYTE PTR [bx+si],al
2: 02 02 add al,BYTE PTR [bp+si]
4: 00 30 add BYTE PTR [bx+si],dh
6: 82 (bad)
7: 1d bd 06 sbb ax,0x6bd
a: 09 2a or WORD PTR [bp+si],bp
c: 86 48 86 xchg BYTE PTR [bx+si-0x7a],cl
f: f7 (bad)
10: 0d 01 07 or ax,0x701
13: 02 a0 82 1d add ah,BYTE PTR [bx+si+0x1d82]
17: ae scas al,BYTE PTR es:[di]
18: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
1c: 02 01 add al,BYTE PTR [bx+di]
1e: 01 31 add WORD PTR [bx+di],si
20: 0b 30 or si,WORD PTR [bx+si]
22: 09 06 05 2b or WORD PTR ds:0x2b05,ax
26: 0e push cs
27: 03 01 add ax,WORD PTR [bx+di]
29: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 00 02 add BYTE PTR [bp+si],al
2: 02 00 add al,BYTE PTR [bx+si]
4: 30 82 1d bd xor BYTE PTR [bp+si-0x42e3],al
8: 06 push es
9: 09 2a or WORD PTR [bp+si],bp
b: 86 48 86 xchg BYTE PTR [bx+si-0x7a],cl
e: f7 (bad)
f: 0d 01 07 or ax,0x701
12: 02 a0 82 1d add ah,BYTE PTR [bx+si+0x1d82]
16: ae scas al,BYTE PTR es:[di]
17: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
1b: 02 01 add al,BYTE PTR [bx+di]
1d: 01 31 add WORD PTR [bx+di],si
1f: 0b 30 or si,WORD PTR [bx+si]
21: 09 06 05 2b or WORD PTR ds:0x2b05,ax
25: 0e push cs
26: 03 01 add ax,WORD PTR [bx+di]
28: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 02 02 add al,BYTE PTR [bp+si]
2: 00 30 add BYTE PTR [bx+si],dh
4: 82 (bad)
5: 1d bd 06 sbb ax,0x6bd
8: 09 2a or WORD PTR [bp+si],bp
a: 86 48 86 xchg BYTE PTR [bx+si-0x7a],cl
d: f7 (bad)
e: 0d 01 07 or ax,0x701
11: 02 a0 82 1d add ah,BYTE PTR [bx+si+0x1d82]
15: ae scas al,BYTE PTR es:[di]
16: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
1a: 02 01 add al,BYTE PTR [bx+di]
1c: 01 31 add WORD PTR [bx+di],si
1e: 0b 30 or si,WORD PTR [bx+si]
20: 09 06 05 2b or WORD PTR ds:0x2b05,ax
24: 0e push cs
25: 03 01 add ax,WORD PTR [bx+di]
27: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 02 00 add al,BYTE PTR [bx+si]
2: 30 82 1d bd xor BYTE PTR [bp+si-0x42e3],al
6: 06 push es
7: 09 2a or WORD PTR [bp+si],bp
9: 86 48 86 xchg BYTE PTR [bx+si-0x7a],cl
c: f7 (bad)
d: 0d 01 07 or ax,0x701
10: 02 a0 82 1d add ah,BYTE PTR [bx+si+0x1d82]
14: ae scas al,BYTE PTR es:[di]
15: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
19: 02 01 add al,BYTE PTR [bx+di]
1b: 01 31 add WORD PTR [bx+di],si
1d: 0b 30 or si,WORD PTR [bx+si]
1f: 09 06 05 2b or WORD PTR ds:0x2b05,ax
23: 0e push cs
24: 03 01 add ax,WORD PTR [bx+di]
26: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 00 30 add BYTE PTR [bx+si],dh
2: 82 (bad)
3: 1d bd 06 sbb ax,0x6bd
6: 09 2a or WORD PTR [bp+si],bp
8: 86 48 86 xchg BYTE PTR [bx+si-0x7a],cl
b: f7 (bad)
c: 0d 01 07 or ax,0x701
f: 02 a0 82 1d add ah,BYTE PTR [bx+si+0x1d82]
13: ae scas al,BYTE PTR es:[di]
14: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
18: 02 01 add al,BYTE PTR [bx+di]
1a: 01 31 add WORD PTR [bx+di],si
1c: 0b 30 or si,WORD PTR [bx+si]
1e: 09 06 05 2b or WORD PTR ds:0x2b05,ax
22: 0e push cs
23: 03 01 add ax,WORD PTR [bx+di]
25: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 30 82 1d bd xor BYTE PTR [bp+si-0x42e3],al
4: 06 push es
5: 09 2a or WORD PTR [bp+si],bp
7: 86 48 86 xchg BYTE PTR [bx+si-0x7a],cl
a: f7 (bad)
b: 0d 01 07 or ax,0x701
e: 02 a0 82 1d add ah,BYTE PTR [bx+si+0x1d82]
12: ae scas al,BYTE PTR es:[di]
13: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
17: 02 01 add al,BYTE PTR [bx+di]
19: 01 31 add WORD PTR [bx+di],si
1b: 0b 30 or si,WORD PTR [bx+si]
1d: 09 06 05 2b or WORD PTR ds:0x2b05,ax
21: 0e push cs
22: 03 01 add ax,WORD PTR [bx+di]
24: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 82 (bad)
1: 1d bd 06 sbb ax,0x6bd
4: 09 2a or WORD PTR [bp+si],bp
6: 86 48 86 xchg BYTE PTR [bx+si-0x7a],cl
9: f7 (bad)
a: 0d 01 07 or ax,0x701
d: 02 a0 82 1d add ah,BYTE PTR [bx+si+0x1d82]
11: ae scas al,BYTE PTR es:[di]
12: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
16: 02 01 add al,BYTE PTR [bx+di]
18: 01 31 add WORD PTR [bx+di],si
1a: 0b 30 or si,WORD PTR [bx+si]
1c: 09 06 05 2b or WORD PTR ds:0x2b05,ax
20: 0e push cs
21: 03 01 add ax,WORD PTR [bx+di]
23: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 1d bd 06 sbb ax,0x6bd
3: 09 2a or WORD PTR [bp+si],bp
5: 86 48 86 xchg BYTE PTR [bx+si-0x7a],cl
8: f7 (bad)
9: 0d 01 07 or ax,0x701
c: 02 a0 82 1d add ah,BYTE PTR [bx+si+0x1d82]
10: ae scas al,BYTE PTR es:[di]
11: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
15: 02 01 add al,BYTE PTR [bx+di]
17: 01 31 add WORD PTR [bx+di],si
19: 0b 30 or si,WORD PTR [bx+si]
1b: 09 06 05 2b or WORD PTR ds:0x2b05,ax
1f: 0e push cs
20: 03 01 add ax,WORD PTR [bx+di]
22: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: bd 06 09 mov bp,0x906
3: 2a 86 48 86 sub al,BYTE PTR [bp-0x79b8]
7: f7 (bad)
8: 0d 01 07 or ax,0x701
b: 02 a0 82 1d add ah,BYTE PTR [bx+si+0x1d82]
f: ae scas al,BYTE PTR es:[di]
10: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
14: 02 01 add al,BYTE PTR [bx+di]
16: 01 31 add WORD PTR [bx+di],si
18: 0b 30 or si,WORD PTR [bx+si]
1a: 09 06 05 2b or WORD PTR ds:0x2b05,ax
1e: 0e push cs
1f: 03 01 add ax,WORD PTR [bx+di]
21: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 06 push es
1: 09 2a or WORD PTR [bp+si],bp
3: 86 48 86 xchg BYTE PTR [bx+si-0x7a],cl
6: f7 (bad)
7: 0d 01 07 or ax,0x701
a: 02 a0 82 1d add ah,BYTE PTR [bx+si+0x1d82]
e: ae scas al,BYTE PTR es:[di]
f: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
13: 02 01 add al,BYTE PTR [bx+di]
15: 01 31 add WORD PTR [bx+di],si
17: 0b 30 or si,WORD PTR [bx+si]
19: 09 06 05 2b or WORD PTR ds:0x2b05,ax
1d: 0e push cs
1e: 03 01 add ax,WORD PTR [bx+di]
20: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 09 2a or WORD PTR [bp+si],bp
2: 86 48 86 xchg BYTE PTR [bx+si-0x7a],cl
5: f7 (bad)
6: 0d 01 07 or ax,0x701
9: 02 a0 82 1d add ah,BYTE PTR [bx+si+0x1d82]
d: ae scas al,BYTE PTR es:[di]
e: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
12: 02 01 add al,BYTE PTR [bx+di]
14: 01 31 add WORD PTR [bx+di],si
16: 0b 30 or si,WORD PTR [bx+si]
18: 09 06 05 2b or WORD PTR ds:0x2b05,ax
1c: 0e push cs
1d: 03 01 add ax,WORD PTR [bx+di]
1f: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 2a 86 48 86 sub al,BYTE PTR [bp-0x79b8]
4: f7 (bad)
5: 0d 01 07 or ax,0x701
8: 02 a0 82 1d add ah,BYTE PTR [bx+si+0x1d82]
c: ae scas al,BYTE PTR es:[di]
d: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
11: 02 01 add al,BYTE PTR [bx+di]
13: 01 31 add WORD PTR [bx+di],si
15: 0b 30 or si,WORD PTR [bx+si]
17: 09 06 05 2b or WORD PTR ds:0x2b05,ax
1b: 0e push cs
1c: 03 01 add ax,WORD PTR [bx+di]
1e: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 86 48 86 xchg BYTE PTR [bx+si-0x7a],cl
3: f7 (bad)
4: 0d 01 07 or ax,0x701
7: 02 a0 82 1d add ah,BYTE PTR [bx+si+0x1d82]
b: ae scas al,BYTE PTR es:[di]
c: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
10: 02 01 add al,BYTE PTR [bx+di]
12: 01 31 add WORD PTR [bx+di],si
14: 0b 30 or si,WORD PTR [bx+si]
16: 09 06 05 2b or WORD PTR ds:0x2b05,ax
1a: 0e push cs
1b: 03 01 add ax,WORD PTR [bx+di]
1d: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 48 dec ax
1: 86 f7 xchg bh,dh
3: 0d 01 07 or ax,0x701
6: 02 a0 82 1d add ah,BYTE PTR [bx+si+0x1d82]
a: ae scas al,BYTE PTR es:[di]
b: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
f: 02 01 add al,BYTE PTR [bx+di]
11: 01 31 add WORD PTR [bx+di],si
13: 0b 30 or si,WORD PTR [bx+si]
15: 09 06 05 2b or WORD PTR ds:0x2b05,ax
19: 0e push cs
1a: 03 01 add ax,WORD PTR [bx+di]
1c: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 86 f7 xchg bh,dh
2: 0d 01 07 or ax,0x701
5: 02 a0 82 1d add ah,BYTE PTR [bx+si+0x1d82]
9: ae scas al,BYTE PTR es:[di]
a: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
e: 02 01 add al,BYTE PTR [bx+di]
10: 01 31 add WORD PTR [bx+di],si
12: 0b 30 or si,WORD PTR [bx+si]
14: 09 06 05 2b or WORD PTR ds:0x2b05,ax
18: 0e push cs
19: 03 01 add ax,WORD PTR [bx+di]
1b: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: f7 (bad)
1: 0d 01 07 or ax,0x701
4: 02 a0 82 1d add ah,BYTE PTR [bx+si+0x1d82]
8: ae scas al,BYTE PTR es:[di]
9: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
d: 02 01 add al,BYTE PTR [bx+di]
f: 01 31 add WORD PTR [bx+di],si
11: 0b 30 or si,WORD PTR [bx+si]
13: 09 06 05 2b or WORD PTR ds:0x2b05,ax
17: 0e push cs
18: 03 01 add ax,WORD PTR [bx+di]
1a: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 0d 01 07 or ax,0x701
3: 02 a0 82 1d add ah,BYTE PTR [bx+si+0x1d82]
7: ae scas al,BYTE PTR es:[di]
8: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
c: 02 01 add al,BYTE PTR [bx+di]
e: 01 31 add WORD PTR [bx+di],si
10: 0b 30 or si,WORD PTR [bx+si]
12: 09 06 05 2b or WORD PTR ds:0x2b05,ax
16: 0e push cs
17: 03 01 add ax,WORD PTR [bx+di]
19: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 01 07 add WORD PTR [bx],ax
2: 02 a0 82 1d add ah,BYTE PTR [bx+si+0x1d82]
6: ae scas al,BYTE PTR es:[di]
7: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
b: 02 01 add al,BYTE PTR [bx+di]
d: 01 31 add WORD PTR [bx+di],si
f: 0b 30 or si,WORD PTR [bx+si]
11: 09 06 05 2b or WORD PTR ds:0x2b05,ax
15: 0e push cs
16: 03 01 add ax,WORD PTR [bx+di]
18: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 07 pop es
1: 02 a0 82 1d add ah,BYTE PTR [bx+si+0x1d82]
5: ae scas al,BYTE PTR es:[di]
6: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
a: 02 01 add al,BYTE PTR [bx+di]
c: 01 31 add WORD PTR [bx+di],si
e: 0b 30 or si,WORD PTR [bx+si]
10: 09 06 05 2b or WORD PTR ds:0x2b05,ax
14: 0e push cs
15: 03 01 add ax,WORD PTR [bx+di]
17: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 02 a0 82 1d add ah,BYTE PTR [bx+si+0x1d82]
4: ae scas al,BYTE PTR es:[di]
5: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
9: 02 01 add al,BYTE PTR [bx+di]
b: 01 31 add WORD PTR [bx+di],si
d: 0b 30 or si,WORD PTR [bx+si]
f: 09 06 05 2b or WORD PTR ds:0x2b05,ax
13: 0e push cs
14: 03 01 add ax,WORD PTR [bx+di]
16: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: a0 82 1d mov al,ds:0x1d82
3: ae scas al,BYTE PTR es:[di]
4: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
8: 02 01 add al,BYTE PTR [bx+di]
a: 01 31 add WORD PTR [bx+di],si
c: 0b 30 or si,WORD PTR [bx+si]
e: 09 06 05 2b or WORD PTR ds:0x2b05,ax
12: 0e push cs
13: 03 01 add ax,WORD PTR [bx+di]
15: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 82 (bad)
1: 1d ae 30 sbb ax,0x30ae
4: 82 (bad)
5: 1d aa 02 sbb ax,0x2aa
8: 01 01 add WORD PTR [bx+di],ax
a: 31 0b xor WORD PTR [bp+di],cx
c: 30 09 xor BYTE PTR [bx+di],cl
e: 06 push es
f: 05 2b 0e add ax,0xe2b
12: 03 01 add ax,WORD PTR [bx+di]
14: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 1d ae 30 sbb ax,0x30ae
3: 82 (bad)
4: 1d aa 02 sbb ax,0x2aa
7: 01 01 add WORD PTR [bx+di],ax
9: 31 0b xor WORD PTR [bp+di],cx
b: 30 09 xor BYTE PTR [bx+di],cl
d: 06 push es
e: 05 2b 0e add ax,0xe2b
11: 03 01 add ax,WORD PTR [bx+di]
13: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: ae scas al,BYTE PTR es:[di]
1: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
5: 02 01 add al,BYTE PTR [bx+di]
7: 01 31 add WORD PTR [bx+di],si
9: 0b 30 or si,WORD PTR [bx+si]
b: 09 06 05 2b or WORD PTR ds:0x2b05,ax
f: 0e push cs
10: 03 01 add ax,WORD PTR [bx+di]
12: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 30 82 1d aa xor BYTE PTR [bp+si-0x55e3],al
4: 02 01 add al,BYTE PTR [bx+di]
6: 01 31 add WORD PTR [bx+di],si
8: 0b 30 or si,WORD PTR [bx+si]
a: 09 06 05 2b or WORD PTR ds:0x2b05,ax
e: 0e push cs
f: 03 01 add ax,WORD PTR [bx+di]
11: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 82 (bad)
1: 1d aa 02 sbb ax,0x2aa
4: 01 01 add WORD PTR [bx+di],ax
6: 31 0b xor WORD PTR [bp+di],cx
8: 30 09 xor BYTE PTR [bx+di],cl
a: 06 push es
b: 05 2b 0e add ax,0xe2b
e: 03 01 add ax,WORD PTR [bx+di]
10: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 1d aa 02 sbb ax,0x2aa
3: 01 01 add WORD PTR [bx+di],ax
5: 31 0b xor WORD PTR [bp+di],cx
7: 30 09 xor BYTE PTR [bx+di],cl
9: 06 push es
a: 05 2b 0e add ax,0xe2b
d: 03 01 add ax,WORD PTR [bx+di]
f: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: aa stos BYTE PTR es:[di],al
1: 02 01 add al,BYTE PTR [bx+di]
3: 01 31 add WORD PTR [bx+di],si
5: 0b 30 or si,WORD PTR [bx+si]
7: 09 06 05 2b or WORD PTR ds:0x2b05,ax
b: 0e push cs
c: 03 01 add ax,WORD PTR [bx+di]
e: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 02 01 add al,BYTE PTR [bx+di]
2: 01 31 add WORD PTR [bx+di],si
4: 0b 30 or si,WORD PTR [bx+si]
6: 09 06 05 2b or WORD PTR ds:0x2b05,ax
a: 0e push cs
b: 03 01 add ax,WORD PTR [bx+di]
d: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 01 01 add WORD PTR [bx+di],ax
2: 31 0b xor WORD PTR [bp+di],cx
4: 30 09 xor BYTE PTR [bx+di],cl
6: 06 push es
7: 05 2b 0e add ax,0xe2b
a: 03 01 add ax,WORD PTR [bx+di]
c: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 01 31 add WORD PTR [bx+di],si
2: 0b 30 or si,WORD PTR [bx+si]
4: 09 06 05 2b or WORD PTR ds:0x2b05,ax
8: 0e push cs
9: 03 01 add ax,WORD PTR [bx+di]
b: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 31 0b xor WORD PTR [bp+di],cx
2: 30 09 xor BYTE PTR [bx+di],cl
4: 06 push es
5: 05 2b 0e add ax,0xe2b
8: 03 01 add ax,WORD PTR [bx+di]
a: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 0b 30 or si,WORD PTR [bx+si]
2: 09 06 05 2b or WORD PTR ds:0x2b05,ax
6: 0e push cs
7: 03 01 add ax,WORD PTR [bx+di]
9: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 30 09 xor BYTE PTR [bx+di],cl
2: 06 push es
3: 05 2b 0e add ax,0xe2b
6: 03 01 add ax,WORD PTR [bx+di]
8: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 09 06 05 2b or WORD PTR ds:0x2b05,ax
4: 0e push cs
5: 03 01 add ax,WORD PTR [bx+di]
7: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 06 push es
1: 05 2b 0e add ax,0xe2b
4: 03 01 add ax,WORD PTR [bx+di]
6: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 05 2b 0e add ax,0xe2b
3: 03 01 add ax,WORD PTR [bx+di]
5: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 2b 0e 03 01 sub cx,WORD PTR ds:0x103
4: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 0e push cs
1: 03 01 add ax,WORD PTR [bx+di]
3: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 03 01 add ax,WORD PTR [bx+di]
2: 1a .byte 0x1a
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 01 1a add WORD PTR [bp+si],bx
/tmp/foo.bin: file format binary
Disassembly of section .data:
00000000 <.data>:
0: 1a .byte 0x1a
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment