2020-07-21 08:19:18 +00:00
|
|
|
0000000000000000 e8fbffffff CALL 0x0
|
|
|
|
DSIZE: 64, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: CALL, CET tracked: no
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: yes, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: yes, BHINT: no, DNT: no
|
|
|
|
Operand: 0, Acc: R-, Type: Offset, Size: 8, RawSize: 4, Encoding: D
|
|
|
|
Operand: 1, Acc: RW, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: IP, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
Operand: 2, Acc: -W, Type: Memory, Size: 8, RawSize: 8, Encoding: S, Stack: yes,
|
|
|
|
Segment: 2, Base: 4,
|
2020-07-21 19:29:59 +00:00
|
|
|
Operand: 3, Acc: -W, Type: Memory, Size: 8, RawSize: 8, Encoding: S, Shadow stack: 3,
|
2020-07-21 08:19:18 +00:00
|
|
|
|
|
|
|
|
|
|
|
0000000000000005 ffd0 CALL rax
|
|
|
|
DSIZE: 64, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: CALL, CET tracked: yes
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: yes, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: yes, BHINT: no, DNT: yes
|
|
|
|
Operand: 0, Acc: R-, Type: Register, Size: 8, RawSize: 8, Encoding: M, RegType: General Purpose, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
Operand: 1, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: IP, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
Operand: 2, Acc: -W, Type: Memory, Size: 8, RawSize: 8, Encoding: S, Stack: yes,
|
|
|
|
Segment: 2, Base: 4,
|
2020-07-21 19:29:59 +00:00
|
|
|
Operand: 3, Acc: -W, Type: Memory, Size: 8, RawSize: 8, Encoding: S, Shadow stack: 3,
|
2020-07-21 08:19:18 +00:00
|
|
|
|
|
|
|
|
|
|
|
0000000000000007 67ff13 CALL qword ptr [ebx]
|
|
|
|
DSIZE: 64, ASIZE: 32, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: CALL, CET tracked: yes
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: yes, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: yes, BHINT: no, DNT: yes
|
|
|
|
Operand: 0, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M,
|
|
|
|
Segment: 3, Base: 3,
|
|
|
|
Operand: 1, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: IP, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
Operand: 2, Acc: -W, Type: Memory, Size: 8, RawSize: 8, Encoding: S, Stack: yes,
|
|
|
|
Segment: 2, Base: 4,
|
2020-07-21 19:29:59 +00:00
|
|
|
Operand: 3, Acc: -W, Type: Memory, Size: 8, RawSize: 8, Encoding: S, Shadow stack: 3,
|
2020-07-21 08:19:18 +00:00
|
|
|
|
|
|
|
|
|
|
|
000000000000000A ff13 CALL qword ptr [rbx]
|
|
|
|
DSIZE: 64, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: CALL, CET tracked: yes
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: yes, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: yes, BHINT: no, DNT: yes
|
|
|
|
Operand: 0, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M,
|
|
|
|
Segment: 3, Base: 3,
|
|
|
|
Operand: 1, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: IP, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
Operand: 2, Acc: -W, Type: Memory, Size: 8, RawSize: 8, Encoding: S, Stack: yes,
|
|
|
|
Segment: 2, Base: 4,
|
2020-07-21 19:29:59 +00:00
|
|
|
Operand: 3, Acc: -W, Type: Memory, Size: 8, RawSize: 8, Encoding: S, Shadow stack: 3,
|
2020-07-21 08:19:18 +00:00
|
|
|
|
|
|
|
|
|
|
|
000000000000000C ebfe JMP 0xc
|
|
|
|
DSIZE: 64, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: UNCOND_BR, CET tracked: no
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: yes, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: yes, BHINT: no, DNT: no
|
|
|
|
Operand: 0, Acc: R-, Type: Offset, Size: 8, RawSize: 1, Encoding: D
|
|
|
|
Operand: 1, Acc: RW, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: IP, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
|
|
|
|
000000000000000E ffe0 JMP rax
|
|
|
|
DSIZE: 64, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: UNCOND_BR, CET tracked: yes
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: yes, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: yes, BHINT: no, DNT: yes
|
|
|
|
Operand: 0, Acc: R-, Type: Register, Size: 8, RawSize: 8, Encoding: M, RegType: General Purpose, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
Operand: 1, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: IP, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
|
|
|
|
0000000000000010 67ff23 JMP qword ptr [ebx]
|
|
|
|
DSIZE: 64, ASIZE: 32, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: UNCOND_BR, CET tracked: yes
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: yes, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: yes, BHINT: no, DNT: yes
|
|
|
|
Operand: 0, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M,
|
|
|
|
Segment: 3, Base: 3,
|
|
|
|
Operand: 1, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: IP, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
|
|
|
|
0000000000000013 ff23 JMP qword ptr [rbx]
|
|
|
|
DSIZE: 64, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: UNCOND_BR, CET tracked: yes
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: yes, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: yes, BHINT: no, DNT: yes
|
|
|
|
Operand: 0, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: M,
|
|
|
|
Segment: 3, Base: 3,
|
|
|
|
Operand: 1, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: IP, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
|
|
|
|
0000000000000015 66ff1b CALLF dword ptr [rbx]
|
|
|
|
DSIZE: 16, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: CALL, CET tracked: yes
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: no, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: no, BHINT: no, DNT: no
|
|
|
|
Operand: 0, Acc: R-, Type: Memory, Size: 4, RawSize: 4, Encoding: M,
|
|
|
|
Segment: 3, Base: 3,
|
|
|
|
Operand: 1, Acc: -W, Type: Register, Size: 2, RawSize: 2, Encoding: S, RegType: Segment, RegSize: 2, RegId: 1, RegCount: 1
|
|
|
|
Operand: 2, Acc: -W, Type: Register, Size: 2, RawSize: 2, Encoding: S, RegType: IP, RegSize: 2, RegId: 0, RegCount: 1
|
|
|
|
Operand: 3, Acc: -W, Type: Memory, Size: 4, RawSize: 4, Encoding: S, Stack: yes,
|
|
|
|
Segment: 2, Base: 4,
|
2020-07-21 19:29:59 +00:00
|
|
|
Operand: 4, Acc: -W, Type: Memory, Size: 4, RawSize: 4, Encoding: S, Shadow stack: 3,
|
2020-07-21 08:19:18 +00:00
|
|
|
|
|
|
|
|
|
|
|
0000000000000018 ff1b CALLF fword ptr [rbx]
|
|
|
|
DSIZE: 32, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: CALL, CET tracked: yes
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: no, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: no, BHINT: no, DNT: no
|
|
|
|
Operand: 0, Acc: R-, Type: Memory, Size: 6, RawSize: 6, Encoding: M,
|
|
|
|
Segment: 3, Base: 3,
|
|
|
|
Operand: 1, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: Segment, RegSize: 4, RegId: 1, RegCount: 1
|
|
|
|
Operand: 2, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: IP, RegSize: 4, RegId: 0, RegCount: 1
|
|
|
|
Operand: 3, Acc: -W, Type: Memory, Size: 8, RawSize: 8, Encoding: S, Stack: yes,
|
|
|
|
Segment: 2, Base: 4,
|
2020-07-21 19:29:59 +00:00
|
|
|
Operand: 4, Acc: -W, Type: Memory, Size: 8, RawSize: 8, Encoding: S, Shadow stack: 3,
|
2020-07-21 08:19:18 +00:00
|
|
|
|
|
|
|
|
|
|
|
000000000000001A 48ff1b CALLF tbyte ptr [rbx]
|
|
|
|
DSIZE: 64, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: CALL, CET tracked: yes
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: no, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: no, BHINT: no, DNT: no
|
|
|
|
Operand: 0, Acc: R-, Type: Memory, Size: 10, RawSize: 10, Encoding: M,
|
|
|
|
Segment: 3, Base: 3,
|
|
|
|
Operand: 1, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: Segment, RegSize: 8, RegId: 1, RegCount: 1
|
|
|
|
Operand: 2, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: IP, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
Operand: 3, Acc: -W, Type: Memory, Size: 16, RawSize: 16, Encoding: S, Stack: yes,
|
|
|
|
Segment: 2, Base: 4,
|
2020-07-21 19:29:59 +00:00
|
|
|
Operand: 4, Acc: -W, Type: Memory, Size: 16, RawSize: 16, Encoding: S, Shadow stack: 3,
|
2020-07-21 08:19:18 +00:00
|
|
|
|
|
|
|
|
|
|
|
000000000000001D 66ff2b JMPF dword ptr [rbx]
|
|
|
|
DSIZE: 16, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: UNCOND_BR, CET tracked: yes
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: no, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: no, BHINT: no, DNT: no
|
|
|
|
Operand: 0, Acc: R-, Type: Memory, Size: 4, RawSize: 4, Encoding: M,
|
|
|
|
Segment: 3, Base: 3,
|
|
|
|
Operand: 1, Acc: -W, Type: Register, Size: 2, RawSize: 2, Encoding: S, RegType: Segment, RegSize: 2, RegId: 1, RegCount: 1
|
|
|
|
Operand: 2, Acc: -W, Type: Register, Size: 2, RawSize: 2, Encoding: S, RegType: IP, RegSize: 2, RegId: 0, RegCount: 1
|
|
|
|
|
|
|
|
0000000000000020 ff2b JMPF fword ptr [rbx]
|
|
|
|
DSIZE: 32, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: UNCOND_BR, CET tracked: yes
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: no, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: no, BHINT: no, DNT: no
|
|
|
|
Operand: 0, Acc: R-, Type: Memory, Size: 6, RawSize: 6, Encoding: M,
|
|
|
|
Segment: 3, Base: 3,
|
|
|
|
Operand: 1, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: Segment, RegSize: 4, RegId: 1, RegCount: 1
|
|
|
|
Operand: 2, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: IP, RegSize: 4, RegId: 0, RegCount: 1
|
|
|
|
|
|
|
|
0000000000000022 48ff2b JMPF tbyte ptr [rbx]
|
|
|
|
DSIZE: 64, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: UNCOND_BR, CET tracked: yes
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: no, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: no, BHINT: no, DNT: no
|
|
|
|
Operand: 0, Acc: R-, Type: Memory, Size: 10, RawSize: 10, Encoding: M,
|
|
|
|
Segment: 3, Base: 3,
|
|
|
|
Operand: 1, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: Segment, RegSize: 8, RegId: 1, RegCount: 1
|
|
|
|
Operand: 2, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: IP, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
|
|
|
|
0000000000000025 72fe JC 0x25
|
|
|
|
DSIZE: 64, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: COND_BR, CET tracked: no
|
|
|
|
FLAGS access
|
|
|
|
CF: t,
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: yes, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: yes, BHINT: yes, DNT: no
|
|
|
|
Operand: 0, Acc: R-, Type: Offset, Size: 8, RawSize: 1, Encoding: D
|
|
|
|
Operand: 1, Acc: RW, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: IP, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
Operand: 2, Acc: R-, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: Flags, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
|
|
|
|
0000000000000027 73fe JNC 0x27
|
|
|
|
DSIZE: 64, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: COND_BR, CET tracked: no
|
|
|
|
FLAGS access
|
|
|
|
CF: t,
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: yes, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: yes, BHINT: yes, DNT: no
|
|
|
|
Operand: 0, Acc: R-, Type: Offset, Size: 8, RawSize: 1, Encoding: D
|
|
|
|
Operand: 1, Acc: RW, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: IP, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
Operand: 2, Acc: R-, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: Flags, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
|
|
|
|
0000000000000029 e2fe LOOP 0x29
|
|
|
|
DSIZE: 64, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: COND_BR, CET tracked: no
|
|
|
|
FLAGS access
|
|
|
|
Entire register
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: yes, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: no, BHINT: no, DNT: no
|
|
|
|
Operand: 0, Acc: R-, Type: Offset, Size: 8, RawSize: 1, Encoding: D
|
|
|
|
Operand: 1, Acc: RW, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: General Purpose, RegSize: 8, RegId: 1, RegCount: 1
|
|
|
|
Operand: 2, Acc: RW, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: IP, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
Operand: 3, Acc: R-, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: Flags, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
|
|
|
|
000000000000002B e0fe LOOPNZ 0x2b
|
|
|
|
DSIZE: 64, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: COND_BR, CET tracked: no
|
|
|
|
FLAGS access
|
|
|
|
ZF: t,
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: yes, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: no, BHINT: no, DNT: no
|
|
|
|
Operand: 0, Acc: R-, Type: Offset, Size: 8, RawSize: 1, Encoding: D
|
|
|
|
Operand: 1, Acc: RW, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: General Purpose, RegSize: 8, RegId: 1, RegCount: 1
|
|
|
|
Operand: 2, Acc: RW, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: IP, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
Operand: 3, Acc: R-, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: Flags, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
|
|
|
|
000000000000002D e3fe JRCXZ 0x2d
|
|
|
|
DSIZE: 64, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: COND_BR, CET tracked: no
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: yes, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: no, BHINT: no, DNT: no
|
|
|
|
Operand: 0, Acc: R-, Type: Offset, Size: 8, RawSize: 1, Encoding: D
|
|
|
|
Operand: 1, Acc: R-, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: General Purpose, RegSize: 8, RegId: 1, RegCount: 1
|
|
|
|
Operand: 2, Acc: RW, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: IP, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
|
|
|
|
000000000000002F 67e3fd JECXZ 0x2f
|
|
|
|
DSIZE: 64, ASIZE: 32, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: COND_BR, CET tracked: no
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: yes, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: no, BHINT: no, DNT: no
|
|
|
|
Operand: 0, Acc: R-, Type: Offset, Size: 8, RawSize: 1, Encoding: D
|
|
|
|
Operand: 1, Acc: R-, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: General Purpose, RegSize: 4, RegId: 1, RegCount: 1
|
|
|
|
Operand: 2, Acc: RW, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: IP, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
|
|
|
|
0000000000000032 cd21 INT 0x21
|
|
|
|
DSIZE: 32, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: INTERRUPT, CET tracked: no
|
|
|
|
FLAGS access
|
|
|
|
TF: m, IF: m, NT: m, RF: m, VM: tm, AC: m,
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: no, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: no, BHINT: no, DNT: no
|
|
|
|
Operand: 0, Acc: R-, Type: Immediate, Size: 1, RawSize: 1, Encoding: I
|
|
|
|
Operand: 1, Acc: RW, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: Segment, RegSize: 4, RegId: 1, RegCount: 1
|
|
|
|
Operand: 2, Acc: RW, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: IP, RegSize: 4, RegId: 0, RegCount: 1
|
|
|
|
Operand: 3, Acc: RW, Type: Memory, Size: 12, RawSize: 12, Encoding: S, Stack: yes,
|
|
|
|
Segment: 2, Base: 4,
|
|
|
|
Operand: 4, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: Flags, RegSize: 4, RegId: 0, RegCount: 1
|
2020-07-21 19:29:59 +00:00
|
|
|
Operand: 5, Acc: -W, Type: Memory, Size: 12, RawSize: 12, Encoding: S, Shadow stack: 3,
|
2020-07-21 08:19:18 +00:00
|
|
|
|
|
|
|
|
|
|
|
0000000000000034 cc INT3
|
|
|
|
DSIZE: 32, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: INTERRUPT, CET tracked: no
|
|
|
|
FLAGS access
|
|
|
|
TF: m, IF: m, NT: m, RF: m, VM: tm, AC: m,
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: no, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: no, BHINT: no, DNT: no
|
|
|
|
Operand: 0, Acc: RW, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: Segment, RegSize: 4, RegId: 1, RegCount: 1
|
|
|
|
Operand: 1, Acc: RW, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: IP, RegSize: 4, RegId: 0, RegCount: 1
|
|
|
|
Operand: 2, Acc: RW, Type: Memory, Size: 12, RawSize: 12, Encoding: S, Stack: yes,
|
|
|
|
Segment: 2, Base: 4,
|
|
|
|
Operand: 3, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: Flags, RegSize: 4, RegId: 0, RegCount: 1
|
2020-07-21 19:29:59 +00:00
|
|
|
Operand: 4, Acc: -W, Type: Memory, Size: 12, RawSize: 12, Encoding: S, Shadow stack: 3,
|
2020-07-21 08:19:18 +00:00
|
|
|
|
|
|
|
|
|
|
|
0000000000000035 f1 INT1
|
|
|
|
DSIZE: 32, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: INTERRUPT, CET tracked: no
|
|
|
|
FLAGS access
|
|
|
|
TF: m, IF: m, NT: m, RF: m, VM: tm, AC: m,
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: no, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: no, BHINT: no, DNT: no
|
|
|
|
Operand: 0, Acc: RW, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: Segment, RegSize: 4, RegId: 1, RegCount: 1
|
|
|
|
Operand: 1, Acc: RW, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: IP, RegSize: 4, RegId: 0, RegCount: 1
|
|
|
|
Operand: 2, Acc: RW, Type: Memory, Size: 12, RawSize: 12, Encoding: S, Stack: yes,
|
|
|
|
Segment: 2, Base: 4,
|
|
|
|
Operand: 3, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: Flags, RegSize: 4, RegId: 0, RegCount: 1
|
|
|
|
|
|
|
|
0000000000000036 f1 INT1
|
|
|
|
DSIZE: 32, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: INTERRUPT, CET tracked: no
|
|
|
|
FLAGS access
|
|
|
|
TF: m, IF: m, NT: m, RF: m, VM: tm, AC: m,
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: no, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: no, BHINT: no, DNT: no
|
|
|
|
Operand: 0, Acc: RW, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: Segment, RegSize: 4, RegId: 1, RegCount: 1
|
|
|
|
Operand: 1, Acc: RW, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: IP, RegSize: 4, RegId: 0, RegCount: 1
|
|
|
|
Operand: 2, Acc: RW, Type: Memory, Size: 12, RawSize: 12, Encoding: S, Stack: yes,
|
|
|
|
Segment: 2, Base: 4,
|
|
|
|
Operand: 3, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: Flags, RegSize: 4, RegId: 0, RegCount: 1
|
|
|
|
|
|
|
|
0000000000000037 c3 RETN
|
|
|
|
DSIZE: 64, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: RET, CET tracked: no
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: yes, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: yes, BHINT: no, DNT: no
|
|
|
|
Operand: 0, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: IP, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
Operand: 1, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: S, Stack: yes,
|
|
|
|
Segment: 2, Base: 4,
|
2020-07-21 19:29:59 +00:00
|
|
|
Operand: 2, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: S, Shadow stack: 3,
|
2020-07-21 08:19:18 +00:00
|
|
|
|
|
|
|
|
|
|
|
0000000000000038 c22000 RETN 0x0020
|
|
|
|
DSIZE: 64, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: RET, CET tracked: no
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: yes, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: yes, BHINT: no, DNT: no
|
2020-07-23 11:08:01 +00:00
|
|
|
Operand: 0, Acc: R-, Type: Immediate, Size: 2, RawSize: 2, Encoding: I
|
2020-07-21 08:19:18 +00:00
|
|
|
Operand: 1, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: IP, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
Operand: 2, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: General Purpose, RegSize: 8, RegId: 4, RegCount: 1
|
|
|
|
Operand: 3, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: S, Stack: yes,
|
|
|
|
Segment: 2, Base: 4,
|
2020-07-21 19:29:59 +00:00
|
|
|
Operand: 4, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: S, Shadow stack: 3,
|
2020-07-21 08:19:18 +00:00
|
|
|
|
|
|
|
|
|
|
|
000000000000003B cb RETF
|
|
|
|
DSIZE: 32, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: RET, CET tracked: no
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: yes, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: no, BHINT: no, DNT: no
|
|
|
|
Operand: 0, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: Segment, RegSize: 4, RegId: 1, RegCount: 1
|
|
|
|
Operand: 1, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: IP, RegSize: 4, RegId: 0, RegCount: 1
|
|
|
|
Operand: 2, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: S, Stack: yes,
|
|
|
|
Segment: 2, Base: 4,
|
2020-07-21 19:29:59 +00:00
|
|
|
Operand: 3, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: S, Shadow stack: 3,
|
2020-07-21 08:19:18 +00:00
|
|
|
|
|
|
|
|
|
|
|
000000000000003C ca2000 RETF 0x0020
|
|
|
|
DSIZE: 32, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: RET, CET tracked: no
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: yes, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: no, BHINT: no, DNT: no
|
2020-07-23 11:08:01 +00:00
|
|
|
Operand: 0, Acc: R-, Type: Immediate, Size: 2, RawSize: 2, Encoding: I
|
2020-07-21 08:19:18 +00:00
|
|
|
Operand: 1, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: Segment, RegSize: 4, RegId: 1, RegCount: 1
|
|
|
|
Operand: 2, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: IP, RegSize: 4, RegId: 0, RegCount: 1
|
|
|
|
Operand: 3, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: S, Stack: yes,
|
|
|
|
Segment: 2, Base: 4,
|
2020-07-21 19:29:59 +00:00
|
|
|
Operand: 4, Acc: R-, Type: Memory, Size: 8, RawSize: 8, Encoding: S, Shadow stack: 3,
|
2020-07-21 08:19:18 +00:00
|
|
|
|
|
|
|
|
|
|
|
000000000000003F 66cf IRETW
|
|
|
|
DSIZE: 16, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: RET, CET tracked: no
|
|
|
|
FLAGS access
|
|
|
|
Entire register
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: yes, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: no, BHINT: no, DNT: no
|
|
|
|
Operand: 0, Acc: RW, Type: Register, Size: 2, RawSize: 2, Encoding: S, RegType: Segment, RegSize: 2, RegId: 1, RegCount: 1
|
|
|
|
Operand: 1, Acc: -W, Type: Register, Size: 2, RawSize: 2, Encoding: S, RegType: IP, RegSize: 2, RegId: 0, RegCount: 1
|
|
|
|
Operand: 2, Acc: R-, Type: Memory, Size: 6, RawSize: 6, Encoding: S, Stack: yes,
|
|
|
|
Segment: 2, Base: 4,
|
|
|
|
Operand: 3, Acc: RW, Type: Register, Size: 2, RawSize: 2, Encoding: S, RegType: Flags, RegSize: 2, RegId: 0, RegCount: 1
|
2020-07-21 19:29:59 +00:00
|
|
|
Operand: 4, Acc: RW, Type: Memory, Size: 6, RawSize: 6, Encoding: S, Shadow stack: 3,
|
2020-07-21 08:19:18 +00:00
|
|
|
|
|
|
|
|
|
|
|
0000000000000041 cf IRETD
|
|
|
|
DSIZE: 32, ASIZE: 64, VLEN: -
|
|
|
|
ISA Set: I86, Ins cat: RET, CET tracked: no
|
|
|
|
FLAGS access
|
|
|
|
Entire register
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: yes, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: no, BHINT: no, DNT: no
|
|
|
|
Operand: 0, Acc: RW, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: Segment, RegSize: 4, RegId: 1, RegCount: 1
|
|
|
|
Operand: 1, Acc: -W, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: IP, RegSize: 4, RegId: 0, RegCount: 1
|
|
|
|
Operand: 2, Acc: R-, Type: Memory, Size: 12, RawSize: 12, Encoding: S, Stack: yes,
|
|
|
|
Segment: 2, Base: 4,
|
|
|
|
Operand: 3, Acc: RW, Type: Register, Size: 4, RawSize: 4, Encoding: S, RegType: Flags, RegSize: 4, RegId: 0, RegCount: 1
|
2020-07-21 19:29:59 +00:00
|
|
|
Operand: 4, Acc: RW, Type: Memory, Size: 12, RawSize: 12, Encoding: S, Shadow stack: 3,
|
2020-07-21 08:19:18 +00:00
|
|
|
|
|
|
|
|
|
|
|
0000000000000042 0f05 SYSCALL
|
2020-07-21 19:29:59 +00:00
|
|
|
DSIZE: 64, ASIZE: 64, VLEN: -
|
2020-07-21 08:19:18 +00:00
|
|
|
ISA Set: AMD, Ins cat: SYSCALL, CET tracked: no
|
|
|
|
CPUID leaf: 0x80000001, reg: ecx, bit: 11
|
|
|
|
FLAGS access
|
|
|
|
Entire register
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: yes, R2: yes, R3: yes
|
2020-07-23 11:08:01 +00:00
|
|
|
Real: yes, V8086: yes, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: no, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: no, BHINT: no, DNT: no
|
2020-09-21 09:16:45 +00:00
|
|
|
Operand: 0, Acc: R-, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: Model Specific, RegSize: 8, RegId: 0xc0000081, RegCount: 1
|
|
|
|
Operand: 1, Acc: R-, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: Model Specific, RegSize: 8, RegId: 0xc0000082, RegCount: 1
|
|
|
|
Operand: 2, Acc: R-, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: Model Specific, RegSize: 8, RegId: 0xc0000084, RegCount: 1
|
2020-07-21 19:29:59 +00:00
|
|
|
Operand: 3, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: Segment, RegSize: 8, RegId: 2, RegCount: 1
|
2020-07-21 08:19:18 +00:00
|
|
|
Operand: 4, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: General Purpose, RegSize: 8, RegId: 1, RegCount: 1
|
|
|
|
Operand: 5, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: General Purpose, RegSize: 8, RegId: 11, RegCount: 1
|
2020-07-21 19:29:59 +00:00
|
|
|
Operand: 6, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: Segment, RegSize: 8, RegId: 1, RegCount: 1
|
|
|
|
Operand: 7, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: IP, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
Operand: 8, Acc: RW, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: Flags, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
Operand: 9, Acc: RW, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: SSP, RegSize: 8, RegId: 0, RegCount: 1
|
2020-07-21 08:19:18 +00:00
|
|
|
|
|
|
|
0000000000000044 0f35 SYSEXIT
|
2020-07-21 19:29:59 +00:00
|
|
|
DSIZE: 64, ASIZE: 64, VLEN: -
|
2020-07-21 08:19:18 +00:00
|
|
|
ISA Set: PPRO, Ins cat: SYSRET, CET tracked: no
|
|
|
|
CPUID leaf: 0x00000001, reg: edx, bit: 11
|
|
|
|
Valid modes
|
|
|
|
R0: yes, R1: no, R2: no, R3: no
|
|
|
|
Real: no, V8086: no, Prot: yes, Compat: yes, Long: yes
|
2020-09-10 08:06:20 +00:00
|
|
|
SMM on: yes, SMM off: yes, SGX on: no, SGX off: yes, TSX on: yes, TSX off: yes
|
|
|
|
VMXRoot: yes, VMXNonRoot: yes, VMXRoot SEAM: yes, VMXNonRoot SEAM: yes, VMX off: yes
|
2020-07-21 08:19:18 +00:00
|
|
|
Valid prefixes
|
|
|
|
REP: no, REPcc: no, LOCK: no
|
|
|
|
HLE: no, XACQUIRE only: no, XRELEASE only: no
|
|
|
|
BND: no, BHINT: no, DNT: no
|
2020-07-21 19:29:59 +00:00
|
|
|
Operand: 0, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: Segment, RegSize: 8, RegId: 2, RegCount: 1
|
2020-07-21 08:19:18 +00:00
|
|
|
Operand: 1, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: General Purpose, RegSize: 8, RegId: 4, RegCount: 1
|
2020-07-21 19:29:59 +00:00
|
|
|
Operand: 2, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: Segment, RegSize: 8, RegId: 1, RegCount: 1
|
|
|
|
Operand: 3, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: IP, RegSize: 8, RegId: 0, RegCount: 1
|
|
|
|
Operand: 4, Acc: -W, Type: Register, Size: 8, RawSize: 8, Encoding: S, RegType: SSP, RegSize: 8, RegId: 0, RegCount: 1
|
2020-07-21 08:19:18 +00:00
|
|
|
|