获取操作码的简便方法

Question

I know how to get the opcodes and the corresponding assembly syntax from an executable; however is there an easy way to get the opcodes of a particular assembly instruction alone, without writing a program using the same and then, manually linking and loading it and doing an objdump on the executable?

Is there a simple way to find the corresponding opcodes of a particular instruction?

Answer 1

You can use gdb's (GNU Debugger's) x/bx command.

I made a tutorial here:

http://aimbots.net/tutorials/9276-how-get-op-codes.html

http://aimbots.net/threads/9276-How-to-get-OP-codes

Answer 2

I asked a similar question a while back ( DOS debug like program for 32-bit x86 assembly ).

Someone was kind enough to provide me with an automated script to do this. You can follow the link to question, or refer to the script they provided to me below ...

opcode() {
  echo $* > tmp.S && nasm tmp.S -o tmp.o && od -x tmp.o
  rm -f tmp.o tmp.S
}

Hope this helps.

Answer 3

X86操作码和指令参考包含32位和64位x86处理器上的一组指令参考表及其相应的操作码。

Answer 4

For x86, you can just look them up in the Intel Manual ( Part 1 (AM) , Part 2 (NZ) ). And no, I don't know why the manual is split in 2 parts.

Answer 5

I'm not sure why you want opcodes. But if its for exploit development you probably already have metasploit which comes with a really useful ruby script called nasm_shell.rb (in the tools directory).

Each line you type comes out as an ascii hex representation of the correct opcodes.

If its for some other purpose or you don't want some heavyweight toolkit like metasploit hanging around for whatever reason, you can just pull out the script and install its dependencies. It uses Rex and assumes nasm is installed.

If you want to adapt it the actual code you need is just a few lines in the function shell.run