:[diStorm}: problem decoding fnstsw

Gil Dabah arkon at ragestorm.net
Tue Feb 13 05:51:19 EST 2007


There are a few decoding for this instruction.
The constant 0xdf, 0xe0 which results in fnstsw ax (according to the AMD
specs it's AX, 16 bits operation).
And 0xdd, <modrm byte /7> which results in FNSTSW rm16.
But the modrm byte value must be lower than 0xC0, because that instruction
supports only memory indirection operand.

Maybe I should indeed put the AX in the operands string rather than the
mnemonic string itself.
I have never considered this before. If that might help you, I am willing to
do so.

On 2/13/07, Sanjay Patel <sanjay3000 at yahoo.com> wrote:
>
> I think this 2 byte sequence should be "fnstsw eax":
>
> 0xdf, 0xe0
>
> But diStorm seems to be returning "fnstsw ax" all in the mnemonic string
> rather than putting 'ax' into the operand string. My reading of the
> manuals
> is not very good - the modrm byte is specified as /7 - so does that mean
> that
> 0xe0 is invalid in this case?
>
> --Sanjay
>
>
>
>
>
>
>
>
> ____________________________________________________________________________________
> Now that's room service!  Choose from over 150,000 hotels
> in 45,000 destinations on Yahoo! Travel to find your fit.
> http://farechase.yahoo.com/promo-generic-14795097
>
> _______________________________________________
> diStorm mailing list
> diStorm at ragestorm.net
> http://ragestorm.net/mailman/listinfo/distorm_ragestorm.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://ragestorm.net/pipermail/distorm_ragestorm.net/attachments/20070213/82e2bf18/attachment.html 


More information about the diStorm mailing list