cgasm
is a standalone, offline terminal-based tool with no dependencies that gives me x86 assembly documentation. It is pronounced "SeekAzzem".
https://storify.com/thegrugq/once-upon-a-time-in-the-valley
You should follow the instructions to install Go, if you haven't already done so. Then:
$ go get github.com/bnagy/cgasm
The binary is standalone - it's statically linked and the data is compiled in. You can cross compile this to any architecture that go supports.
- nologic for doing the hard work on idaref
- @brnocrist for being the first to point me at it
What was that AES thing...?
velleity:~ ben$ cgasm -f aes
Fuzzy matches for "aes":
AESKEYGENASSIST - AES Round Key Generation Assist
AESENCLAST - Perform Last Round of an AES Encryption Flow
AESDEC - Perform One Round of an AES Decryption Flow
AESIMC - Perform the AES InvMixColumn Transformation
AESDECLAST - Perform Last Round of an AES Decryption Flow
AESENC - Perform One Round of an AES Encryption Flow
Default output is a summary
velleity:~ ben$ cgasm aesenc
AESENC - Perform One Round of an AES Encryption Flow
Description:
This instruction performs a single round of an AES encryption flow using a round
key from the second source operand, operating on 128-bit data (state) from the
first source operand, and store the result in the destination operand. Use the
AESENC instruction for all but the last encryption rounds. For the last encryption
round, use the AESENCCLAST instruction. 128-bit Legacy SSE version: The first
source operand and the destination operand are the same and must be an XMM register.
The second source operand can be an XMM register or a 128-bit memory location.
Bits (VLMAX1:128) of the corresponding YMM destination register remain unchanged.
VEX.128 encoded version: The first source operand and the destination operand
are XMM registers. The second source operand can be an XMM register or a 128-bit
memory location. Bits (VLMAX-1:128) of the destination YMM register are zeroed.
Or go full nerd
velleity:~ ben$ cgasm -v aesenc
AESENC - Perform One Round of an AES Encryption Flow:
| Opcode/Instruction | Op/En| 64/32-bit Mode| CPUID Feature Flag | Description
| 66 0F 38 DC /r AESENC xmm1, xmm2/m128| RM | V/V | AES | Perform one round of an AES encryption
| | | | | flow, operating on a 128-bit data (state)
| | | | | from xmm1 with a 128-bit round key from
| | | | | xmm2/m128.
| VEX.NDS.128.66.0F38.WIG DC /r VAESENC| RVM | V/V | Both AES and AVX flags| Perform one round of an AES encryption
| xmm1, xmm2, xmm3/m128 | | | | flow, operating on a 128-bit data (state)
| | | | | from xmm2 with a 128-bit round key from
| | | | | the xmm3/m128; store the result in xmm1.
Instruction Operand Encoding:
| Op/En| Operand 1 | Operand2 | Operand3 | Operand4
| RM | ModRM:reg (r, w)| ModRM:r/m (r)| NA | NA
| RVM | ModRM:reg (w) | VEX.vvvv (r) | ModRM:r/m (r)| NA
Description:
This instruction performs a single round of an AES encryption flow using a round
key from the second source operand, operating on 128-bit data (state) from the
first source operand, and store the result in the destination operand. Use the
AESENC instruction for all but the last encryption rounds. For the last encryption
round, use the AESENCCLAST instruction. 128-bit Legacy SSE version: The first
source operand and the destination operand are the same and must be an XMM register.
The second source operand can be an XMM register or a 128-bit memory location.
Bits (VLMAX1:128) of the corresponding YMM destination register remain unchanged.
VEX.128 encoded version: The first source operand and the destination operand
are XMM registers. The second source operand can be an XMM register or a 128-bit
memory location. Bits (VLMAX-1:128) of the destination YMM register are zeroed.
Operation:
AESENC
STATE <- SRC1;
RoundKey <- SRC2;
STATE <- ShiftRows( STATE );
STATE <- SubBytes( STATE );
STATE <- MixColumns( STATE );
DEST[127:0] <- STATE XOR RoundKey;
DEST[VLMAX-1:128] (Unmodified)
VAESENC
STATE <- SRC1;
RoundKey <- SRC2;
STATE <- ShiftRows( STATE );
STATE <- SubBytes( STATE );
STATE <- MixColumns( STATE );
DEST[127:0] <- STATE XOR RoundKey;
DEST[VLMAX-1:128] <- 0
Intel C/C++ Compiler Intrinsic Equivalent:
| (V)AESENC:| __m128i _mm_aesenc (__m128i, __m128i)
SIMD Floating-Point Exceptions:
None
Other Exceptions:
See Exceptions Type 4.
GPLv2, see LICENSE.md for details
Nothing. No other features. Ever.
I. Will. Cut. You.