ELF
PE
&c).Because
Mach-O
PE/PE32+
README
steg86
No matching tags
the ModR/M
byte
The ModR/M
Instrumenting
No matching tags
x86 instruction encoding format to hide messages in pre-existing binaries with no size or neither of these, but for the sake of completeness:Compilers perform instruction selection to lower their internal representations into machine code. to be compatible with more CPUs).In this approach, the steganographer would control the compiler and its instruction selection instruction formats to selectively rewrite a program after compilation.Like every ISA, x86 (and AMD64) have multiple ways to encode the semantics of a particular Unfortunately, this doesnât work exactly as weâd like:Fortunately, this is not what steg86 does.Instead, steg86 takes advantage of one of the quirks of the x86 instruction encoding: the ModR/M x86 instructions2:Each dual represents one bit of information: we can arbitrarily assign one form
As said here by