CS 16: Assembly Language Programming for the IBM PC and Compatibles
|
|
|
- Melvyn Gallagher
- 10 years ago
- Views:
Transcription
1 CS 16: Assembly Language Programming for the IBM PC and Compatibles
2 Start basic with some string primitive instructions Get choosy with some selected string procedures Look both ways before crossing two-dimensional arrays Go through some searching and sorting of integer arrays Have another cup of coffee with Java bytecodes
3 MOVSB, MOVSW, and MOVSD CMPSB, CMPSW, and CMPSD SCASB, SCASW, and SCASD STOSB, STOSW, and STOSD LODSB, LODSW, and LODSD
4 The MOVSB, MOVSW, and MOVSD instructions copy data from the memory location pointed to by ESI to the memory location pointed to by EDI.data source DWORD 0FFFFFFFFh target DWORD?.code mov esi,offset source mov edi,offset target movsd
5 ESI and EDI are automatically incremented or decremented: MOVSB increments/decrements by 1 MOVSW increments/decrements by 2 MOVSD increments/decrements by 4
6 The Direction flag controls the incrementing or decrementing of ESI and EDI. DF = clear (0): increment ESI and EDI DF = set (1): decrement ESI and EDI The Direction flag can be explicitly changed using the CLD and STD instructions CLD ; clear Direction flag STD ; set Direction flag
7 REP (a repeat prefix) can be inserted just before MOVSB, MOVSW, or MOVSD ECX controls the number of repetitions EXAMPLE: Copy 20 doublewords from source to target.data source DWORD 20 DUP(?) target DWORD 20 DUP(?).code cld mov ecx,lengthof source mov esi,offset source mov edi,offset target rep movsd ; direction = forward ; set REP counter
8 The CMPSB, CMPSW, and CMPSD instructions each compare a memory operand pointed to by ESI to a memory operand pointed to by EDI. CMPSB compares bytes CMPSW compares words CMPSD compares doublewords Repeat prefix often used REPE (REPZ) REPNE (REPNZ)
9 If source > target, the code jumps to label L1; otherwise, it jumps to label L2.data source DWORD 1234h target DWORD 5678h.code mov esi,offset source mov edi,offset target cmpsd ; compare doublewords ja L1 ; jump if source > target jmp L2 ; jump if source <= target
10 Modify the program in the previous slide by declaring both source and target as WORD variables Make any other necessary changes
11 Use a REPE (repeat while equal) prefix to compare corresponding elements of two arrays.data source DWORD COUNT DUP(?) target DWORD COUNT DUP(?).code mov ecx,count mov esi,offset source mov edi,offset target cld repe cmpsd ; repetition count ; direction = forward ; repeat while equal
12 This program compares two strings (source and destination) It displays a message indicating whether the lexical value of the source string is less than the destination string.data source BYTE "MARTIN " dest BYTE "MARTINEZ" str1 BYTE "Source is smaller",0dh,0ah,0 str2 BYTE "Source is not smaller",0dh,0ah,0 Screen output Source is smaller
13 .code main PROC cld ; direction = forward mov esi,offset source mov edi,offset dest mov ecx,lengthof source repe cmpsb jb source_smaller mov edx,offset str2 ; "source is not smaller" jmp done source_smaller: mov edx,offset str1 ; "source is smaller" done: call WriteString exit main ENDP END main
14 The following diagram shows the final values of ESI and EDI after comparing the strings Before After Source: M A R T I N M A R T I N ESI ESI Before After Dest: M A R T I N E Z M A R T I N E Z EDI EDI
15 The SCASB, SCASW, and SCASD instructions compare a value in AL/AX/EAX to a byte, word, or doubleword, respectively, addressed by EDI Useful types of searches: Search for a specific element in a long string or array Search for the first element that does not match a given value
16 Search for the letter 'F' in a string named alpha.data alpha BYTE "ABCDEFGH",0.code mov edi,offset alpha mov al,'f' mov ecx,lengthof alpha cld repne scasb jnz quit dec edi ; search for 'F' ; repeat while not equal ; EDI points to 'F' What is the purpose of the JNZ instruction?
17 The STOSB, STOSW, and STOSD instructions store the contents of AL/AX/EAX, respectively, in memory at the offset pointed to by EDI EXAMPLE: Fill an array with 0FFh
18 LODSB, LODSW, and LODSD load a byte or word from memory at ESI into AL/AX/EAX, respectively Example.data array BYTE 1,2,3,4,5,6,7,8,9.code mov esi,offset array mov ecx,lengthof array cld L1: lodsb ; load byte into AL or al,30h ; convert to ASCII call WriteChar ; display it loop L1
19 Multiply each element of a doubleword array by a constant value.data array DWORD 1,2,3,4,5,6,7,8,9,10 multiplier DWORD 10.code cld ; direction = up mov esi,offset array ; source index mov edi,esi ; destination index mov ecx,lengthof array ; loop counter L1: lodsd ; copy [ESI] into EAX mul multiplier ; multiply by a value stosd ; store EAX at [EDI] loop L1
20 The following string procedures may be found in the Irvine32 library Str_compare Str_length Str_copy Str_trim Str_ucase
21 Compares string1 to string2, setting the Carry and Zero flags accordingly Prototype Str_compare PROTO, string1:ptr BYTE, string2:ptr BYTE ; pointer to string ; pointer to string Relation Carry Flag Zero Flag Branch If True string1 < string2 1 0 JB string1 == string2 0 1 JE string1 > string2 0 0 JA
22 Str_compare PROC USES eax edx esi edi, string1:ptr BYTE, string2:ptr BYTE mov esi,string1 mov edi,string2 L1: mov al,[esi] mov dl,[edi] cmp al,0 ; end of string1? jne L2 ; no cmp dl,0 ; yes: end of string2? jne L2 ; no jmp L3 ; yes, exit with ZF = 1 L2: inc esi ; point to next inc edi cmp al,dl ; chars equal? je L1 ; yes: continue loop L3: ret Str_compare ENDP
23 Calculates the length of a null-terminated string and returns the length in the EAX register Prototype Str_length PROTO, Example pstring:ptr BYTE.data mystring BYTE "abcdefg",0.code INVOKE Str_length, ADDR mystring ; EAX = 7 ; pointer to string
24 Str_length PROC USES edi, pstring:ptr BYTE mov edi,pstring mov eax,0 L1: cmp byte ptr [edi],0 je L2 inc edi inc eax jmp L1 L2: ret Str_length ENDP ; pointer to string ; character count ; end of string? ; yes: quit ; no: point to next ; add 1 to count
25 Copies a null-terminated string from a source location to a target location Prototype Str_copy PROTO, source:ptr BYTE, target:ptr BYTE ; pointer to string ; pointer to string
26 Str_copy PROC USES eax ecx esi edi, source:ptr BYTE, ; source string target:ptr BYTE ; target string INVOKE Str_length,source mov ecx,eax inc ecx mov esi,source mov edi,target cld rep movsb ret Str_copy ENDP ; EAX = length source ; REP count ; add 1 for null byte ; direction = up ; copy the string
27 The Str_trim procedure removes all occurrences of a selected trailing character from a null-terminated string Prototype Str_trim PROTO, Example pstring:ptr BYTE, char:byte.data mystring BYTE "Hello###",0.code INVOKE Str_trim, ADDR mystring, '#' mystring = "Hello" ; points to string ; char to remove
28 Str_trim checks a number of possible cases (shown here with # as the trailing character): The string is empty The string contains other characters followed by one or more trailing characters, as in "Hello##" The string contains only one character, the trailing character, as in "#" The string contains no trailing character, as in "Hello" or "H" The string contains one or more trailing characters followed by one or more nontrailing characters, as in "#H" or "###Hello"
29 Using the first definition in the table, position of EDI when SCASB stops
30 Str_trim PROC USES eax ecx edi, pstring:ptr BYTE, ; points to string char:byte ; char to remove mov edi,pstring INVOKE Str_length,edi ; returns length in EAX cmp eax,0 ; zero-length string? je L2 ; yes: exit mov ecx,eax ; no: counter = string length dec eax add edi,eax ; EDI points to last char mov al,char ; char to trim std ; direction = reverse repe scasb ; skip past trim character jne L1 ; removed first character? dec edi ; adjust EDI: ZF=1 && ECX=0 L1: mov BYTE PTR [edi+2],0 ; insert null byte L2: ret Str_trim ENDP
31 The Str_ucase procedure converts a string to all uppercase characters It returns no value Prototype Str_ucase PROTO, Example pstring:ptr BYTE.data mystring BYTE "Hello",0.code INVOKE Str_ucase, ADDR mystring ; pointer to string
32 Str_ucase PROC USES eax esi, pstring:ptr BYTE mov esi,pstring L1: mov al,[esi] ; get char cmp al,0 ; end of string? je L3 ; yes: quit cmp al,'a' ; below "a"? jb L2 cmp al,'z' ; above "z"? ja L2 and BYTE PTR [esi], b; convert the char L2: inc esi ; next char jmp L1 L3: ret Str_ucase ENDP
33 Str_compare Compares two strings pointed to by RSI and RDI Sets the Carry and Zero flags in the same manner as the CMP instruction Str_copy Copies a source string to a location identified by a target pointer Str_length Returns the length of a null-terminated string
34 Gets the length of a string. Receives: RCX points to the string. Returns length of string in RAX. Str_length PROC USES rdi mov rdi,rcx ; get pointer mov eax,0 ; character counter L1: cmp BYTE PTR [rdi],0 ; end of string? je L2 ; yes: quit inc rdi ; no: point to next inc rax ; add 1 to count jmp L1 L2: ret ; return count in RAX Str_length ENDP
35 Base-Index Operands Base-Index Displacement
36 A base-index operand adds the values of two registers (called base and index), producing an effective address Any two 32-bit general-purpose registers may be used (NOTE: esp is not a general-purpose register) In 64-bit mode, you use 64-bit registers for bases and indexes Base-index operands are great for accessing arrays of structures A structure groups together data under a single name
37 A common application of base-index addressing has to do with addressing arrays of structures (Chapter 10) The following defines a structure named COORD containing X and Y screen coordinates COORD STRUCT X WORD? ; offset 00 Y WORD? ; offset 02 COORD ENDS Then we can define an array of COORD objects.data setofcoordinates COORD 10 DUP(<>)
38 The following code loops through the array and displays each Y-coordinate mov ebx,offset setofcoordinates mov esi,2 ; offset of Y value mov eax,0 L1:mov ax,[ebx+esi] call WriteDec add ebx,sizeof COORD loop L1
39 A base-index-displacement operand adds base and index registers to a constant, producing an effective address Any two 32-bit general-purpose register can be used Common formats [ base + index + displacement ] displacement [ base + index ]
40 A 64-bit base-index-displacement operand adds base and index registers to a constant, producing a 64-bit effective address Any two 64-bit general-purpose registers can be used Common formats [ base + index + displacement ] displacement [ base + index ]
41 Imagine a table with three rows and five columns The data can be arranged in any format on the page table BYTE 10h, 20h, 30h, 40h, 50h BYTE 60h, 70h, 80h, 90h, 0A0h BYTE 0B0h, 0C0h, 0D0h, 0E0h, 0F0h NumCols = 5 Alternative format table BYTE 10h,20h,30h,40h,50h,60h,70h, 80h,90h,0A0h, 0B0h,0C0h,0D0h, 0E0h,0F0h NumCols = 5
42 The following 32-bit code loads the table element stored in row 1, column 2 RowNumber = 1 ColumnNumber = 2 mov mov mov ebx,numcols * RowNumber esi,columnnumber al,table[ebx + esi] A0 B0 C0 D0 E0 F0 table table[ebx] table[ebx + esi]
43 The following 64-bit code loads the table element stored in row 1, column 2 RowNumber = 1 ColumnNumber = 2 mov mov mov rbx,numcols * RowNumber rsi,columnnumber al,table[rbx + rsi] A0 B0 C0 D0 E0 F0 table table[ebx] table[ebx + esi]
44 Bubble Sort A simple sorting algorithm that works well for small arrays Binary Search A simple searching algorithm that works well for large arrays of values that have been placed in either ascending or descending order
45 Each pair of adjacent values is compared, and exchanged if the values are not ordered correctly One Pass (Bubble Sort) (shaded values have been exchanged)
46 N = array size, cx1 = outer loop counter, cx2 = inner loop counter cx1 = N - 1 while( cx1 > 0 ) { esi = addr(array) cx2 = cx1 while( cx2 > 0 ) { if( array[esi] < array[esi+4] ) exchange( array[esi], array[esi+4] ) add esi,4 dec cx2 } dec cx1 }
47 BubbleSort PROC USES eax ecx esi, parray:ptr DWORD,Count:DWORD mov ecx,count dec ecx ; decrement count by 1 L1: push ecx ; save outer loop count mov esi,parray ; point to first value L2: mov eax,[esi] ; get array value cmp [esi+4],eax ; compare a pair of values jge L3 ; if [esi] <= [edi], skip xchg eax,[esi+4] ; else exchange the pair mov [esi],eax L3: add esi,4 ; move both pointers forward loop L2 ; inner loop pop ecx ; retrieve outer loop count loop L1 ; else repeat outer loop L4: ret BubbleSort ENDP
48 Searching algorithm, well-suited to large ordered data sets Divide and conquer strategy Each "guess" divides the list in half Classified as an O(log n) algorithm As the number of array elements increases by a factor of n, the average search time increases by a factor of log n
49 Array Size (n) Maximum Number of Comparisons: (log 2 n + 1) , , ,048, ,294,967,296 33
50 int BinSearch( int values[], const int searchval, int count ) { int first = 0; int last = count - 1; while( first <= last ) { int mid = (last + first) / 2; if( values[mid] < searchval ) first = mid + 1; else if( values[mid] > searchval ) last = mid - 1; } else return mid; } return -1; // success // not found
51 BinarySearch PROC uses ebx edx esi edi, parray:ptr DWORD,; pointer to array Count:DWORD, ; array size searchval:dword ; search value LOCAL first:dword, ; first position last:dword, ; last position mid:dword ; midpoint mov first,0 ; first = 0 mov eax,count ; last = (count - 1) dec eax mov last,eax mov edi,searchval ; EDI = searchval mov ebx,parray ; EBX points to the array L1: ; while first <= last mov eax,first cmp eax,last jg L5 ; exit search
52 ; mid = (last + first) / 2 mov eax,last add eax,first base-index shr eax,1 addressing mov mid,eax ; EDX = values[mid] mov esi,mid shl esi,2 ; scale mid value by 4 mov edx,[ebx+esi] ; EDX = values[mid] ; if ( EDX < searchval(edi) ) ; first = mid + 1; cmp edx,edi jge L2 mov eax,mid ; first = mid + 1 inc eax mov first,eax jmp L4 ; continue the loop
53 ; else if( EDX > searchval(edi) ) ; last = mid - 1; L2: cmp edx,edi ; (could be removed) jle L3 mov eax,mid ; last = mid - 1 dec eax mov last,eax jmp L4 ; continue the loop ; else return mid L3: mov eax,mid ; value found jmp L9 ; return (mid) L4: jmp L1 ; continue the loop L5: mov eax,-1 ; search failed L9: ret BinarySearch ENDP
54 In Java, strings identifiers are references to other storage Think of a reference as a pointer, or address Ways to load and store a string: ldc: loads a reference to a string literal from the constant pool astore: pops a string reference from the stack and stores it in a local variable
55 Java: String empinfo = "10034Smith"; String id = empinfo.substring(0,5); Bytecode disassembly: invokevirtual calls a class method
56 String primitives are optimized for efficiency Strings and arrays are essentially the same Keep code inside loops simple Use base-index operands with two-dimensional arrays Avoid the bubble sort for large arrays Use binary search for large sequentially ordered arrays
Computer Organization and Assembly Language
Computer Organization and Assembly Language Lecture 8 - Strings and Arrays Introduction We already know that assembly code will execute significantly faster than code written in a higher-level language
Complete 8086 instruction set
Page 1 of 53 Complete 8086 instruction set Quick reference: AAA AAD AAM AAS ADC ADD AND CALL CBW CLC CLD CLI CMC CMP CMPSB CMPSW CWD DAA DAS DEC DIV HLT IDIV IMUL IN INC INT INTO I JA JAE JB JBE JC JCXZ
Systems Design & Programming Data Movement Instructions. Intel Assembly
Intel Assembly Data Movement Instruction: mov (covered already) push, pop lea (mov and offset) lds, les, lfs, lgs, lss movs, lods, stos ins, outs xchg, xlat lahf, sahf (not covered) in, out movsx, movzx
Using Heap Allocation in Intel Assembly Language
Using Heap Allocation in Intel Assembly Language Copyright 2005, Kip R. Irvine. All rights reserved. Dynamic memory allocation is a feature we take for granted in high-level languages such as C++ and Java.
Software Fingerprinting for Automated Malicious Code Analysis
Software Fingerprinting for Automated Malicious Code Analysis Philippe Charland Mission Critical Cyber Security Section October 25, 2012 Terms of Release: This document is approved for release to Defence
Character Translation Methods
Supplement to: Irvine, Kip R. Assembly Language for Intel-Based Computers, 4th Edition. This file may be duplicated or printed for classroom use, as long as the author name, book title, and copyright notice
64-Bit NASM Notes. Invoking 64-Bit NASM
64-Bit NASM Notes The transition from 32- to 64-bit architectures is no joke, as anyone who has wrestled with 32/64 bit incompatibilities will attest We note here some key differences between 32- and 64-bit
Lecture 7: Machine-Level Programming I: Basics Mohamed Zahran (aka Z) [email protected] http://www.mzahran.com
CSCI-UA.0201-003 Computer Systems Organization Lecture 7: Machine-Level Programming I: Basics Mohamed Zahran (aka Z) [email protected] http://www.mzahran.com Some slides adapted (and slightly modified)
A Tiny Guide to Programming in 32-bit x86 Assembly Language
CS308, Spring 1999 A Tiny Guide to Programming in 32-bit x86 Assembly Language by Adam Ferrari, [email protected] (with changes by Alan Batson, [email protected] and Mike Lack, [email protected])
How To Use A Computer With A Screen On It (For A Powerbook)
page 44,100 TITLE ASMXMPLE Video equ 10h ;video functions interrupt number Keyboard equ 16h ;keyboard functions interrupt number DOS equ 21h ;call DOS interrupt number PrtSc equ 5h ;Print Screen Bios interrupt
Analysis of Win32.Scream
Analysis of Win32.Scream 1. Introduction Scream is a very interesting virus as it combines a lot of techniques written inside of it. In this paper I ll cover all of its features and internals. I ll dissect
x64 Cheat Sheet Fall 2015
CS 33 Intro Computer Systems Doeppner x64 Cheat Sheet Fall 2015 1 x64 Registers x64 assembly code uses sixteen 64-bit registers. Additionally, the lower bytes of some of these registers may be accessed
Instruction Set Architecture
CS:APP Chapter 4 Computer Architecture Instruction Set Architecture Randal E. Bryant adapted by Jason Fritts http://csapp.cs.cmu.edu CS:APP2e Hardware Architecture - using Y86 ISA For learning aspects
8. MACROS, Modules, and Mouse
8. MACROS, Modules, and Mouse Background Macros, Modules and the Mouse is a combination of concepts that will introduce you to modular programming while learning how to interface with the mouse. Macros
Machine-Level Programming II: Arithmetic & Control
Mellon Machine-Level Programming II: Arithmetic & Control 15-213 / 18-213: Introduction to Computer Systems 6 th Lecture, Jan 29, 2015 Instructors: Seth Copen Goldstein, Franz Franchetti, Greg Kesden 1
X86-64 Architecture Guide
X86-64 Architecture Guide For the code-generation project, we shall expose you to a simplified version of the x86-64 platform. Example Consider the following Decaf program: class Program { int foo(int
Faculty of Engineering Student Number:
Philadelphia University Student Name: Faculty of Engineering Student Number: Dept. of Computer Engineering Final Exam, First Semester: 2012/2013 Course Title: Microprocessors Date: 17/01//2013 Course No:
Assembly Language: Function Calls" Jennifer Rexford!
Assembly Language: Function Calls" Jennifer Rexford! 1 Goals of this Lecture" Function call problems:! Calling and returning! Passing parameters! Storing local variables! Handling registers without interference!
Abysssec Research. 1) Advisory information. 2) Vulnerable version
Abysssec Research 1) Advisory information Title Version Discovery Vendor Impact Contact Twitter CVE : Apple QuickTime FlashPix NumberOfTiles Remote Code Execution Vulnerability : QuickTime player 7.6.5
Hacking Techniques & Intrusion Detection. Ali Al-Shemery arabnix [at] gmail
Hacking Techniques & Intrusion Detection Ali Al-Shemery arabnix [at] gmail All materials is licensed under a Creative Commons Share Alike license http://creativecommonsorg/licenses/by-sa/30/ # whoami Ali
Overview of IA-32 assembly programming. Lars Ailo Bongo University of Tromsø
Overview of IA-32 assembly programming Lars Ailo Bongo University of Tromsø Contents 1 Introduction... 2 2 IA-32 assembly programming... 3 2.1 Assembly Language Statements... 3 2.1 Modes...4 2.2 Registers...4
CS:APP Chapter 4 Computer Architecture Instruction Set Architecture. CS:APP2e
CS:APP Chapter 4 Computer Architecture Instruction Set Architecture CS:APP2e Instruction Set Architecture Assembly Language View Processor state Registers, memory, Instructions addl, pushl, ret, How instructions
CS412/CS413. Introduction to Compilers Tim Teitelbaum. Lecture 20: Stack Frames 7 March 08
CS412/CS413 Introduction to Compilers Tim Teitelbaum Lecture 20: Stack Frames 7 March 08 CS 412/413 Spring 2008 Introduction to Compilers 1 Where We Are Source code if (b == 0) a = b; Low-level IR code
CS61: Systems Programing and Machine Organization
CS61: Systems Programing and Machine Organization Fall 2009 Section Notes for Week 2 (September 14 th - 18 th ) Topics to be covered: I. Binary Basics II. Signed Numbers III. Architecture Overview IV.
Computer Organization and Architecture
Computer Organization and Architecture Chapter 11 Instruction Sets: Addressing Modes and Formats Instruction Set Design One goal of instruction set design is to minimize instruction length Another goal
Return-oriented programming without returns
Faculty of Computer Science Institute for System Architecture, Operating Systems Group Return-oriented programming without urns S. Checkoway, L. Davi, A. Dmitrienko, A. Sadeghi, H. Shacham, M. Winandy
MACHINE ARCHITECTURE & LANGUAGE
in the name of God the compassionate, the merciful notes on MACHINE ARCHITECTURE & LANGUAGE compiled by Jumong Chap. 9 Microprocessor Fundamentals A system designer should consider a microprocessor-based
esrever gnireenigne tfosorcim seiranib
esrever gnireenigne tfosorcim seiranib Alexander Sotirov [email protected] CanSecWest / core06 Reverse Engineering Microsoft Binaries Alexander Sotirov [email protected] CanSecWest / core06 Overview
Windows Assembly Programming Tutorial
JEFF HUANG ([email protected]) December 10, 2003 Windows Assembly Programming Tutorial Version 1.02 Copyright 2003, Jeff Huang. All rights reserved. by Jeff Huang Table of Contents Introduction... 2 Why
Machine Programming II: Instruc8ons
Machine Programming II: Instrucons Move instrucons, registers, and operands Complete addressing mode, address computaon (leal) Arithmec operaons (including some x6 6 instrucons) Condion codes Control,
Buffer Overflows. Security 2011
Buffer Overflows Security 2011 Memory Organiza;on Topics Kernel organizes memory in pages Typically 4k bytes Processes operate in a Virtual Memory Space Mapped to real 4k pages Could live in RAM or be
REpsych. : psycholigical warfare in reverse engineering. def con 2015 // domas
REpsych : psycholigical warfare in reverse engineering { def con 2015 // domas Warning This serves no purpose Taking something apart to figure out how it works With software Interfacing Documentation Obsolescence
Compiler Construction
Compiler Construction Lecture 1 - An Overview 2003 Robert M. Siegfried All rights reserved A few basic definitions Translate - v, a.to turn into one s own language or another. b. to transform or turn from
Analysis of Binary Search algorithm and Selection Sort algorithm
Analysis of Binary Search algorithm and Selection Sort algorithm In this section we shall take up two representative problems in computer science, work out the algorithms based on the best strategy to
Fighting malware on your own
Fighting malware on your own Vitaliy Kamlyuk Senior Virus Analyst Kaspersky Lab [email protected] Why fight malware on your own? 5 reasons: 1. Touch 100% of protection yourself 2. Be prepared
by Kip Irvine. Last update: 12/11/2003
Loading and Executing a Child Process by Kip Irvine. Last update: 12/11/2003 MS-DOS has always taken a fairly straightforward approach to loading and executing programs. From the start, it was designed
Intel 8086 architecture
Intel 8086 architecture Today we ll take a look at Intel s 8086, which is one of the oldest and yet most prevalent processor architectures around. We ll make many comparisons between the MIPS and 8086
COMPUTERS ORGANIZATION 2ND YEAR COMPUTE SCIENCE MANAGEMENT ENGINEERING JOSÉ GARCÍA RODRÍGUEZ JOSÉ ANTONIO SERRA PÉREZ
COMPUTERS ORGANIZATION 2ND YEAR COMPUTE SCIENCE MANAGEMENT ENGINEERING UNIT 1 - INTRODUCTION JOSÉ GARCÍA RODRÍGUEZ JOSÉ ANTONIO SERRA PÉREZ Unit 1.MaNoTaS 1 Definitions (I) Description A computer is: A
Stack Overflows. Mitchell Adair
Stack Overflows Mitchell Adair Outline Why? What? There once was a VM Virtual Memory Registers Stack stack1, stack2, stack3 Resources Why? Real problem Real money Real recognition Still prevalent Very
UIL Computer Science for Dummies by Jake Warren and works from Mr. Fleming
UIL Computer Science for Dummies by Jake Warren and works from Mr. Fleming 1 2 Foreword First of all, this book isn t really for dummies. I wrote it for myself and other kids who are on the team. Everything
High-speed image processing algorithms using MMX hardware
High-speed image processing algorithms using MMX hardware J. W. V. Miller and J. Wood The University of Michigan-Dearborn ABSTRACT Low-cost PC-based machine vision systems have become more common due to
DATA STRUCTURES USING C
DATA STRUCTURES USING C QUESTION BANK UNIT I 1. Define data. 2. Define Entity. 3. Define information. 4. Define Array. 5. Define data structure. 6. Give any two applications of data structures. 7. Give
Unpacked BCD Arithmetic. BCD (ASCII) Arithmetic. Where and Why is BCD used? From the SQL Server Manual. Packed BCD, ASCII, Unpacked BCD
BCD (ASCII) Arithmetic The Intel Instruction set can handle both packed (two digits per byte) and unpacked BCD (one decimal digit per byte) We will first look at unpacked BCD Unpacked BCD can be either
Exceptions in MIPS. know the exception mechanism in MIPS be able to write a simple exception handler for a MIPS machine
7 Objectives After completing this lab you will: know the exception mechanism in MIPS be able to write a simple exception handler for a MIPS machine Introduction Branches and jumps provide ways to change
TitanMist: Your First Step to Reversing Nirvana TitanMist. mist.reversinglabs.com
TitanMist: Your First Step to Reversing Nirvana TitanMist mist.reversinglabs.com Contents Introduction to TitanEngine.. 3 Introduction to TitanMist 4 Creating an unpacker for TitanMist.. 5 References and
1 The Java Virtual Machine
1 The Java Virtual Machine About the Spec Format This document describes the Java virtual machine and the instruction set. In this introduction, each component of the machine is briefly described. This
Chapter 7D The Java Virtual Machine
This sub chapter discusses another architecture, that of the JVM (Java Virtual Machine). In general, a VM (Virtual Machine) is a hypothetical machine (implemented in either hardware or software) that directly
Instruction Set Architecture (ISA)
Instruction Set Architecture (ISA) * Instruction set architecture of a machine fills the semantic gap between the user and the machine. * ISA serves as the starting point for the design of a new machine
Assembly Language Tutorial
Assembly Language Tutorial ASSEMBLY LANGUAGE TUTORIAL by tutorialspoint.com tutorialspoint.com i ABOUT THE TUTORIAL Assembly Programming Tutorial Assembly language is a low-level programming language for
OpenBSD Remote Exploit
OpenBSD Remote Exploit Only two remote holes in the default install Alfredo Ortega, Gerardo Richarte Core Security April 2007 Abstract OpenBSD is regarded as a very secure Operating System. This article
Application-Specific Attacks: Leveraging the ActionScript Virtual Machine
IBM Global Technology Services April 2008 Application-Specific Attacks: Leveraging the ActionScript Virtual Machine By Mark Dowd X-Force Researcher IBM Internet Security Systems ([email protected])
About the Tutorial. Audience. Prerequisites. Copyright & Disclaimer
About the Tutorial Assembly language is a low-level programming language for a computer or other programmable device specific to a particular computer architecture in contrast to most high-level programming
Using MMX Instructions to Convert RGB To YUV Color Conversion
Using MMX Instructions to Convert RGB To YUV Color Conversion Information for Developers and ISVs From Intel Developer Services www.intel.com/ids Information in this document is provided in connection
Test Driven Development in Assembler a little story about growing software from nothing
Test Driven Development in Assembler a little story about growing software from nothing Olve Maudal During the last decade Test-Driven Development has become an established practice for developing software
PROBLEMS (Cap. 4 - Istruzioni macchina)
98 CHAPTER 2 MACHINE INSTRUCTIONS AND PROGRAMS PROBLEMS (Cap. 4 - Istruzioni macchina) 2.1 Represent the decimal values 5, 2, 14, 10, 26, 19, 51, and 43, as signed, 7-bit numbers in the following binary
1. General function and functionality of the malware
1. General function and functionality of the malware The malware executes in a command shell, it begins by checking to see if the executing file contains the MZP file extension, and then continues to access
An Introduction to Assembly Programming with the ARM 32-bit Processor Family
An Introduction to Assembly Programming with the ARM 32-bit Processor Family G. Agosta Politecnico di Milano December 3, 2011 Contents 1 Introduction 1 1.1 Prerequisites............................. 2
Introduction. Application Security. Reasons For Reverse Engineering. This lecture. Java Byte Code
Introduction Application Security Tom Chothia Computer Security, Lecture 16 Compiled code is really just data which can be edit and inspected. By examining low level code protections can be removed and
Dynamic Behavior Analysis Using Binary Instrumentation
Dynamic Behavior Analysis Using Binary Instrumentation Jonathan Salwan [email protected] St'Hack Bordeaux France March 27 2015 Keywords: program analysis, DBI, DBA, Pin, concrete execution, symbolic
Storage Classes CS 110B - Rule Storage Classes Page 18-1 \handouts\storclas
CS 110B - Rule Storage Classes Page 18-1 Attributes are distinctive features of a variable. Data type, int or double for example, is an attribute. Storage class is another attribute. There are four storage
The 80x86 Instruction Set
Thi d t t d ith F M k 4 0 2 The 80x86 Instruction Set Chapter Six Until now, there has been little discussion of the instructions available on the 80x86 microprocessor. This chapter rectifies this situation.
Windows XP SP3 Registry Handling Buffer Overflow
Windows XP SP3 Registry Handling Buffer Overflow by Matthew j00ru Jurczyk and Gynvael Coldwind Hispasec 1. Basic Information Name Windows XP SP3 Registry Handling Buffer Overflow Class Design Error Impact
Attacking x86 Windows Binaries by Jump Oriented Programming
Attacking x86 Windows Binaries by Jump Oriented Programming L. Erdődi * * Faculty of John von Neumann, Óbuda University, Budapest, Hungary [email protected] Abstract Jump oriented programming
The Java Virtual Machine (JVM) Pat Morin COMP 3002
The Java Virtual Machine (JVM) Pat Morin COMP 3002 Outline Topic 1 Topic 2 Subtopic 2.1 Subtopic 2.2 Topic 3 2 What is the JVM? The JVM is a specification of a computing machine Instruction set Primitive
Administration. Instruction scheduling. Modern processors. Examples. Simplified architecture model. CS 412 Introduction to Compilers
CS 4 Introduction to Compilers ndrew Myers Cornell University dministration Prelim tomorrow evening No class Wednesday P due in days Optional reading: Muchnick 7 Lecture : Instruction scheduling pr 0 Modern
l C-Programming l A real computer language l Data Representation l Everything goes down to bits and bytes l Machine representation Language
198:211 Computer Architecture Topics: Processor Design Where are we now? C-Programming A real computer language Data Representation Everything goes down to bits and bytes Machine representation Language
IA-32 Intel Architecture Software Developer s Manual
IA-32 Intel Architecture Software Developer s Manual Volume 2B: Instruction Set Reference, N-Z NOTE: The IA-32 Intel Architecture Software Developer s Manual consists of four volumes: Basic Architecture,
Chapter 7 Assembly Language
Chapter 7 Assembly Language Human-Readable Machine Language Computers like ones and zeros 0001110010000110 Humans like symbols ADD R6,R2,R6 increment index reg. Assembler is a program that turns symbols
CHAPTER 6 TASK MANAGEMENT
CHAPTER 6 TASK MANAGEMENT This chapter describes the IA-32 architecture s task management facilities. These facilities are only available when the processor is running in protected mode. 6.1. TASK MANAGEMENT
Advanced Computer Architecture-CS501. Computer Systems Design and Architecture 2.1, 2.2, 3.2
Lecture Handout Computer Architecture Lecture No. 2 Reading Material Vincent P. Heuring&Harry F. Jordan Chapter 2,Chapter3 Computer Systems Design and Architecture 2.1, 2.2, 3.2 Summary 1) A taxonomy of
BCD (ASCII) Arithmetic. Where and Why is BCD used? Packed BCD, ASCII, Unpacked BCD. BCD Adjustment Instructions AAA. Example
BCD (ASCII) Arithmetic We will first look at unpacked BCD which means strings that look like '4567'. Bytes then look like 34h 35h 36h 37h OR: 04h 05h 06h 07h x86 processors also have instructions for packed
Lecture 27 C and Assembly
Ananda Gunawardena Lecture 27 C and Assembly This is a quick introduction to working with x86 assembly. Some of the instructions and register names must be check for latest commands and register names.
Off-by-One exploitation tutorial
Off-by-One exploitation tutorial By Saif El-Sherei www.elsherei.com Introduction: I decided to get a bit more into Linux exploitation, so I thought it would be nice if I document this as a good friend
MICROPROCESSOR AND MICROCOMPUTER BASICS
Introduction MICROPROCESSOR AND MICROCOMPUTER BASICS At present there are many types and sizes of computers available. These computers are designed and constructed based on digital and Integrated Circuit
Compilers. Introduction to Compilers. Lecture 1. Spring term. Mick O Donnell: [email protected] Alfonso Ortega: alfonso.ortega@uam.
Compilers Spring term Mick O Donnell: [email protected] Alfonso Ortega: [email protected] Lecture 1 to Compilers 1 Topic 1: What is a Compiler? 3 What is a Compiler? A compiler is a computer
Z80 Instruction Set. Z80 Assembly Language
75 Z80 Assembly Language The assembly language allows the user to write a program without concern for memory addresses or machine instruction formats. It uses symbolic addresses to identify memory locations
LC-3 Assembly Language
LC-3 Assembly Language Programming and tips Textbook Chapter 7 CMPE12 Summer 2008 Assembly and Assembler Machine language - binary Assembly language - symbolic 0001110010000110 An assembler is a program
Jorix kernel: real-time scheduling
Jorix kernel: real-time scheduling Joris Huizer Kwie Min Wong May 16, 2007 1 Introduction As a specialized part of the kernel, we implemented two real-time scheduling algorithms: RM (rate monotonic) and
Chapter 4 Processor Architecture
Chapter 4 Processor Architecture Modern microprocessors are among the most complex systems ever created by humans. A single silicon chip, roughly the size of a fingernail, can contain a complete high-performance
Notes on Assembly Language
Notes on Assembly Language Brief introduction to assembly programming The main components of a computer that take part in the execution of a program written in assembly code are the following: A set of
C Compiler Targeting the Java Virtual Machine
C Compiler Targeting the Java Virtual Machine Jack Pien Senior Honors Thesis (Advisor: Javed A. Aslam) Dartmouth College Computer Science Technical Report PCS-TR98-334 May 30, 1998 Abstract One of the
Computer Architectures
Computer Architectures 2. Instruction Set Architectures 2015. február 12. Budapest Gábor Horváth associate professor BUTE Dept. of Networked Systems and Services [email protected] 2 Instruction set architectures
CS:APP Chapter 4 Computer Architecture. Wrap-Up. William J. Taffe Plymouth State University. using the slides of
CS:APP Chapter 4 Computer Architecture Wrap-Up William J. Taffe Plymouth State University using the slides of Randal E. Bryant Carnegie Mellon University Overview Wrap-Up of PIPE Design Performance analysis
PCI BIOS SPECIFICATION. Revision 2.1
PCI BIOS SPECIFICATION Revision 2.1 August 26, 1994 ii PCI BIOS Specification Revision 2.1 REVISION REVISION HISTORY DATE 1.0 Original issue distributed by Intel 9/28/92 2.0 Updated to be in synch with
Handout 1. Introduction to Java programming language. Java primitive types and operations. Reading keyboard Input using class Scanner.
Handout 1 CS603 Object-Oriented Programming Fall 15 Page 1 of 11 Handout 1 Introduction to Java programming language. Java primitive types and operations. Reading keyboard Input using class Scanner. Java
Harnessing Intelligence from Malware Repositories
Harnessing Intelligence from Malware Repositories Arun Lakhotia and Vivek Notani Software Research Lab University of Louisiana at Lafayette [email protected], [email protected] 7/22/2015 (C) 2015
W4118 Operating Systems. Junfeng Yang
W4118 Operating Systems Junfeng Yang Outline Linux overview Interrupt in Linux System call in Linux What is Linux A modern, open-source OS, based on UNIX standards 1991, 0.1 MLOC, single developer Linus
8085 INSTRUCTION SET
DATA TRANSFER INSTRUCTIONS Opcode Operand Description 8085 INSTRUCTION SET INSTRUCTION DETAILS Copy from source to destination OV Rd, Rs This instruction copies the contents of the source, Rs register
Instruction Set Design
Instruction Set Design Instruction Set Architecture: to what purpose? ISA provides the level of abstraction between the software and the hardware One of the most important abstraction in CS It s narrow,
Heap-based Buffer Overflow Vulnerability in Adobe Flash Player
Analysis of Zero-Day Exploit_Issue 03 Heap-based Buffer Overflow Vulnerability in Adobe Flash Player CVE-2014-0556 20 December 2014 Table of Content Overview... 3 1. CVE-2014-0556 Vulnerability... 3 2.
Exploiting nginx chunked overflow bug, the undisclosed attack vector
Exploiting nginx chunked overflow bug, the undisclosed attack vector Long Le [email protected] About VNSECURITY.NET CLGT CTF team 2 VNSECURITY.NET In this talk Nginx brief introduction Nginx chunked
ALLIED PAPER : DISCRETE MATHEMATICS (for B.Sc. Computer Technology & B.Sc. Multimedia and Web Technology)
ALLIED PAPER : DISCRETE MATHEMATICS (for B.Sc. Computer Technology & B.Sc. Multimedia and Web Technology) Subject Description: This subject deals with discrete structures like set theory, mathematical
1 Classical Universal Computer 3
Chapter 6: Machine Language and Assembler Christian Jacob 1 Classical Universal Computer 3 1.1 Von Neumann Architecture 3 1.2 CPU and RAM 5 1.3 Arithmetic Logical Unit (ALU) 6 1.4 Arithmetic Logical Unit
Instruction Set Architecture. or How to talk to computers if you aren t in Star Trek
Instruction Set Architecture or How to talk to computers if you aren t in Star Trek The Instruction Set Architecture Application Compiler Instr. Set Proc. Operating System I/O system Instruction Set Architecture
Introduction to Reverse Engineering
Introduction to Reverse Engineering Inbar Raz Malware Research Lab Manager December 2011 What is Reverse Engineering? Reverse engineering is the process of discovering the technological principles of a
Illustration 1: Diagram of program function and data flow
The contract called for creation of a random access database of plumbing shops within the near perimeter of FIU Engineering school. The database features a rating number from 1-10 to offer a guideline
Zabin Visram Room CS115 CS126 Searching. Binary Search
Zabin Visram Room CS115 CS126 Searching Binary Search Binary Search Sequential search is not efficient for large lists as it searches half the list, on average Another search algorithm Binary search Very
Attacks on Virtual Machine Emulators
SYMANTEC ADVANCED THREAT RESEARCH 1 Attacks on Virtual Machine Emulators Peter Ferrie, Senior Principal Researcher, Symantec Advanced Threat Research [email protected] Abstract As virtual machine
Programming from the Ground Up. Jonathan Bartlett
Programming from the Ground Up Jonathan Bartlett Programming from the Ground Up by Jonathan Bartlett Copyright 2002 by Jonathan Bartlett Permission is granted to copy, distribute and/or modify this document
Number Representation
Number Representation CS10001: Programming & Data Structures Pallab Dasgupta Professor, Dept. of Computer Sc. & Engg., Indian Institute of Technology Kharagpur Topics to be Discussed How are numeric data
