This example shows how to go directly to the Windows API and not link in the C Standard Library. global _main extern [email protected] extern [email protected] extern [email protected] section .text _main: ; DWORD bytes; mov ebp, esp sub esp, 4 ; hStdOut = GetstdHandle( STD_OUTPUT_HANDLE) push -11 call [email protected] mov ebx, eax ; WriteFile( hstdOut, message, … Read more
ldr r0,=something … something: means load the address of the label something into the register r0. The assembler then adds a word somewhere in reach of the ldr instruction and replaces it with a ldr r0,[pc,#offset] instruction So this shortcut ldr r0,=0x12345678 means load 0x12345678 into r0. being mostly fixed length instructions, you cant load … Read more
Something i found * EAX – Accumulator Register * EBX – Base Register * ECX – Counter Register * EDX – Data Register * ESI – Source Index * EDI – Destination Index * EBP – Base Pointer * ESP – Stack Pointer
implementing alloca actually requires compiler assistance. A few people here are saying it’s as easy as: sub esp, <size> which is unfortunately only half of the picture. Yes that would “allocate space on the stack” but there are a couple of gotchas. if the compiler had emitted code which references other variables relative to esp … Read more
leal, or lea full name is “Load effective address” and it does exactly this: It does an address calculation. In your example the address calculation is very simple, because it just adds a offset to ebx and stores the result in eax: eax = ebx + 0x10 lea can do a lot more. It can … Read more
In this case, the $ means the current address according to the assembler. $ – msg is the current address of the assembler minus the address of msg, which would be the length of the string.
Bottom line (TL;DR): LFENCE alone indeed seems useless for memory ordering, however it does not make SFENCE a substitute for MFENCE. The “arithmetic” logic in the question is not applicable. Here is an excerpt from Intel’s Software Developers Manual, volume 3, section 8.2.2 (the edition 325384-052US of September 2014), the same that I used in … Read more
Most Windows process (*.exe) are loaded in (user mode) memory address 0x00400000, that’s what we call the “virtual address” (VA) – because they are visible only to each process, and will be converted to different physical addresses by the OS (visible by the kernel / driver layer). For example, a possible physical memory address (visible … Read more
After installing any version of Xcode targeting Intel-based Macs, you should be able to write assembly code. Xcode is a suite of tools, only one of which is the IDE, so you don’t have to use it if you don’t want to. (That said, if there are specific things you find clunky, please file a … Read more
[L1] means the memory contents at address L1. After running mov al, [L1] here, The al register will receive the byte at address L1 (the letter ‘w’).