Assembly Language for Beginners

11.4 Compiler’s anomalies. For programmer’s convenience, at least MSVC has pseudofunctions_rotl()and_rotr()^1 which are trans- l ...

11.5 Itanium. fcomp [esp+50h+var_3C] fnstsw ax test ah, 41h jz short loc_100040B7 The firstFXCHinstruction swapsST(0)andST(1), t ...

11.5. ITANIUM Listing 11.4: Linux Kernel 3.2.0.4 for Itanium 2 (McKinley) 0090| tea_encrypt: 0090|08 80 80 41 00 21 adds r16 = 9 ...

11.6 8086 memory model. can see here thenop.iinstructions (NOPat the place where the integer instruction might be) ornop.m (a me ...

11.7 Basic blocks reordering.. All 8086 registers are 16-bit, so to address more, special segment registers (CS, DS, ES, SS) wer ...

11.7. BASIC BLOCKS REORDERING jz short loc_6030D884 mov eax, [edx+30h] test eax, 400h jnz VInfreqskgfsync ; write to log continu ...

11.8 My experience with Hex-Rays 2.2.0. 11.8 My experience with Hex-Rays 2.2.0 11.8.1 Bugs.. There are couple of bugs. First of ...

11.8. MY EXPERIENCE WITH HEX-RAYS 2.2.0 fcomp ds:const_100 fld dword ptr [esp+16] ; comment this instruction and it will be OK f ...

11.8. MY EXPERIENCE WITH HEX-RAYS 2.2.0 int cdecl f(int a1, int a2) { int64 v2; // rax@1 v2 = abs(a1) - a2; return (HIDWORD(v2) ...

11.8. MY EXPERIENCE WITH HEX-RAYS 2.2.0 Many of these peculiarities can be solved by manual reordering of instructions, recompil ...

11.8. MY EXPERIENCE WITH HEX-RAYS 2.2.0 Again, warning would be great. Anyway, whenever you see variable ofchartype, or variable ...

11.8. MY EXPERIENCE WITH HEX-RAYS 2.2.0 11.8.5 Data types.. Data types is a problem for decompilers. Hex-Rays can be blind to ar ...

Chapter 12 Books/blogs worth reading 12.1 Books and other materials.. 12.1.1 Reverse Engineering. Eldad Eilam,Reversing: Secret ...

12.1. BOOKS AND OTHER MATERIALS 12.1.4 x86 / x86-64.. Intel manuals^7 AMD manuals^8 Agner Fog,The microarchitecture of Intel, A ...

12.1. BOOKS AND OTHER MATERIALS (For hard-core geeks with computer science and mathematical background) Donald E. Knuth,The Art ...

Chapter 13 Communities There are two excellentRE^1 -related subreddits on reddit.com:reddit.com/r/ReverseEngineering/andred- dit ...

Afterword Afterword ...

13.1 Questions?. 13.1 Questions? Do not hesitate to mail any questions to the author: [email protected]. Do you have any sugge ...

Appendix ...

.1 x86. .1 x86 .1.1 Terminology.. Common for 16-bit (8086/80286), 32-bit (80386, etc.), 64-bit. byte8-bit. TheDBassemblydirectiv ...