{[ promptMessage ]}

Bookmark it

{[ promptMessage ]}

X86_Win32_Reverse_Engineering_Cheat_Sheet

X86_Win32_Reverse_Engineering_Cheat_Sheet - X86/ Registers...

Info icon This preview shows page 1. Sign up to view the full content.

View Full Document Right Arrow Icon
X86/W IN 32 R EVERSE E NGINEERING C HEAT ­ S HEET Registers Instructions G ENERAL P URPOSE 32 ­ BIT R EGISTERS ADD <dest>, <source> Adds <source> to <dest>. <dest> may be a register or memory. <source> may EAX Contains the return value of a function call. Be a register, memory or immediate value. ECX Used as a loop counter. "this" pointer in C++. CALL <loc> Call a function and return to the next instruction when finished. <proc> EBX General Purpose may be a relative offset from the current location, a register or memory addr. EDX General Purpose CMP <dest>, <source> Compare <source> with <dest> . Similar to SUB instruction but does not ESI Source index pointer Modify the <dest> operand with the result of the subtraction. EDI Destination index pointer DEC <dest> Subtract 1 from <dest>. <dest> may be a register or memory. ESP Stack pointer DIV <divisor> Divide the EDX:EAX registers (64 bit combo) by <divisor>. <divisor> may be EBP Stack base pointer a register or memory. S EGMENT R EGISTERS INC <dest> Add 1 to <dest>. <dest> may be a register or memory. CS Code segment JE <loc> Jump if Equal (ZF=1) to <loc>. SS Stack segment JG <loc> Jump if Greater (ZF=0 and SF=OF) to <loc>. DS Data segment JGE <loc> Jump if Greater or Equal (SF=OF) to <loc> . ES Extra data segment JLE <loc> Jump is Less or Equal (SF<>OF) to <loc>. FS Points to Thread Information Block (TIB) JMP <loc> Jump to <loc>. Unconditional. GS Extra data segment JNE <loc> Jump if Not Equal (ZF=0) to <loc>.
Image of page 1
This is the end of the preview. Sign up to access the rest of the document.

{[ snackBarMessage ]}

What students are saying

  • Left Quote Icon

    As a current student on this bumpy collegiate pathway, I stumbled upon Course Hero, where I can find study resources for nearly all my courses, get online help from tutors 24/7, and even share my old projects, papers, and lecture notes with other students.

    Student Picture

    Kiran Temple University Fox School of Business ‘17, Course Hero Intern

  • Left Quote Icon

    I cannot even describe how much Course Hero helped me this summer. It’s truly become something I can always rely on and help me. In the end, I was not only able to survive summer classes, but I was able to thrive thanks to Course Hero.

    Student Picture

    Dana University of Pennsylvania ‘17, Course Hero Intern

  • Left Quote Icon

    The ability to access any university’s resources through Course Hero proved invaluable in my case. I was behind on Tulane coursework and actually used UCLA’s materials to help me move forward and get everything together on time.

    Student Picture

    Jill Tulane University ‘16, Course Hero Intern