Transform your software architect career Object Oriented... · TMS320C6x ebx, eax ebx, 2 eax ecx....

2

Transcript of Transform your software architect career Object Oriented... · TMS320C6x ebx, eax ebx, 2 eax ecx....

Page 1: Transform your software architect career Object Oriented... · TMS320C6x ebx, eax ebx, 2 eax ecx. off ecx esiþ. ptr eei offset ae$1xSBad0ptype (is); bad optype" 000 000 goo 000 900
Page 2: Transform your software architect career Object Oriented... · TMS320C6x ebx, eax ebx, 2 eax ecx. off ecx esiþ. ptr eei offset ae$1xSBad0ptype (is); bad optype" 000 000 goo 000 900

Hunting Zero Days in Crash Dumps - POC"); document.write(i); … · 2018-01-08 · 0332c0f9 90 nop 0332c0fa eb24 jmp 0332c120 0332c0fc 5b pop ebx 0332c0fd 33c9 xor ecx,ecx 0332c0ff

Hunting Zero Days in Crash Dumps - POC"); document.write(i); … · 2018-01-08 · 0332c0f9 90 nop 0332c0fa eb24 jmp 0332c120 0332c0fc 5b pop ebx 0332c0fd 33c9 xor ecx,ecx 0332c0ff

ADD Instruction ADD destination,source destination = destination + source ADD AX,BX ADD SUM,EAX ADD EDX,ARRAY[EBX][ESI] ADD CL,5 ADD DL,[BX]

ADD Instruction ADD destination,source destination = destination + source ADD AX,BX ADD SUM,EAX ADD EDX,ARRAY[EBX][ESI] ADD CL,5 ADD DL,[BX]

ECX-TF - conseils-store.com · ecx p04 1000 1000 543 ecx p10 1000 1500 740 ecx s06 1200 1200 606 ... velux 9 2 ecx ecx ecx 10 11 2 20 mm 20 mm 451535-0709-ecx-tf.indd 9 25-06-2009

ECX-TF - conseils-store.com · ecx p04 1000 1000 543 ecx p10 1000 1500 740 ecx s06 1200 1200 606 ... velux 9 2 ecx ecx ecx 10 11 2 20 mm 20 mm 451535-0709-ecx-tf.indd 9 25-06-2009

ECX/media/marketing/ru/downloads... · ECX CK02 600 1000 490 ECX CK04 600 1200 550 ECX MK04 800 1200 550 ECX MK06 800 1400 610 ECX MK08 800 1650 680 ECX PK04 950 1200 550 ECX SK06

ECX/media/marketing/ru/downloads... · ECX CK02 600 1000 490 ECX CK04 600 1200 550 ECX MK04 800 1200 550 ECX MK06 800 1400 610 ECX MK08 800 1650 680 ECX PK04 950 1200 550 ECX SK06

Behind Enemy Lines Reverse Engineering C++ in Modern Ages · RAX/ EAX- stores the return value of functions. RCX/ ECX- Stores pointers to objects. MSVC __fastcall calling convention

Behind Enemy Lines Reverse Engineering C++ in Modern Ages · RAX/ EAX- stores the return value of functions. RCX/ ECX- Stores pointers to objects. MSVC __fastcall calling convention

AGeneralApproachforEfficiently ...• DAG"Representa3on" • Express"root"nodes"in"terms"of"leaf"nodes" 1:#mov#ecx,#esi 2:#movzxb#eax,#al 3:#shl#ecx,#0x5 4:#add#edx,0x1 5:#lea#esi,#ptr#[ecx+esi]

AGeneralApproachforEfficiently ...• DAG"Representa3on" • Express"root"nodes"in"terms"of"leaf"nodes" 1:#mov#ecx,#esi 2:#movzxb#eax,#al 3:#shl#ecx,#0x5 4:#add#edx,0x1 5:#lea#esi,#ptr#[ecx+esi]

DPD Presentation Template based on New Intel Foil …add eax, 16 cmp eax, ecx jl loop Vectorization Conversion of serial code into SIMD instructions that simultaneously operate on

DPD Presentation Template based on New Intel Foil …add eax, 16 cmp eax, ecx jl loop Vectorization Conversion of serial code into SIMD instructions that simultaneously operate on

Scan RoP chains in a process memory dumpcobweb.cs.uga.edu/~kangli/src/unRoP.pdfROP Gadget Chain Example pop eax ret AcroForm.api 0x69C6D386 pop ecx ret mov [eax],ecx ret 0x69B5CA9F

Scan RoP chains in a process memory dumpcobweb.cs.uga.edu/~kangli/src/unRoP.pdfROP Gadget Chain Example pop eax ret AcroForm.api 0x69C6D386 pop ecx ret mov [eax],ecx ret 0x69B5CA9F

Bilateral Algorithms for Symbolic Abstractionresearch.cs.wisc.edu/wpis/papers/tr1713.pdfbyte of 32-bit register eax, to bh, the second-to-lowestbyte of 32-bit register ebx. The semantics

Bilateral Algorithms for Symbolic Abstractionresearch.cs.wisc.edu/wpis/papers/tr1713.pdfbyte of 32-bit register eax, to bh, the second-to-lowestbyte of 32-bit register ebx. The semantics

#include "dump.h" int main ( int argc, char* argv[] ) { __asm { mov eax, 1// init eax to 1 mov ebx, esp; keep a copy of esp mov ecx, 3/* init ecx to 3.

#include "dump.h" int main ( int argc, char* argv[] ) { __asm { mov eax, 1// init eax to 1 mov ebx, esp; keep a copy of esp mov ecx, 3/* init ecx to 3.

Palestra EBX

Palestra EBX

アセンブラ短歌 - kozoskozos.jp/documents/LT_asm_tanka_osc2013tokyofall.pdf · アセンブラを見ると push $0 pop %eax push %eax inc %eax push $0x616d6179 push %eax inc

アセンブラ短歌 - kozoskozos.jp/documents/LT_asm_tanka_osc2013tokyofall.pdf · アセンブラを見ると push $0 pop %eax push %eax inc %eax push $0x616d6179 push %eax inc

Matthew “j00ru” Jurczyk, Gynvael Coldwind HISPASECvexillium.org/dl.php?confidence_slideshow.pdfRegistry Link Race Condition DoS - details Just like that: eax=00f8000f ebx=f40b6c68

Matthew “j00ru” Jurczyk, Gynvael Coldwind HISPASECvexillium.org/dl.php?confidence_slideshow.pdfRegistry Link Race Condition DoS - details Just like that: eax=00f8000f ebx=f40b6c68

EBX Visão 360

EBX Visão 360

Introduction to Shellcode Development Ionut Popescu · Linux shellcode example jmp short ender starter: xor eax, eax ;clean up the registers xor ebx, ebx xor edx, edx xor ecx, ecx

Introduction to Shellcode Development Ionut Popescu · Linux shellcode example jmp short ender starter: xor eax, eax ;clean up the registers xor ebx, ebx xor edx, edx xor ecx, ecx

LẬP TRÌNH ASSEMBLYdtnghi/cod/nasm.pdf · mov edx, lenUserMsg int 80h;Read and store the user input mov eax, 3 mov ebx, 2 mov ecx, num mov edx, 5 ;5 bytes (numeric, 1 for sign)

LẬP TRÌNH ASSEMBLYdtnghi/cod/nasm.pdf · mov edx, lenUserMsg int 80h;Read and store the user input mov eax, 3 mov ebx, 2 mov ecx, num mov edx, 5 ;5 bytes (numeric, 1 for sign)

defcon.org€¦ · r u'01DC0 nou push ô0.¼ß1DC4 pus Øß4ØIDC5 nov edx, [ebp+hdc -unused] eax, [ebvarg_8] edx [ebP+ EHRec . IMPLICIT MAIN ecx, [ebp large f-s:Ø, ecx hdc , int

defcon.org€¦ · r u'01DC0 nou push ô0.¼ß1DC4 pus Øß4ØIDC5 nov edx, [ebp+hdc -unused] eax, [ebvarg_8] edx [ebP+ EHRec . IMPLICIT MAIN ecx, [ebp large f-s:Ø, ecx hdc , int

X86*Assembly,*and*C;to;assembly* - University of Washington · 2011. 12. 9. · %ebx %esi %edi %esp %ebp se 4. UniversityofWashington* Integer*Registers*(IA32)* %eax %ecx %edx %ebx

X86*Assembly,*and*C;to;assembly* - University of Washington · 2011. 12. 9. · %ebx %esi %edi %esp %ebp se 4. UniversityofWashington* Integer*Registers*(IA32)* %eax %ecx %edx %ebx

Existem 8 registos principais de 32 bits no processador (existem mais como %EIP): %EAX %EBX %ECX %EDX %ESI %EDI %EBP %ESP Os registos são armazenados em.

Existem 8 registos principais de 32 bits no processador (existem mais como %EIP): %EAX %EBX %ECX %EDX %ESI %EDI %EBP %ESP Os registos são armazenados em.

generating programs from typesnpolikarpova/talks/lambda-days-2021.pdfmov [eax + info], ebx mov dword [eax + next], 0 mov ebx, [ebp + 8] cmp dword [ebx], 0 je null_pointer mov ebx,

generating programs from typesnpolikarpova/talks/lambda-days-2021.pdfmov [eax + info], ebx mov dword [eax + next], 0 mov ebx, [ebp + 8] cmp dword [ebx], 0 je null_pointer mov ebx,