Tutorial:CodeInjection Integers - Revision history

Ross: Fixed minor typo.

2020-07-08T13:15:13Z

Fixed minor typo.

Dark Byte: Reverted edits by This content is not available (Talk) to last revision by TheyCallMeTim13

2019-03-18T19:07:50Z

Reverted edits by This content is not available (Talk) to last revision by TheyCallMeTim13

This content is not available: Replaced content with 'Sorry! Content not available.'

2019-03-16T16:05:03Z

Replaced content with 'Sorry! Content not available.'

TheyCallMeTim13: Created page with ' Category:Tutorial Category:Auto Assembler {{DISPLAYTITLE:Code Injection - Working with Integers}} This tutorial builds on the top…'

2018-05-07T03:02:43Z

Created page with ' Category:Tutorial Category:Auto Assembler {{DISPLAYTITLE:Code Injection - Working with Integers}} This tutorial builds on the top…'

New page

[[Category:Tutorial]]
[[Category:Auto Assembler]]
{{DISPLAYTITLE:Code Injection - Working with Integers}}
This tutorial builds on the topic of Code Injection:
{{TutorialsCodeInjection}}

 
Let's say you have an integer and some code that increases the value.
<pre>
add [eax+10],ecx
</pre>
<blockquote>
What if what writes to the value is only a [[Assembler:Commands:MOV|MOV]]. Try to find a spot above the write instruction that has an [[Assembler:Commands:ADD|ADD]] (or a [[Assembler:Commands:SUB|SUB]] depending on what you want to do).
<pre>
add ecx,ebx
//...
mov [eax+10],ecx
</pre>
</blockquote>

 
== Hardcoded value ==
We could just hardcode a value for this.
<pre>
add dword ptr [eax+10],(int)100 // #100 //// "#" is a short hand for integer
</pre>

 
== Editable value ==
We could use a [[Auto Assembler:label|label]], giving it some memory. And optionally [[Auto_Assembler:registerSymbol|register]] it so the label can be used on the table as an address.
<pre>
//...
alloc(someMem, 0x400)
//...
label(someSymbol)
registerSymbol(someSymbol)
//...
someMem:
//...
mov ecx,[someSymbol]
add [eax+10],ecx
//...
jmp return
//...
someSymbol:
dd (int)100
//...
</pre>

 
== Adding a Multiplier ==
We could add an editable value like above but use [[Assembler:Commands:IMUL|IMUL]] to add a multiplier to the script.
<pre>
//...
alloc(someMem, 0x400)
//...
label(someSymbol)
registerSymbol(someSymbol)
//...
someMem:
//...
imul ecx,[someSymbol]
add [eax+10],ecx
//...
jmp return
//...
someSymbol:
dd (int)10
//...
</pre>

 
== Fractional Multiplier ==
But what if we wanted to be able to multiply by a fractional number (i.e.: "0.5"). Well this can take a bit more, but we can use [[Assembler:Commands:CVTSI2SS|CVTSI2SS]] and [[Assembler:Commands:CVTSS2SI|CVTSS2SI]] to convert the value form an integer to a float and back a gain. Then we can just use [[Assembler:Commands:MULSS|MULSS]] to do the multiplying, but we will need an [[Assembler#Structure|XMM]] [[Assembler#Registers|registry]] to work with. So we will need some extra memory and use [[Assembler:Commands:MOVUPS|MOVUPS]] to save and restore the XMM registry.
<pre>
//...
alloc(someMem, 0x400)
//...
label(someSymbol)
registerSymbol(someSymbol)
label(extraStuff)
//...
someMem:
//...
movups [extraStuff],xmm0 //// save
cvtsi2ss xmm0,ecx
mulss xmm0,[someSymbol]
cvtss2si ecx,xmm0
movups xmm0,[extraStuff] //// restore
//...
jmp return
//...
someSymbol:
dd (int)10
extraStuff:
dd 0 //// Data double-word (4 bytes)
dd 0
dq 0 //// Data quad-word (8 bytes)
//...
</pre>

 
== Calculate a value for a Multiplier ==
Let's say we just can't find an [[Assembler:Commands:ADD|ADD]] or a [[Assembler:Commands:SUB|SUB]], and all we have is a [[Assembler:Commands:MOV|MOV]].
<pre>
mov [eax+10],ecx
</pre>

We can just do some math in the script, to calculate a value for a multiplier.
<pre>
//...
alloc(someMem, 0x400)
//...
label(someSymbol)
registerSymbol(someSymbol)
//...
someMem:
//...
sub ecx,[eax+10]
imul ecx,[someSymbol]
add ecx,[eax+10]
mov [eax+10],ecx
//...
jmp return
//...
someSymbol:
dd (int)10
//...
</pre>

 
== See Also ==
{{TutorialsAA}}

← Older revision		Revision as of 16:05, 16 March 2019
Line 1:		Line 1:
−	<~~!-- Tutorial:CodeInjection_Integers -->~~	+	<span style="font-size:25px;color:red">Sorry! Content not available.</span>
−	~~[[Category:Tutorial]]~~
−	~~[[Category:Auto Assembler]]~~
−	~~{{DISPLAYTITLE:Code Injection - Working with Integers}}~~
−	~~This tutorial builds on the topic of Code Injection:~~
−	~~{{TutorialsCodeInjection}}~~
−
−	~~<br>~~
−	~~Let's say you have an integer and some code that increases the value.~~
−	~~<pre>~~
−	~~add [eax+10],ecx~~
−	~~</pre>~~
−	~~<blockquote>~~
−	What if what writes to the value is only a [[Assembler:Commands:MOV\|MOV]]. Try to find a spot above the write instruction that has an [[Assembler:Commands:ADD\|ADD]] (or a [[Assembler:Commands:SUB\|SUB]] depending on what you want to do).
−	~~<pre>~~
−	~~add ecx,ebx~~
−	~~//...~~
−	~~mov [eax+10],ecx~~
−	~~</pre>~~
−	~~</blockquote>~~
−
−	~~<br>~~
−	=~~= Hardcoded value ==~~
−	~~We could just hardcode a value for this.~~
−	~~<pre>~~
−	~~add dword ptr [eax+10],(int)100 // #100 ////~~ "~~#" is a short hand for integer~~
−	~~</pre>~~
−
−	~~<br>~~
−	~~== Editable value ==~~
−	~~We could use a [[Auto Assembler:label\|label]], giving it some memory. And optionally [[Auto_Assembler:registerSymbol\|register]] it so the label can be used on the table as an address.~~
−	~~<pre>~~
−	~~//...~~
−	~~alloc(someMem, 0x400)~~
−	~~//...~~
−	~~label(someSymbol)~~
−	~~registerSymbol(someSymbol)~~
−	~~//...~~
−	~~someMem:~~
−	~~//...~~
−	~~mov ecx,[someSymbol]~~
−	~~add [eax+10],ecx~~
−	~~//...~~
−	~~jmp return~~
−	~~//...~~
−	~~someSymbol:~~
−	~~dd (int)100~~
−	~~//...~~
−	~~</pre>~~
−
−	~~<br>~~
−	~~== Adding a Multiplier ==~~
−	~~We could add an editable value like above but use [[Assembler:Commands:IMUL\|IMUL]] to add a multiplier to the script.~~
−	~~<pre>~~
−	~~//...~~
−	~~alloc(someMem, 0x400)~~
−	~~//...~~
−	~~label(someSymbol)~~
−	~~registerSymbol(someSymbol)~~
−	~~//...~~
−	~~someMem:~~
−	~~//...~~
−	~~imul ecx,[someSymbol]~~
−	~~add [eax+10],ecx~~
−	~~//...~~
−	~~jmp return~~
−	~~//...~~
−	~~someSymbol~~:
−	~~dd (int)10~~
−	~~//...~~
−	~~</pre>~~
−
−	~~<br>~~
−	~~== Fractional Multiplier ==~~
−	~~But what if we wanted to be able to multiply by a fractional number (i.e.~~: "0.5"). Well this can take a bit more, but we can use [[Assembler:Commands:CVTSI2SS\|CVTSI2SS]] and [[Assembler:Commands:CVTSS2SI\|CVTSS2SI]] to convert the value form an integer to a float and back a gain. Then we can just use [[Assembler:Commands:MULSS\|MULSS]] to do the multiplying, but we will need an [[Assembler#Structure\|XMM]] [[Assembler#Registers\|registry]] to work with. So we will need some extra memory and use [[Assembler:Commands:MOVUPS\|MOVUPS]] to save and restore the XMM registry.
−	~~<pre~~>
−	~~//...~~
−	~~alloc(someMem, 0x400)~~
−	~~//...~~
−	~~label(someSymbol)~~
−	~~registerSymbol(someSymbol)~~
−	~~label(extraStuff)~~
−	~~//...~~
−	~~someMem:~~
−	//...
−	~~movups [extraStuff],xmm0 //// save~~
−	~~cvtsi2ss xmm0,ecx~~
−	~~mulss xmm0,[someSymbol]~~
−	~~cvtss2si ecx,xmm0~~
−	~~movups xmm0,[extraStuff] //// restore~~
−	~~//...~~
−	~~jmp return~~
−	~~//...~~
−	~~someSymbol:~~
−	~~dd (int)10~~
−	~~extraStuff:~~
−	~~dd 0 //// Data double-word (4 bytes)~~
−	~~dd 0~~
−	~~dq 0 //// Data quad-word (8 bytes)~~
−	~~//...~~
−	</~~pre>~~
−
−	~~<br~~>
−	~~== Calculate a value for a Multiplier ==~~
−	~~Let's say we just can't find an [[Assembler:Commands:ADD\|ADD]] or a [[Assembler:Commands:SUB\|SUB]], and all we have is a [[Assembler:Commands:MOV\|MOV]].~~
−	~~<pre>~~
−	~~mov [eax+10],ecx~~
−	~~</pre>~~
−
−	~~We can just do some math in the script, to calculate a value for a multiplier.~~
−	~~<pre>~~
−	~~//...~~
−	~~alloc(someMem, 0x400)~~
−	~~//...~~
−	~~label(someSymbol)~~
−	~~registerSymbol(someSymbol)~~
−	~~//...~~
−	~~someMem:~~
−	~~//...~~
−	~~sub ecx,[eax+10]~~
−	~~imul ecx,[someSymbol]~~
−	~~add ecx,[eax+10]~~
−	~~mov [eax+10],ecx~~
−	~~//...~~
−	~~jmp return~~
−	~~//...~~
−	~~someSymbol:~~
−	~~dd (int)10~~
−	~~//...~~
−	~~</pre>~~
−
−	~~<br>~~
−	~~== See Also ==~~
−	~~{{TutorialsAA}}~~

@@ Line 73: / Line 73: @@
 <br>
 == Fractional Multiplier ==
-But what if we wanted to be able to multiply by a fractional number (i.e.: "0.5"). Well this can take a bit more, but we can use [[Assembler:Commands:CVTSI2SS|CVTSI2SS]] and [[Assembler:Commands:CVTSS2SI|CVTSS2SI]] to convert the value form an integer to a float and back a gain. Then we can just use [[Assembler:Commands:MULSS|MULSS]] to do the multiplying, but we will need an [[Assembler#Structure|XMM]] [[Assembler#Registers|registry]] to work with. So we will need some extra memory and use [[Assembler:Commands:MOVUPS|MOVUPS]] to save and restore the XMM registry.
+But what if we wanted to be able to multiply by a fractional number (i.e.: "0.5"). Well this can take a bit more, but we can use [[Assembler:Commands:CVTSI2SS|CVTSI2SS]] and [[Assembler:Commands:CVTSS2SI|CVTSS2SI]] to convert the value from an integer to a float and back a gain. Then we can just use [[Assembler:Commands:MULSS|MULSS]] to do the multiplying, but we will need an [[Assembler#Structure|XMM]] [[Assembler#Registers|registry]] to work with. So we will need some extra memory and use [[Assembler:Commands:MOVUPS|MOVUPS]] to save and restore the XMM registry.
 <pre>
 //...

← Older revision		Revision as of 19:07, 18 March 2019
Line 1:		Line 1:
−	<~~span style~~="~~font~~-~~size~~:~~25px;color~~:~~red"~~>~~Sorry! Content not available~~.</~~span~~>	+	<!-- Tutorial:CodeInjection_Integers -->
		+	[[Category:Tutorial]]
		+	[[Category:Auto Assembler]]
		+	{{DISPLAYTITLE:Code Injection - Working with Integers}}
		+	This tutorial builds on the topic of Code Injection:
		+	{{TutorialsCodeInjection}}
		+
		+	<br>
		+	Let's say you have an integer and some code that increases the value.
		+	<pre>
		+	add [eax+10],ecx
		+	</pre>
		+	<blockquote>
		+	What if what writes to the value is only a [[Assembler:Commands:MOV\|MOV]]. Try to find a spot above the write instruction that has an [[Assembler:Commands:ADD\|ADD]] (or a [[Assembler:Commands:SUB\|SUB]] depending on what you want to do).
		+	<pre>
		+	add ecx,ebx
		+	//...
		+	mov [eax+10],ecx
		+	</pre>
		+	</blockquote>
		+
		+	<br>
		+	== Hardcoded value ==
		+	We could just hardcode a value for this.
		+	<pre>
		+	add dword ptr [eax+10],(int)100 // #100 //// "#" is a short hand for integer
		+	</pre>
		+
		+	<br>
		+	== Editable value ==
		+	We could use a [[Auto Assembler:label\|label]], giving it some memory. And optionally [[Auto_Assembler:registerSymbol\|register]] it so the label can be used on the table as an address.
		+	<pre>
		+	//...
		+	alloc(someMem, 0x400)
		+	//...
		+	label(someSymbol)
		+	registerSymbol(someSymbol)
		+	//...
		+	someMem:
		+	//...
		+	mov ecx,[someSymbol]
		+	add [eax+10],ecx
		+	//...
		+	jmp return
		+	//...
		+	someSymbol:
		+	dd (int)100
		+	//...
		+	</pre>
		+
		+	<br>
		+	== Adding a Multiplier ==
		+	We could add an editable value like above but use [[Assembler:Commands:IMUL\|IMUL]] to add a multiplier to the script.
		+	<pre>
		+	//...
		+	alloc(someMem, 0x400)
		+	//...
		+	label(someSymbol)
		+	registerSymbol(someSymbol)
		+	//...
		+	someMem:
		+	//...
		+	imul ecx,[someSymbol]
		+	add [eax+10],ecx
		+	//...
		+	jmp return
		+	//...
		+	someSymbol:
		+	dd (int)10
		+	//...
		+	</pre>
		+
		+	<br>
		+	== Fractional Multiplier ==
		+	But what if we wanted to be able to multiply by a fractional number (i.e.: "0.5"). Well this can take a bit more, but we can use [[Assembler:Commands:CVTSI2SS\|CVTSI2SS]] and [[Assembler:Commands:CVTSS2SI\|CVTSS2SI]] to convert the value form an integer to a float and back a gain. Then we can just use [[Assembler:Commands:MULSS\|MULSS]] to do the multiplying, but we will need an [[Assembler#Structure\|XMM]] [[Assembler#Registers\|registry]] to work with. So we will need some extra memory and use [[Assembler:Commands:MOVUPS\|MOVUPS]] to save and restore the XMM registry.
		+	<pre>
		+	//...
		+	alloc(someMem, 0x400)
		+	//...
		+	label(someSymbol)
		+	registerSymbol(someSymbol)
		+	label(extraStuff)
		+	//...
		+	someMem:
		+	//...
		+	movups [extraStuff],xmm0 //// save
		+	cvtsi2ss xmm0,ecx
		+	mulss xmm0,[someSymbol]
		+	cvtss2si ecx,xmm0
		+	movups xmm0,[extraStuff] //// restore
		+	//...
		+	jmp return
		+	//...
		+	someSymbol:
		+	dd (int)10
		+	extraStuff:
		+	dd 0 //// Data double-word (4 bytes)
		+	dd 0
		+	dq 0 //// Data quad-word (8 bytes)
		+	//...
		+	</pre>
		+
		+	<br>
		+	== Calculate a value for a Multiplier ==
		+	Let's say we just can't find an [[Assembler:Commands:ADD\|ADD]] or a [[Assembler:Commands:SUB\|SUB]], and all we have is a [[Assembler:Commands:MOV\|MOV]].
		+	<pre>
		+	mov [eax+10],ecx
		+	</pre>
		+
		+	We can just do some math in the script, to calculate a value for a multiplier.
		+	<pre>
		+	//...
		+	alloc(someMem, 0x400)
		+	//...
		+	label(someSymbol)
		+	registerSymbol(someSymbol)
		+	//...
		+	someMem:
		+	//...
		+	sub ecx,[eax+10]
		+	imul ecx,[someSymbol]
		+	add ecx,[eax+10]
		+	mov [eax+10],ecx
		+	//...
		+	jmp return
		+	//...
		+	someSymbol:
		+	dd (int)10
		+	//...
		+	</pre>
		+
		+	<br>
		+	== See Also ==
		+	{{TutorialsAA}}