Assembly Programming Tutorial
Assembly Programming Tutorial
Audience
This tutorial has been designed for those who want to learn the basics of assembly
programming from scratch. This tutorial will give you enough understanding on assembly
programming from where you can take yourself to higher levels of expertise.
Prerequisites
Before proceeding with this tutorial, you should have a basic understanding of Computer
Programming terminologies. A basic understanding of any of the programming languages
will help you in understanding the Assembly programming concepts and move fast on
the learning track.
All the content and graphics published in this e-book are the property of Tutorials Point
(I) Pvt. Ltd. The user of this e-book is prohibited to reuse, retain, copy, distribute or
republish any contents or a part of contents of this e-book in any manner without written
consent of the publisher.
We strive to update the contents of our website and tutorials as timely and as precisely
as possible, however, the contents may contain inaccuracies or errors. Tutorials Point (I)
Pvt. Ltd. provides no guarantee regarding the accuracy, timeliness or completeness of
our website or its contents including this tutorial. If you discover any errors on our
website or in this tutorial, please notify us at [email protected]
i
Table of Contents
About the Tutorial ···································································································································· i
Audience ·················································································································································· i
Prerequisites ············································································································································ i
Comments ··············································································································································· 9
ii
Compiling and Linking an Assembly Program in NASM·········································································· 11
8. ASSEMBLY ─ VARIABLES····································································································· 26
iii
9. ASSEMBLY ─ CONSTANTS ·································································································· 29
iv
15. ASSEMBLY ─STRINGS ········································································································· 59
v
Assembly Programming
1. Assembly ─ Introduction
Each family of processors has its own set of instructions for handling various operations
such as getting input from keyboard, displaying information on screen, and performing
various other jobs. These set of instructions are called 'machine language instructions'.
A processor understands only machine language instructions, which are strings of 1's
and 0's. However, machine language is too obscure and complex for using in software
development. So, the low-level assembly language is designed for a specific family of
processors that represents various instructions in symbolic code and a more
understandable form.
It is most suitable for writing interrupt service routines and other memory
resident programs.
The fundamental unit of computer storage is a bit; it could be ON (1) or OFF (0). A
group of nine related bits makes a byte, out of which eight bits are used for data and the
last one is used for parity. According to the rule of parity, the number of bits that are ON
(1) in each byte should always be odd.
1
Assembly Programming
So, the parity bit is used to make the number of bits in a byte odd. If the parity is even,
the system assumes that there had been a parity error (though rare), which might have
been caused due to hardware fault or electrical disturbance.
The following table shows the positional values for an 8-bit binary number, where all bits
are set ON.
Bit value 1 1 1 1 1 1 1 1
Bit number 7 6 5 4 3 2 1 0
The value of a binary number is based on the presence of 1 bits and their positional
value. So, the value of a given binary number is:
1 + 2 + 4 + 8 +16 + 32 + 64 + 128 = 255
which is same as 28 - 1.
2
Assembly Programming
0 0 0
1 1 1
2 10 2
3 11 3
4 100 4
5 101 5
6 110 6
7 111 7
8 1000 8
9 1001 9
10 1010 A
11 1011 B
12 1100 C
13 1101 D
14 1110 E
15 1111 F
3
Assembly Programming
Example: Binary number 1000 1100 1101 0001 is equivalent to hexadecimal - 8CD1
To convert a hexadecimal number to binary, just write each hexadecimal digit into its 4-
digit binary equivalent.
Example: Hexadecimal number FAD8 is equivalent to binary - 1111 1010 1101 1000
Binary Arithmetic
The following table illustrates four simple rules for binary addition:
0 1 1 1
+0 +0 +1 +1
=0 =1 =10 =11
Rules (iii) and (iv) show a carry of a 1-bit into the next left position.
Example
Decimal Binary
60 00111100
+42 00101010
102 01100110
4
Assembly Programming
Example
Number 53 00110101
Add 1 1
To subtract one value from another, convert the number being subtracted to two's
complement format and add the numbers.
Example
Subtract 42 from 53.
Number 53 00110101
Number 42 00101010
Add 1 1
53 - 42 = 11 00001011
The processor may access one or more bytes of memory at a time. Let us consider a
hexadecimal number 0725H. This number will require two bytes of memory. The high-
order byte or most significant byte is 07 and the low-order byte is 25.
5
Assembly Programming
The processor stores data in reverse-byte sequence, i.e., a low-order byte is stored in a
low memory address and a high-order byte in high memory address. So, if the processor
brings the value 0725H from register to memory, it will transfer 25 first to the lower
memory address and 07 to the next memory address.
x: memory address
When the processor gets the numeric data from memory to register, it again reverses
the bytes. There are two kinds of memory addresses:
Segment address (or offset) – starting address of a memory segment with the
offset value.
6
Assembly Programming
2. Assembly ─ Enviornment Setup
Try the following example using our online compiler option available at
http://www.compileonline.com/
section .text
global _start ;must be declared for linker (ld)
_start: ;tells linker entry point
mov edx,len ;message length
mov ecx,msg ;message to write
mov ebx,1 ;file descriptor (stdout)
mov eax,4 ;system call number (sys_write)
int 0x80 ;call kernel
section .data
msg db 'Hello, world!', 0xa ;our dear string
len equ $ - msg ;length of our dear string
For most of the examples given in this tutorial, you will find a Try it option in our
website code sections at the top right corner that will take you to the online compiler. So
just make use of it and enjoy your learning.
7
Assembly Programming
Installing NASM
If you select "Development Tools" while installing Linux, you may get NASM installed
along with the Linux operating system and you do not need to download and install it
separately. For checking whether you already have NASM installed, take the following
steps:
1. Check The netwide assembler (NASM) website for the latest version.
2. Download the Linux source archive nasm-X.XX.ta.gz, where X.XX is the NASM
version number in the archive.
3. Unpack the archive into a directory which creates a subdirectory nasm-X. XX.
4. cd to nasm-X. XX and type ./configure . This shell script will find the best C
compiler to use and set up Makefiles accordingly.
6. Type make install to install nasm and ndisasm in /usr/local/bin and to install the
man pages.
This should install NASM on your system. Alternatively, you can use an RPM distribution
for the Fedora Linux. This version is simpler to install, just double-click the RPM file.
8
Assembly Programming
3. Assembly ─ Basic Syntax
section .data
section .bss
section .text
global _start
_start:
Comments
Assembly language comment begins with a semicolon (;). It may contain any printable
character including blank. It can appear on a line by itself, like:
9
Assembly Programming
Macros.
The executable instructions or simply instructions tell the processor what to do. Each
instruction consists of an operation code (opcode). Each executable instruction
generates one machine language instruction.
The assembler directives or pseudo-ops tell the assembler about the various aspects
of the assembly process. These are non-executable and do not generate machine
language instructions.
Macros are basically a text substitution mechanism.
The fields in the square brackets are optional. A basic instruction has two parts, the first
one is the name of the instruction (or the mnemonic), which is to be executed, and the
second are the operands or the parameters of the command.
section .text
global _start ;must be declared for linker (ld)
_start: ;tells linker entry point
mov edx,len ;message length
10
Assembly Programming
section .data
msg db 'Hello, world!', 0xa ;our dear string
len equ $ - msg ;length of our dear string
When the above code is compiled and executed, it produces the following result:
Hello, world!
1. Type the above code using a text editor and save it as hello.asm.
2. Make sure that you are in the same directory as where you saved hello.asm.
4. If there is any error, you will be prompted about that at this stage. Otherwise, an
object file of your program named hello.o will be created.
5. To link the object file and create an executable file named hello, type ld -m
elf_i386 -s -o hello hello.o
6. Execute the program by typing ./hello
If you have done everything correctly, it will display ‘Hello, world!’ on the screen.
11
Assembly Programming
4. Assembly ─ Memory Segments
We have already discussed the three sections of an assembly program. These sections
represent various memory segments as well.
Interestingly, if you replace the section keyword with segment, you will get the same
result. Try the following code:
When the above code is compiled and executed, it produces the following result:
Hello, world!
Memory Segments
A segmented memory model divides the system memory into groups of independent
segments referenced by pointers located in the segment registers. Each segment is used
to contain a specific type of data. One segment is used to contain instruction codes,
another segment stores the data elements, and a third segment keeps the program
stack.
In the light of the above discussion, we can specify various memory segments as:
Data segment - It is represented by .data section and the .bss. The .data
section is used to declare the memory region, where data elements are stored for
the program. This section cannot be expanded after the data elements are
declared, and it remains static throughout the program.
The .bss section is also a static memory section that contains buffers for data to
be declared later in the program. This buffer memory is zero-filled.
12
Assembly Programming
Stack - This segment contains data values passed to functions and procedures
within the program.
13
Assembly Programming
5. Assembly ─ Registers
Processor operations mostly involve processing data. This data can be stored in memory
and accessed from thereon. However, reading data from and storing data into memory
slows down the processor, as it involves complicated processes of sending the data
request across the control bus and into the memory storage unit and getting the data
through the same channel.
To speed up the processor operations, the processor includes some internal memory
storage locations, called registers.
The registers store data elements for processing without having to access the memory. A
limited number of registers are built into the processor chip.
Processor Registers
There are ten 32-bit and six 16-bit processor registers in IA-32 architecture. The
registers are grouped into three categories:
General registers,
Segment registers.
The general registers are further divided into the following groups:
Data registers,
Index registers.
Data Registers
Four 32-bit data registers are used for arithmetic, logical, and other operations. These
32-bit registers can be used in three ways:
Lower halves of the 32-bit registers can be used as four 16-bit data registers: AX,
BX, CX and DX.
Lower and higher halves of the above-mentioned four 16-bit registers can be
used as eight 8-bit data registers: AH, AL, BH, BL, CH, CL, DH, and DL.
14
Assembly Programming
CX is known as the count register, as the ECX, CX registers store the loop count in
iterative operations.
Pointer Registers
The pointer registers are 32-bit EIP, ESP, and EBP registers and corresponding 16-bit
right portions IP, SP, and BP. There are three categories of pointer registers:
Instruction Pointer (IP) - The 16-bit IP register stores the offset address of the
next instruction to be executed. IP in association with the CS register (as CS:IP)
gives the complete address of the current instruction in the code segment.
Stack Pointer (SP) - The 16-bit SP register provides the offset value within the
program stack. SP in association with the SS register (SS:SP) refers to be current
position of data or address within the program stack.
Base Pointer (BP) - The 16-bit BP register mainly helps in referencing the
parameter variables passed to a subroutine. The address in SS register is
combined with the offset in BP to get the location of the parameter. BP can also
be combined with DI and SI as base register for special addressing.
15
Assembly Programming
Index Registers
The 32-bit index registers, ESI and EDI, and their 16-bit rightmost portions, SI and DI,
are used for indexed addressing and sometimes used in addition and subtraction. There
are two sets of index pointers:
Control Registers
The 32-bit instruction pointer register and the 32-bit flags register combined are
considered as the control registers.
Many instructions involve comparisons and mathematical calculations and change the
status of the flags and some other conditional instructions test the value of these status
flags to take the control flow to other location.
Overflow Flag (OF): It indicates the overflow of a high-order bit (leftmost bit)
of data after a signed arithmetic operation.
Interrupt Flag (IF): It determines whether the external interrupts like keyboard
entry, etc., are to be ignored or processed. It disables the external interrupt
when the value is 0 and enables interrupts when set to 1.
Trap Flag (TF): It allows setting the operation of the processor in single-step
mode. The DEBUG program we used sets the trap flag, so we could step through
the execution one instruction at a time.
Sign Flag (SF): It shows the sign of the result of an arithmetic operation. This
flag is set according to the sign of a data item following the arithmetic operation.
The sign is indicated by the high-order of leftmost bit. A positive result clears the
value of SF to 0 and negative result sets it to 1.
Auxiliary Carry Flag (AF): It contains the carry from bit 3 to bit 4 following an
arithmetic operation; used for specialized arithmetic. The AF is set when a 1-byte
arithmetic operation causes a carry from bit 3 into bit 4.
16
Assembly Programming
Parity Flag (PF): It indicates the total number of 1-bits in the result obtained
from an arithmetic operation. An even number of 1-bits clears the parity flag to 0
and an odd number of 1-bits sets the parity flag to 1.
Carry Flag (CF): It contains the carry of 0 or 1 from a high-order bit (leftmost)
after an arithmetic operation. It also stores the contents of last bit of
a shift or rotate operation.
The following table indicates the position of flag bits in the 16-bit Flags register:
Flag: O D I T S Z A P C
Bit no: 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0
Segment Registers
Segments are specific areas defined in a program for containing data, code and stack.
There are three main segments:
Data Segment: It contains data, constants and work areas. A 16-bit Data
Segment register or DS register stores the starting address of the data segment.
Apart from the DS, CS and SS registers, there are other extra segment registers - ES
(extra segment), FS and GS, which provide additional segments for storing data.
The segment registers stores the starting addresses of a segment. To get the exact
location of data or instruction within a segment, an offset value (or displacement) is
required. To reference any memory location in a segment, the processor combines the
segment address in the segment register with the offset value of the location.
Example:
Look at the following simple program to understand the use of registers in assembly
programming. This program displays 9 stars on the screen along with a simple message:
section .text
global _start ;must be declared for linker (gcc)
_start: ;tell linker entry point
mov edx,len ;message length
mov ecx,msg ;message to write
17
Assembly Programming
section .data
msg db 'Displaying 9 stars',0xa ;a message
len equ $ - msg ;length of message
s2 times 9 db '*'
When the above code is compiled and executed, it produces the following result:
Displaying 9 stars
*********
18
Assembly Programming
6. Assembly ─ System Calls
System calls are APIs for the interface between the user space and the kernel space. We
have already used the system calls, sys_write and sys_exit, for writing into the screen
and exiting from the program, respectively.
Store the arguments to the system call in the registers EBX, ECX, etc.
There are six registers that store the arguments of the system call used. These are the
EBX, ECX, EDX, ESI, EDI, and EBP. These registers take the consecutive arguments,
starting with the EBX register. If there are more than six arguments, then the memory
location of the first argument is stored in the EBX register.
The following code snippet shows the use of the system call sys_exit:
The following code snippet shows the use of the system call sys_write:
All the syscalls are listed in /usr/include/asm/unistd.h, together with their numbers (the
value to put in EAX before you call int 80h).
The following table shows some of the system calls used in this tutorial:
1 sys_exit int - - - -
19
Assembly Programming
Example
The following example reads a number from the keyboard and displays it on the screen:
20
Assembly Programming
mov ebx, 1
mov ecx, dispMsg
mov edx, lenDispMsg
int 80h
When the above code is compiled and executed, it produces the following result:
21
Assembly Programming
7. Assembly ─ Addressing Modes
When an instruction requires two operands, the first operand is generally the
destination, which contains data in a register or memory location and the second
operand is the source. Source contains either the data to be delivered (immediate
addressing) or the address (in register or memory) of the data. Generally, the source
data remains unaltered after the operation.
Register addressing
Immediate addressing
Memory addressing
Register Addressing
In this addressing mode, a register contains the operand. Depending upon the
instruction, the register may be the first operand, the second operand or both.
For example,
As processing data between registers does not involve memory, it provides fastest
processing of data.
Immediate Addressing
An immediate operand has a constant value or an expression. When an instruction with
two operands uses immediate addressing, the first operand may be a register or
memory location, and the second operand is an immediate constant. The first operand
defines the length of the data.
For example,
22
Assembly Programming
In direct addressing mode, the offset value is specified directly as part of the instruction,
usually indicated by the variable name. The assembler calculates the offset value and
maintains a symbol table, which stores the offset values of all the variables used in the
program.
In direct memory addressing, one of the operands refers to a memory location and the
other operand references a register.
For example,
Direct-Offset Addressing
This addressing mode uses the arithmetic operators to modify an address. For example,
look at the following definitions that define tables of data:
The following operations access data from the tables in the memory into registers:
Indirect addressing is generally used for variables containing several elements like,
arrays. Starting address of the array is stored in, say, the EBX register.
The following code snippet shows how to access different elements of the variable.
Syntax
The syntax of the MOV instruction is:
The MOV instruction may have one of the following five forms:
The MOV instruction causes ambiguity at times. For example, look at the statements:
It is not clear whether you want to move a byte equivalent or word equivalent of the
number 110. In such cases, it is wise to use a type specifier.
BYTE 1
WORD 2
DWORD 4
QWORD 8
TBYTE 10
24
Assembly Programming
Example
The following program illustrates some of the concepts discussed above. It stores a
name 'Zara Ali' in the data section of the memory, then changes its value to another
name 'Nuha Ali' programmatically and displays both the names.
section .text
global _start ;must be declared for linker (ld)
_start: ;tell linker entry point
section .data
name db 'Zara Ali '
When the above code is compiled and executed, it produces the following result:
25
Assembly Programming
8. Assembly ─ Variables
NASM provides various define directives for reserving storage space for variables. The
define assembler directive is used for allocation of storage space. It can be used to
reserve as well as initialize one or more bytes.
Where, variable-name is the identifier for each storage space. The assembler associates
an offset value for each variable name defined in the data segment.
choice DB 'y'
number DW 12345
neg_number DW -12345
big_number DQ 123456789
real_number1 DD 1.234
real_number2 DQ 123.456
Each decimal value is automatically converted to its 16-bit binary equivalent and
stored as a hexadecimal number.
26
Assembly Programming
section .text
global _start ;must be declared for linker (gcc)
_start: ;tell linker entry point
section .data
choice DB 'y'
When the above code is compiled and executed, it produces the following result:
Directive Purpose
27
Assembly Programming
Multiple Definitions
You can have multiple data definition statements in a program. For example:
Multiple Initializations
The TIMES directive allows multiple initializations to the same value. For example, an
array named marks of size 9 can be defined and initialized to zero using the following
statement:
marks TIMES 9 DW 0
The TIMES directive is useful in defining arrays and tables. The following program
displays 9 asterisks on the screen:
section .text
global _start ;must be declared for linker (ld)
_start: ;tell linker entry point
mov edx,9 ;message length
mov ecx, stars ;message to write
mov ebx,1 ;file descriptor (stdout)
mov eax,4 ;system call number (sys_write)
int 0x80 ;call kernel
section .data
stars times 9 db '*'
When the above code is compiled and executed, it produces the following result:
*********
28
Assembly Programming
9. Assembly ─ Constants
There are several directives provided by NASM that define constants. We have already
used the EQU directive in previous chapters. We will particularly discuss three directives:
EQU
%assign
%define
For example,
TOTAL_STUDENTS equ 50
You can then use this constant value in your code, like:
LENGTH equ 20
WIDTH equ 10
AREA equ length * width
Example
The following example illustrates the use of the EQU directive:
SYS_EXIT equ 1
SYS_WRITE equ 4
STDIN equ 0
STDOUT equ 1
section .text
global _start ;must be declared for using gcc
_start: ;tell linker entry point
mov eax, SYS_WRITE
29
Assembly Programming
section .data
msg1 db 'Hello, programmers!',0xA,0xD
len1 equ $ - msg1
msg2 db 'Welcome to the world of,', 0xA,0xD
len2 equ $ - msg2
msg3 db 'Linux assembly programming! '
len3 equ $- msg3
When the above code is compiled and executed, it produces the following result:
Hello, programmers!
Welcome to the world of,
Linux assembly programming!
%assign TOTAL 10
30
Assembly Programming
%assign TOTAL 20
31
Assembly Programming
10. Assembly ─ Arithmetic Instructions
Syntax
The INC instruction has the following syntax:
INC destination
Example
INC EBX ; Increments 32-bit register
INC DL ; Increments 8-bit register
INC [count] ; Increments the count variable
Syntax
The DEC instruction has the following syntax:
DEC destination
Example
segment .data
count dw 0
value db 15
segment .text
inc [count]
dec [value]
mov ebx, count
inc word [ebx]
mov esi, value
32
Assembly Programming
Syntax
The ADD and SUB instructions have the following syntax:
Register to register
Memory to register
Register to memory
However, like other instructions, memory-to-memory operations are not possible using
ADD/SUB instructions. An ADD or SUB operation sets or clears the overflow and carry
flags.
Example
The following example will ask two digits from the user, store the digits in the EAX and
EBX register, respectively, add the values, store the result in a memory location 'res' and
finally display the result.
SYS_EXIT equ 1
SYS_READ equ 3
SYS_WRITE equ 4
STDIN equ 0
STDOUT equ 1
segment .data
33
Assembly Programming
segment .bss
num1 resb 2
num2 resb 2
res resb 1
section .text
global _start ;must be declared for using gcc
_start: ;tell linker entry point
mov eax, SYS_WRITE
mov ebx, STDOUT
mov ecx, msg1
mov edx, len1
int 0x80
34
Assembly Programming
; moving the first number to eax register and second number to ebx
; and subtracting ascii '0' to convert it into a decimal number
mov eax, [number1]
sub eax, '0'
mov ebx, [number2]
sub ebx, '0'
When the above code is compiled and executed, it produces the following result:
Enter a digit:
3
Please enter a second digit:
4
The sum is:
35
Assembly Programming
section .text
global _start ;must be declared for using gcc
_start: ;tell linker entry point
mov eax,'3'
sub eax, '0'
mov ebx, '4'
sub ebx, '0'
add eax, ebx
add eax, '0'
mov [sum], eax
mov ecx,msg
mov edx, len
mov ebx,1 ;file descriptor (stdout)
mov eax,4 ;system call number (sys_write)
int 0x80 ;call kernel
mov ecx,sum
mov edx, 1
mov ebx,1 ;file descriptor (stdout)
mov eax,4 ;system call number (sys_write)
int 0x80 ;call kernel
mov eax,1 ;system call number (sys_exit)
int 0x80 ;call kernel
section .data
msg db "The sum is:", 0xA,0xD
len equ $ - msg
segment .bss
sum resb 1
When the above code is compiled and executed, it produces the following result:
36
Assembly Programming
Syntax
The syntax for the MUL/IMUL instructions is as follows:
MUL/IMUL multiplier
Multiplicand in both cases will be in an accumulator, depending upon the size of the
multiplicand and the multiplier and the generated product is also stored in two registers
depending upon the size of the operands. Following section explains MUL instructions
with three different cases:
SN Scenarios
The multiplicand is in the AL register, and the multiplier is a byte in the memory
or in another register. The product is in AX. High-order 8 bits of the product is
stored in AH and the low-order 8 bits are stored in AL.
The resultant product is a doubleword, which will need two registers. The high-
order (leftmost) portion gets stored in DX and the lower-order (rightmost)
portion gets stored in AX.
When two doubleword values are multiplied, the multiplicand should be in EAX
and the multiplier is a doubleword value stored in memory or in another register.
The product generated is stored in the EDX:EAX registers, i.e., the high order 32
bits gets stored in the EDX register and the low order 32-bits are stored in the
EAX register.
37
Assembly Programming
Example
MOV AL, 10
MOV DL, 25
MUL DL
...
MOV DL, 0FFH ; DL= -1
MOV AL, 0BEH ; AL = -66
IMUL DL
Example
The following example multiplies 3 with 2, and displays the result:
section .text
global _start ;must be declared for using gcc
_start: ;tell linker entry point
mov al,'3'
sub al, '0'
mov bl, '2'
sub bl, '0'
mul bl
add al, '0'
mov [res], al
mov ecx,msg
mov edx, len
mov ebx,1 ;file descriptor (stdout)
mov eax,4 ;system call number (sys_write)
int 0x80 ;call kernel
mov ecx,res
mov edx, 1
mov ebx,1 ;file descriptor (stdout)
mov eax,4 ;system call number (sys_write)
int 0x80 ;call kernel
mov eax,1 ;system call number (sys_exit)
int 0x80 ;call kernel
38
Assembly Programming
section .data
msg db "The result is:", 0xA,0xD
len equ $- msg
segment .bss
res resb 1
When the above code is compiled and executed, it produces the following result:
The DIV (Divide) instruction is used for unsigned data and the IDIV (Integer Divide) is
used for signed data.
Syntax
The format for the DIV/IDIV instruction:
DIV/IDIV divisor
The dividend is in an accumulator. Both the instructions can work with 8-bit, 16-bit or
32-bit operands. The operation affects all six status flags. Following section explains
three cases of division with different operand size:
SN Scenarios
The dividend is assumed to be in the AX register (16 bits). After division, the
quotient goes to the AL register and the remainder goes to the AH register.
39
Assembly Programming
The dividend is assumed to be 32 bits long and in the DX:AX registers. The high-
order 16 bits are in DX and the low-order 16 bits are in AX. After division, the
16-bit quotient goes to the AX register and the 16-bit remainder goes to the DX
register.
The dividend is assumed to be 64 bits long and in the EDX:EAX registers. The
high-order 32 bits are in EDX and the low-order 32 bits are in EAX. After division,
the 32-bit quotient goes to the EAX register and the 32-bit remainder goes to the
EDX register.
Example
The following example divides 8 with 2. The dividend 8 is stored in the 16-bit AX
register and the divisor 2 is stored in the 8-bit BL register.
section .text
global _start ;must be declared for using gcc
_start: ;tell linker entry point
mov ax,'8'
sub ax, '0'
mov bl, '2'
sub bl, '0'
div bl
add ax, '0'
mov [res], ax
40
Assembly Programming
mov ecx,msg
mov edx, len
mov ebx,1 ;file descriptor (stdout)
mov eax,4 ;system call number (sys_write)
int 0x80 ;call kernel
mov ecx,res
mov edx, 1
mov ebx,1 ;file descriptor (stdout)
mov eax,4 ;system call number (sys_write)
int 0x80 ;call kernel
mov eax,1 ;system call number (sys_exit)
int 0x80 ;call kernel
section .data
msg db "The result is:", 0xA,0xD
len equ $- msg
segment .bss
res resb 1
When the above code is compiled and executed, it produces the following result:
41
Assembly Programming
11. Assembly ─ Logical Instructions
The processor instruction set provides the instructions AND, OR, XOR, TEST, and NOT
Boolean logic, which tests, sets, and clears the bits according to the need of the
program.
SN Instruction Format
2 OR OR operand1, operand2
The first operand in all the cases could be either in register or in memory. The second
operand could be either in register/memory or an immediate (constant) value. However,
memory-to-memory operations are not possible. These instructions compare or match
bits of the operands and set the CF, OF, PF, SF and ZF flags.
Operand1: 0101
Operand2: 0011
----------------------------
After AND -> Operand1: 0001
The AND operation can be used for clearing one or more bits. For example, say the BL
register contains 0011 1010. If you need to clear the high-order bits to zero, you AND it
with 0FH.
Let's take up another example. If you want to check whether a given number is odd or
even, a simple test would be to check the least significant bit of the number. If this is 1,
the number is odd, else the number is even.
42
Assembly Programming
Example
section .text
global _start ;must be declared for using gcc
_start: ;tell linker entry point
mov ax, 8h ;getting 8 in the ax
and ax, 1 ;and ax with 1
jz evnn
mov eax, 4 ;system call number (sys_write)
mov ebx, 1 ;file descriptor (stdout)
mov ecx, odd_msg ;message to write
mov edx, len2 ;length of message
int 0x80 ;call kernel
jmp outprog
evnn:
mov ah, 09h
mov eax, 4 ;system call number (sys_write)
mov ebx, 1 ;file descriptor (stdout)
mov ecx, even_msg ;message to write
mov edx, len1 ;length of message
int 0x80 ;call kernel
outprog:
mov eax,1 ;system call number (sys_exit)
int 0x80 ;call kernel
section .data
even_msg db 'Even Number!' ;message showing even number
len1 equ $ - even_msg
odd_msg db 'Odd Number!' ;message showing odd number
len2 equ $ - odd_msg
When the above code is compiled and executed, it produces the following result:
Even Number!
43
Assembly Programming
Odd Number!
Similarly, to clear the entire register, you can AND it with 00H.
The OR Instruction
The OR instruction is used for supporting logical expression by performing bitwise OR
operation. The bitwise OR operator returns 1, if the matching bits from either or both
operands are one. It returns 0, if both the bits are zero.
For example,
Operand1: 0101
Operand2: 0011
----------------------------
After OR -> Operand1: 0111
The OR operation can be used for setting one or more bits. For example, let us assume
the AL register contains 0011 1010, you need to set the four low-order bits, you can OR
it with a value 0000 1111, i.e., FH.
Example
The following example demonstrates the OR instruction. Let us store the value 5 and 3 in
the AL and the BL registers, respectively, then the instruction,
OR AL, BL
section .text
global _start ;must be declared for using gcc
_start: ;tell linker entry point
mov al, 5 ;getting 5 in the al
mov bl, 3 ;getting 3 in the bl
or al, bl ;or al and bl registers, result should be 7
add al, byte '0' ;converting decimal to ascii
mov [result], al
mov eax, 4
mov ebx, 1
44
Assembly Programming
outprog:
mov eax,1 ;system call number (sys_exit)
int 0x80 ;call kernel
section .bss
result resb 1
When the above code is compiled and executed, it produces the following result:
For example,
Operand1: 0101
Operand2: 0011
----------------------------
After XOR -> Operand1: 0110
XORing an operand with itself changes the operand to 0. This is used to clear a register.
45
Assembly Programming
For example,
46
Assembly Programming
12. Assembly ─ Conditions
SN Conditional Instructions
Unconditional jump
Conditional jump
Let us discuss the CMP instruction before discussing the conditional instructions.
CMP Instruction
The CMP instruction compares two operands. It is generally used in conditional
execution. This instruction basically subtracts one operand from the other for comparing
whether the operands are equal or not. It does not disturb the destination or source
operands. It is used along with the conditional jump instruction for decision making.
Syntax
CMP destination, source
CMP compares two numeric data fields. The destination operand could be either in
register or in memory. The source operand could be a constant (immediate) data,
register or memory.
Example
47
Assembly Programming
CMP is often used for comparing whether a counter value has reached the number of
times a loop needs to be run. Consider the following typical condition:
INC EDX
CMP EDX, 10 ; Compares whether the counter has reached 10
JLE LP1 ; If it is less than or equal to 10, then jump
; to LP1 Unconditional Jump
Syntax
The JMP instruction provides a label name where the flow of control is transferred
immediately. The syntax of the JMP instruction is:
JMP label
Example
The following code snippet illustrates the JMP instruction:
Conditional Jump
If some specified condition is satisfied in conditional jump, the control flow is transferred
to a target instruction. There are numerous conditional jump instructions depending
upon the condition and data.
Following are the conditional jump instructions used on signed data used for arithmetic
operations:
48
Assembly Programming
Following are the conditional jump instructions used on unsigned data used for logical
operations:
The following conditional jump instructions have special uses and check the value of
flags:
JC Jump If Carry CF
JO Jump If Overflow OF
49
Assembly Programming
Example
CMP AL, BL
JE EQUAL
CMP AL, BH
JE EQUAL
CMP AL, CL
JE EQUAL
NON_EQUAL: ...
EQUAL: ...
Example
The following program displays the largest of three variables. The variables are double-
digit variables. The three variables num1, num2 and num3 have values 47, 72 and 31,
respectively:
section .text
global _start ;must be declared for using gcc
mov ecx,msg
mov edx, len
mov ebx,1 ;file descriptor (stdout)
mov eax,4 ;system call number (sys_write)
int 0x80 ;call kernel
mov ecx,largest
mov edx, 2
mov ebx,1 ;file descriptor (stdout)
mov eax,4 ;system call number (sys_write)
int 0x80 ;call kernel
mov eax, 1
int 80h
section .data
msg db "The largest digit is: ", 0xA,0xD
len equ $- msg
num1 dd '47'
num2 dd '22'
num3 dd '31'
segment .bss
largest resb 2
When the above code is compiled and executed, it produces the following result:
51
Assembly Programming
13. Assembly ─ Loops
The JMP instruction can be used for implementing loops. For example, the following code
snippet can be used for executing the loop-body 10 times.
MOV CL, 10
L1:
<LOOP-BODY>
DEC CL
JNZ L1
The processor instruction set, however, includes a group of loop instructions for
implementing iteration. The basic LOOP instruction has the following syntax:
LOOP label
Where, label is the target label that identifies the target instruction as in the jump
instructions. The LOOP instruction assumes that the ECX register contains the loop
count. When the loop instruction is executed, the ECX register is decremented and the
control jumps to the target label, until the ECX register value, i.e., the counter reaches
the value zero.
mov ECX,10
l1:
<loop body>
loop l1
Example
The following program prints the number 1 to 9 on the screen:
section .text
global _start ;must be declared for using gcc
_start: ;tell linker entry point
mov ecx,10
mov eax, '1'
l1:
mov [num], eax
mov eax, 4
mov ebx, 1
push ecx
52
Assembly Programming
When the above code is compiled and executed, it produces the following result:
123456789:
53
Assembly Programming
14. Assembly ─ Numbers
So far, we have converted this input data in ASCII form to binary for arithmetic
calculations and converted the result back to binary. The following code shows this:
section .text
global _start ;must be declared for using gcc
_start: ;tell linker entry point
mov eax,'3'
sub eax, '0'
mov ebx, '4'
sub ebx, '0'
add eax, ebx
add eax, '0'
mov [sum], eax
mov ecx,msg
mov edx, len
mov ebx,1 ;file descriptor (stdout)
mov eax,4 ;system call number (sys_write)
int 0x80 ;call kernel
mov ecx,sum
mov edx, 1
mov ebx,1 ;file descriptor (stdout)
mov eax,4 ;system call number (sys_write)
int 0x80 ;call kernel
mov eax,1 ;system call number (sys_exit)
int 0x80 ;call kernel
section .data
msg db "The sum is:", 0xA,0xD
len equ $ - msg
segment .bss
sum resb 1
54
Assembly Programming
When the above code is compiled and executed, it produces the following result:
ASCII form
ASCII Representation
In ASCII representation, decimal numbers are stored as string of ASCII characters. For
example, the decimal value 1234 is stored as:
31 32 33 34H
Where, 31H is ASCII value for 1, 32H is ASCII value for 2, and so on. There are four
instructions for processing numbers in ASCII representation:
These instructions do not take any operands and assume the required operand to be in
the AL register.
The following example uses the AAS instruction to demonstrate the concept:
section .text
global _start ;must be declared for using gcc
_start: ;tell linker entry point
sub ah, ah
mov al, '9'
sub al, '3'
aas
or al, 30h
mov [res], ax
55
Assembly Programming
section .data
msg db 'The Result is:',0xa
len equ $ - msg
section .bss
res resb 1
When the above code is compiled and executed, it produces the following result:
BCD Representation
There are two types of BCD representation:
In unpacked BCD representation, each byte stores the binary equivalent of a decimal
digit. For example, the number 1234 is stored as:
01 02 03 04H
The four ASCII adjust instructions, AAA, AAS, AAM, and AAD, can also be used with
unpacked BCD representation. In packed BCD representation, each digit is stored using
four bits. Two decimal digits are packed into a byte. For example, the number 1234 is
stored as:
12 34H
56
Assembly Programming
Example
The following program adds up two 5-digit decimal numbers and displays the sum. It
uses the above concepts:
section .text
global _start ;must be declared for using gcc
57
Assembly Programming
section .data
msg db 'The Sum is:',0xa
len equ $ - msg
num1 db '12345'
num2 db '23456'
sum db ' '
When the above code is compiled and executed, it produces the following result:
58
Assembly Programming
15. Assembly ─Strings
We have already used variable length strings in our previous examples. The variable
length strings can have as many characters as required. Generally, we specify the length
of the string by either of the two ways:
We can store the string length explicitly by using the $ location counter symbol that
represents the current value of the location counter. In the following example:
$ points to the byte after the last character of the string variable msg. Therefore, $-msg
gives the length of the string. We can also write
Alternatively, you can store strings with a trailing sentinel character to delimit a string
instead of storing the string length explicitly. The sentinel character should be a special
character that does not appear within a string.
For example:
String Instructions
Each string instruction may require a source operand, a destination operand or both. For
32-bit segments, string instructions use ESI and EDI registers to point to the source and
destination operands, respectively.
For 16-bit segments, however, the SI and the DI registers are used to point to the
source and destination, respectively.
There are five basic instructions for processing strings. They are:
LODS - This instruction loads from memory. If the operand is of one byte, it is
loaded into the AL register, if the operand is one word, it is loaded into the AX
register and a doubleword is loaded into the EAX register.
STOS - This instruction stores data from register (AL, AX, or EAX) to memory.
CMPS - This instruction compares two data items in memory. Data could be of a
byte size, word or doubleword.
59
Assembly Programming
SCAS - This instruction compares the contents of a register (AL, AX or EAX) with
the contents of an item in memory.
Each of the above instruction has a byte, word, and doubleword version; and string
instructions can be repeated by using a repetition prefix.
These instructions use the ES:DI and DS:SI pair of registers, where DI and SI registers
contain valid offset addresses that refers to bytes stored in memory. SI is normally
associated with DS (data segment) and DI is always associated with ES (extra segment).
The DS:SI (or ESI) and ES:DI (or EDI) registers point to the source and destination
operands, respectively. The source operand is assumed to be at DS:SI (or ESI) and the
destination operand at ES:DI (or EDI) in memory.
For 16-bit addresses, the SI and DI registers are used, and for 32-bit addresses, the ESI
and EDI registers are used.
The following table provides various versions of string instructions and the assumed
space of the operands.
Repetition Prefixes
The REP prefix, when set before a string instruction, for example - REP MOVSB, causes
repetition of the instruction based on a counter placed at the CX register. REP executes
the instruction, decreases CX by 1, and checks whether CX is zero. It repeats the
instruction processing until CX is zero.
Use CLD (Clear Direction Flag, DF = 0) to make the operation left to right.
Use STD (Set Direction Flag, DF = 1) to make the operation right to left.
60
Assembly Programming
REPE or REPZ: It is conditional repeat. It repeats the operation while the zero flag
indicates equal/zero. It stops when the ZF indicates not equal/zero or when CX is
zero.
REPNE or REPNZ: It is also conditional repeat. It repeats the operation while the
zero flag indicates not equal/zero. It stops when the ZF indicates equal/zero or
when CX is decremented to zero.
61
Assembly Programming
16. Assembly ─Arrays
We have already discussed that the data definition directives to the assembler are used
for allocating storage for variables. The variable could also be initialized with some
specific value. The initialized value could be specified in hexadecimal, decimal or binary
form.
For example, we can define a word variable ‘months’ in either of the following way:
MONTHS DW 12
MONTHS DW 0CH
MONTHS DW 0110B
The data definition directives can also be used for defining a one-dimensional array. Let
us define a one-dimensional array of numbers.
The above definition declares an array of six words each initialized with the numbers 34,
45, 56, 67, 75, 89. This allocates 2x6 = 12 bytes of consecutive memory space. The
symbolic address of the first number will be NUMBERS and that of the second number
will be NUMBERS + 2 and so on.
Let us take up another example. You can define an array named inventory of size 8, and
initialize all the values with zero, as:
INVENTORY DW 0
DW 0
DW 0
DW 0
DW 0
DW 0
DW 0
DW 0
INVENTORY DW 0, 0 , 0 , 0 , 0 , 0 , 0 , 0
The TIMES directive can also be used for multiple initializations to the same value. Using
TIMES, the INVENTORY array can be defined as:
INVENTORY TIMES 8 DW 0
62
Assembly Programming
Example
The following example demonstrates the above concepts by defining a 3-element array
x, which stores three values: 2, 3 and 4. It adds the values in the array and displays the
sum 9:
section .text
global _start ;must be declared for linker (ld)
_start:
section .data
global x
x:
db 2
db 4
db 3
sum:
db 0
63
Assembly Programming
When the above code is compiled and executed, it produces the following result:
64
Assembly Programming
17. Assembly ─ Procedures
Syntax
Following is the syntax to define a procedure:
proc_name:
procedure body
...
ret
The procedure is called from another function by using the CALL instruction. The CALL
instruction should have the name of the called procedure as an argument as shown
below:
CALL proc_name
The called procedure returns the control to the calling procedure by using the RET
instruction.
Example
Let us write a very simple procedure named sum that adds the variables stored in the
ECX and EDX register and returns the sum in the EAX register:
section .text
global _start ;must be declared for using gcc
_start: ;tell linker entry point
mov ecx,'4'
sub ecx, '0'
mov edx, '5'
sub edx, '0'
call sum ;call sum procedure
mov [res], eax
mov ecx, msg
mov edx, len
mov ebx,1 ;file descriptor (stdout)
mov eax,4 ;system call number (sys_write)
int 0x80 ;call kernel
65
Assembly Programming
When the above code is compiled and executed, it produces the following result:
Assembly language provides two instructions for stack operations: PUSH and POP. These
instructions have syntaxes like:
PUSH operand
POP address/register
The memory space reserved in the stack segment is used for implementing stack. The
registers SS and ESP (or SP) are used for implementing the stack. The top of the stack,
which points to the last data item inserted into the stack is pointed to by the SS:ESP
register, where the SS register points to the beginning of the stack segment and the SP
(or ESP) gives the offset into the stack segment.
66
Assembly Programming
The stack grows in the reverse direction, i.e., toward the lower memory address
The top of the stack points to the last item inserted in the stack; it points to the
lower byte of the last word inserted.
As we discussed about storing the values of the registers in the stack before using them
for some use; it can be done in following way:
Example
The following program displays the entire ASCII character set. The main program calls a
procedure named display, which displays the ASCII character set.
section .text
global _start ;must be declared for using gcc
_start: ;tell linker entry point
call display
mov eax,1 ;system call number (sys_exit)
int 0x80 ;call kernel
display:
mov ecx, 256
next:
push ecx
mov eax, 4
mov ebx, 1
mov ecx, achar
mov edx, 1
67
Assembly Programming
int 80h
pop ecx
mov dx, [achar]
cmp byte [achar], 0dh
inc byte [achar]
loop next
ret
section .data
achar db '0'
When the above code is compiled and executed, it produces the following result:
0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}
...
...
68
Assembly Programming
18. Assembly ─ Recursion
A recursive procedure is one that calls itself. There are two kind of recursion: direct and
indirect. In direct recursion, the procedure calls itself and in indirect recursion, the first
procedure calls a second procedure, which in turn calls the first procedure.
section .text
global _start ;must be declared for using gcc
_start: ;tell linker entry point
section .data
msg db 'Factorial 3 is:',0xa
len equ $ - msg
section .bss
fact resb 1
When the above code is compiled and executed, it produces the following result:
Factorial 3 is:
6
70
Assembly Programming
19. Assembly ─ Macros
The macro begins with the %macro directive and ends with the %endmacro
directive.
The macro is invoked by using the macro name along with the necessary parameters.
When you need to use some sequence of instructions many times in a program, you can
put those instructions in a macro and use it instead of writing the instructions all the
time.
For example, a very common need for programs is to write a string of characters in the
screen. For displaying a string of characters, you need the following sequence of
instructions:
In the above example of displaying a character string, the registers EAX, EBX, ECX and
EDX have been used by the INT 80H function call. So, each time you need to display on
screen, you need to save these registers on the stack, invoke INT 80H and then restore
the original value of the registers from the stack. So, it could be useful to write two
macros for saving and restoring data.
We have observed that, some instructions like IMUL, IDIV, INT, etc., need some of the
information to be stored in some particular registers and even return values in some
specific register(s). If the program was already using those registers for keeping
important data, then the existing data from these registers should be saved in the stack
and restored after the instruction is executed.
71
Assembly Programming
Example
Following example shows defining and using macros:
section .text
global _start ;must be declared for using gcc
_start: ;tell linker entry point
write_string msg1, len1
write_string msg2, len2
write_string msg3, len3
mov eax,1 ;system call number (sys_exit)
int 0x80 ;call kernel
section .data
msg1 db 'Hello, programmers!',0xA,0xD
len1 equ $ - msg1
msg2 db 'Welcome to the world of,', 0xA,0xD
len2 equ $- msg2
msg3 db 'Linux assembly programming! '
len3 equ $- msg3
When the above code is compiled and executed, it produces the following result:
Hello, programmers!
Welcome to the world of,
Linux assembly programming!
72
Assembly Programming
20. Assembly ─ File Management
The system considers any input or output data as stream of bytes. There are three
standard file streams:
File Descriptor
A file descriptor is a 16-bit integer assigned to a file as a file id. When a new file is
created or an existing file is opened, the file descriptor is used for accessing the file.
File descriptor of the standard file streams - stdin, stdout and stderr are 0, 1 and 2,
respectively.
File Pointer
A file pointer specifies the location for a subsequent read/write operation in the file in
terms of bytes. Each file is considered as a sequence of bytes. Each open file is
associated with a file pointer that specifies an offset in bytes, relative to the beginning of
the file. When a file is opened, the file pointer is set to zero.
73
Assembly Programming
The steps required for using the system calls are same, as we discussed earlier:
2. Store the arguments to the system call in the registers EBX, ECX, etc.
The system call returns the file descriptor of the created file in the EAX register, in case
of error, the error code is in the EAX register.
The system call returns the file descriptor of the created file in the EAX register, in case
of error, the error code is in the EAX register.
Among the file access modes, most commonly used are: read-only (0), write-only (1),
and read-write (2).
4. Put the buffer size, i.e., the number of bytes to read, in the EDX register.
The system call returns the number of bytes read in the EAX register, in case of error,
the error code is in the EAX register.
74
Assembly Programming
Writing to a File
For writing to a file, perform the following tasks:
4. Put the buffer size, i.e., the number of bytes to write, in the EDX register.
The system call returns the actual number of bytes written in the EAX register, in case of
error, the error code is in the EAX register.
Closing a File
For closing a file, perform the following tasks:
The system call returns, in case of error, the error code in the EAX register.
Updating a File
For updating a file, perform the following tasks:
1. Put the system call sys_lseek () number 19, in the EAX register.
4. Put the reference position for the offset in the EDX register.
The system call returns, in case of error, the error code in the EAX register.
Example
The following program creates and opens a file named myfile.txt, and writes a text
'Welcome to Tutorials Point' in this file. Next, the program reads from the file and stores
the data into a buffer named info. Lastly, it displays the text as stored in info.
section .text
global _start ;must be declared for using gcc
_start: ;tell linker entry point
;create the file
mov eax, 8
75
Assembly Programming
76
Assembly Programming
section .data
file_name db 'myfile.txt'
msg db 'Welcome to Tutorials Point'
len equ $-msg
msg_done db 'Written to file', 0xa
len_done equ $-msg_done
section .bss
fd_out resb 1
fd_in resb 1
info resb 26
When the above code is compiled and executed, it produces the following result:
Written to file
Welcome to Tutorials Point
77
Assembly Programming
21. Assembly ─ Memory Management
The sys_brk() system call is provided by the kernel, to allocate memory without the
need of moving it later. This call allocates memory right behind the application image in
the memory. This system function allows you to set the highest available address in the
data section.
This system call takes one parameter, which is the highest memory address needed to
be set. This value is stored in the EBX register.
In case of any error, sys_brk() returns -1 or returns the negative error code itself. The
following example demonstrates dynamic memory allocation.
Example
The following program allocates 16kb of memory using the sys_brk() system call:
section .text
global _start ;must be declared for using gcc
_start: ;tell linker entry point
mov eax, 4
mov ebx, 1
mov ecx, msg
78
Assembly Programming
When the above code is compiled and executed, it produces the following result:
Allocated 16 kb of memory!
79