Assembly Programming Basics
Assembly Programming Basics
Each personal computer has a microprocessor that manages the computer's arithmetical,
logical, and control activities.
Each family of processors has its own set of instructions for handling various operations
such as getting input from keyboard, displaying information on screen and performing
various other jobs. These set of instructions are called 'machine language instructions'.
A processor understands only machine language instructions, which are strings of 1's and
0's. However, machine language is too obscure and complex for using in software
development. So, the low-level assembly language is designed for a specific family of
processors that represents various instructions in symbolic code and a more
understandable form.
Every number system uses positional notation, i.e., each position in which a digit is written
has a different positional value. Each position is power of the base, which is 2 for binary
number system, and these powers begin at 0 and increase by 1.
The following table shows the positional values for an 8-bit binary number, where all bits
are set ON.
Bit value 1 1 1 1 1 1 1 1
1
Position value as a power of base 6 3 1
2 8 4 2 1
2 4 2 6
8
Bit number 7 6 5 4 3 2 1 0
The value of a binary number is based on the presence of 1 bits and their positional value.
So, the value of a given binary number is −
1 + 2 + 4 + 8 +16 + 32 + 64 + 128 = 255
which is same as 28 - 1.
Hexadecimal number system uses base 16. The digits in this system range from 0 to 15.
By convention, the letters A through F is used to represent the hexadecimal digits
corresponding to decimal values 10 through 15.
Hexadecimal numbers in computing is used for abbreviating lengthy binary
representations. Basically, hexadecimal number system represents a binary data by
dividing each byte in half and expressing the value of each half-byte. The following table
provides the decimal, binary, and hexadecimal equivalents −
Decimal Binary Hexadecimal
number representation representation
0 0 0
1 1 1
2 10 2
3 11 3
4 100 4
5 101 5
6 110 6
7 111 7
8 1000 8
9 1001 9
10 1010 A
11 1011 B
12 1100 C
13 1101 D
14 1110 E
15 1111 F
To convert a binary number to its hexadecimal equivalent, break it into groups of 4
consecutive groups each, starting from the right, and write those groups over the
corresponding digits of the hexadecimal number.
Example − Binary number 1000 1100 1101 0001 is equivalent to hexadecimal - 8CD1
To convert a hexadecimal number to binary, just write each hexadecimal digit into its 4-
digit binary equivalent.
Example − Hexadecimal number FAD8 is equivalent to binary - 1111 1010 1101 1000
Binary Arithmetic
The following table illustrates four simple rules for binary addition −
( (i (ii (iv
i i) i) )
)
0 1 1 1
+ + +
+1
0 0 1
= = = =1
0 1 10 1
Rules (iii) and (iv) show a carry of a 1-bit into the next left position.
Example
Decimal Binary
0011110
60
0
0010101
+42
0
0110011
102
0
A negative binary value is expressed in two's complement notation. According to this
rule, to convert a binary number to its negative value is to reverse its bit values and add 1.
Example
Number 53 00110101
Reverse the
11001010
bits
Add 1 00000001
Number 53 00110101
Number 42 00101010
Add 1 00000001
53 - 42 = 11 00001011
Overflow of the last 1 bit is lost.
The process through which the processor controls the execution of instructions is referred
as the fetch-decode-execute cycle or the execution cycle. It consists of three
continuous steps −
Fetching the instruction from memory
Decoding or identifying the instruction
Executing the instruction
The processor may access one or more bytes of memory at a time. Let us consider a
hexadecimal number 0725H. This number will require two bytes of memory. The high-
order byte or most significant byte is 07 and the low-order byte is 25.
The processor stores data in reverse-byte sequence, i.e., a low-order byte is stored in a
low memory address and a high-order byte in high memory address. So, if the processor
brings the value 0725H from register to memory, it will transfer 25 first to the lower memory
address and 07 to the next memory address.
x: memory address
When the processor gets the numeric data from memory to register, it again reverses the
bytes. There are two kinds of memory addresses −
Absolute address - a direct reference of specific location.
Segment address (or offset) - starting address of a memory segment with the
offset value.
Assembly - Environment Setup
Local Environment Setup
Assembly language is dependent upon the instruction set and the architecture of the
processor. In this tutorial, we focus on Intel-32 processors like Pentium. To follow this
tutorial, you will need −
An IBM PC or any equivalent compatible computer
A copy of Linux operating system
A copy of NASM assembler program
There are many good assembler programs, such as −
Microsoft Assembler (MASM)
Borland Turbo Assembler (TASM)
The GNU assembler (GAS)
We will use the NASM assembler, as it is −
Free. You can download it from various web sources.
Well documented and you will get lots of information on net.
Could be used on both Linux and Windows.
Installing NASM
If you select "Development Tools" while installing Linux, you may get NASM installed along
with the Linux operating system and you do not need to download and install it separately.
For checking whether you already have NASM installed, take the following steps −
Open a Linux terminal.
Type whereis nasm and press ENTER.
If it is already installed, then a line like, nasm: /usr/bin/nasm appears. Otherwise,
you will see just nasm:, then you need to install NASM.
To install NASM, take the following steps −
Check The netwide assembler (NASM) website for the latest version.
Download the Linux source archive nasm-X.XX.ta.gz, where X.XX is the NASM
version number in the archive.
Unpack the archive into a directory which creates a subdirectory nasm-X. XX.
cd to nasm-X.XX and type ./configure. This shell script will find the best C
compiler to use and set up Makefiles accordingly.
Type make to build the nasm and ndisasm binaries.
Type make install to install nasm and ndisasm in /usr/local/bin and to install the
man pages.
This should install NASM on your system. Alternatively, you can use an RPM distribution
for the Fedora Linux. This version is simpler to install, just double-click the RPM file.
The data Section
The data section is used for declaring initialized data or constants. This data does not
change at runtime. You can declare various constant values, file names, or buffer size,
etc., in this section.
The syntax for declaring data section is −
section.data
The bss Section
The bss section is used for declaring variables. The syntax for declaring bss section is −
section.bss
The text section
The text section is used for keeping the actual code. This section must begin with the
declaration global _start, which tells the kernel where the program execution begins.
The syntax for declaring text section is −
section.text
global _start
_start:
Comments
Assembly language comment begins with a semicolon (;). It may contain any printable
character including blank. It can appear on a line by itself, like −
; This program displays a message on screen
or, on the same line along with an instruction, like −
add eax, ebx ; adds ebx to eax
Assembly language statements are entered one statement per line. Each statement
follows the following format −
[label] mnemonic [operands] [;comment]
The fields in the square brackets are optional. A basic instruction has two parts, the first
one is the name of the instruction (or the mnemonic), which is to be executed, and the
second are the operands or the parameters of the command.
Following are some examples of typical assembly language statements −
INC COUNT ; Increment the memory variable COUNT
The following assembly language code displays the string 'Hello World' on the screen −
Live Demo
section .text
global _start ;must be declared for linker (ld)
section .data
msg db 'Hello, world!', 0xa ;string to be printed
len equ $ - msg ;length of the string
When the above code is compiled and executed, it produces the following result −
Hello, world!
Make sure you have set the path of nasm and ld binaries in your PATH environment
variable. Now, take the following steps for compiling and linking the above program −
Type the above code using a text editor and save it as hello.asm.
Make sure that you are in the same directory as where you saved hello.asm.
To assemble the program, type nasm -f elf hello.asm
If there is any error, you will be prompted about that at this stage. Otherwise, an
object file of your program named hello.o will be created.
To link the object file and create an executable file named hello, type ld -m
elf_i386 -s -o hello hello.o
Execute the program by typing ./hello
If you have done everything correctly, it will display 'Hello, world!' on the screen.
Assembly - Memory Segments
We have already discussed the three sections of an assembly program. These sections
represent various memory segments as well.
Interestingly, if you replace the section keyword with segment, you will get the same result.
Try the following code −
Live Demo
Memory Segments
A segmented memory model divides the system memory into groups of independent
segments referenced by pointers located in the segment registers. Each segment is used
to contain a specific type of data. One segment is used to contain instruction codes,
another segment stores the data elements, and a third segment keeps the program stack.
In the light of the above discussion, we can specify various memory segments as −
Data segment − It is represented by .data section and the .bss. The .data section
is used to declare the memory region, where data elements are stored for the
program. This section cannot be expanded after the data elements are declared,
and it remains static throughout the program.
The .bss section is also a static memory section that contains buffers for data to be
declared later in the program. This buffer memory is zero-filled.
Code segment − It is represented by .text section. This defines an area in
memory that stores the instruction codes. This is also a fixed area.
Stack − This segment contains data values passed to functions and procedures
within the program.
Assembly - Registers
Processor operations mostly involve processing data. This data can be stored in memory
and accessed from thereon. However, reading data from and storing data into memory
slows down the processor, as it involves complicated processes of sending the data
request across the control bus and into the memory storage unit and getting the data
through the same channel.
To speed up the processor operations, the processor includes some internal memory
storage locations, called registers.
The registers store data elements for processing without having to access the memory. A
limited number of registers are built into the processor chip.
Processor Registers
There are ten 32-bit and six 16-bit processor registers in IA-32 architecture. The registers
are grouped into three categories −
General registers,
Control registers, and
Segment registers.
The general registers are further divided into the following groups −
Data registers,
Pointer registers, and
Index registers.
Data Registers
Four 32-bit data registers are used for arithmetic, logical, and other operations. These 32-
bit registers can be used in three ways −
As complete 32-bit data registers: EAX, EBX, ECX, EDX.
Lower halves of the 32-bit registers can be used as four 16-bit data registers: AX,
BX, CX and DX.
Lower and higher halves of the above-mentioned four 16-bit registers can be used
as eight 8-bit data registers: AH, AL, BH, BL, CH, CL, DH, and DL.
Some of these data registers have specific use in arithmetical operations.
AX is the primary accumulator; it is used in input/output and most arithmetic instructions.
For example, in multiplication operation, one operand is stored in EAX or AX or AL register
according to the size of the operand.
BX is known as the base register, as it could be used in indexed addressing.
CX is known as the count register, as the ECX, CX registers store the loop count in
iterative operations.
DX is known as the data register. It is also used in input/output operations. It is also
used with AX register along with DX for multiply and divide operations involving large
values.
Pointer Registers
The pointer registers are 32-bit EIP, ESP, and EBP registers and corresponding 16-bit right
portions IP, SP, and BP. There are three categories of pointer registers −
Instruction Pointer (IP) − The 16-bit IP register stores the offset address of the
next instruction to be executed. IP in association with the CS register (as CS:IP)
gives the complete address of the current instruction in the code segment.
Stack Pointer (SP) − The 16-bit SP register provides the offset value within the
program stack. SP in association with the SS register (SS:SP) refers to be current
position of data or address within the program stack.
Base Pointer (BP) − The 16-bit BP register mainly helps in referencing the
parameter variables passed to a subroutine. The address in SS register is
combined with the offset in BP to get the location of the parameter. BP can also be
combined with DI and SI as base register for special addressing.
Index Registers
The 32-bit index registers, ESI and EDI, and their 16-bit rightmost portions. SI and DI, are
used for indexed addressing and sometimes used in addition and subtraction. There are
two sets of index pointers −
Source Index (SI) − It is used as source index for string operations.
Destination Index (DI) − It is used as destination index for string operations.
Control Registers
The 32-bit instruction pointer register and the 32-bit flags register combined are
considered as the control registers.
Many instructions involve comparisons and mathematical calculations and change the
status of the flags and some other conditional instructions test the value of these status
flags to take the control flow to other location.
The common flag bits are:
Overflow Flag (OF) − It indicates the overflow of a high-order bit (leftmost bit) of
data after a signed arithmetic operation.
Direction Flag (DF) − It determines left or right direction for moving or comparing
string data. When the DF value is 0, the string operation takes left-to-right direction
and when the value is set to 1, the string operation takes right-to-left direction.
Interrupt Flag (IF) − It determines whether the external interrupts like keyboard
entry, etc., are to be ignored or processed. It disables the external interrupt when
the value is 0 and enables interrupts when set to 1.
Trap Flag (TF) − It allows setting the operation of the processor in single-step
mode. The DEBUG program we used sets the trap flag, so we could step through
the execution one instruction at a time.
Sign Flag (SF) − It shows the sign of the result of an arithmetic operation. This flag
is set according to the sign of a data item following the arithmetic operation. The
sign is indicated by the high-order of leftmost bit. A positive result clears the value of
SF to 0 and negative result sets it to 1.
Zero Flag (ZF) − It indicates the result of an arithmetic or comparison operation. A
nonzero result clears the zero flag to 0, and a zero result sets it to 1.
Auxiliary Carry Flag (AF) − It contains the carry from bit 3 to bit 4 following an
arithmetic operation; used for specialized arithmetic. The AF is set when a 1-byte
arithmetic operation causes a carry from bit 3 into bit 4.
Parity Flag (PF) − It indicates the total number of 1-bits in the result obtained from
an arithmetic operation. An even number of 1-bits clears the parity flag to 0 and an
odd number of 1-bits sets the parity flag to 1.
Carry Flag (CF) − It contains the carry of 0 or 1 from a high-order bit (leftmost)
after an arithmetic operation. It also stores the contents of last bit of
a shift or rotate operation.
The following table indicates the position of flag bits in the 16-bit Flags register:
Flag: O D I T S Z A P C
Bit 1 1 1 1 1 1
9 8 7 6 5 4 3 2 1 0
no: 5 4 3 2 1 0
Segment Registers
Segments are specific areas defined in a program for containing data, code and stack.
There are three main segments −
Code Segment − It contains all the instructions to be executed. A 16-bit Code
Segment register or CS register stores the starting address of the code segment.
Data Segment − It contains data, constants and work areas. A 16-bit Data
Segment register or DS register stores the starting address of the data segment.
Stack Segment − It contains data and return addresses of procedures or
subroutines. It is implemented as a 'stack' data structure. The Stack Segment
register or SS register stores the starting address of the stack.
Apart from the DS, CS and SS registers, there are other extra segment registers - ES
(extra segment), FS and GS, which provide additional segments for storing data.
In assembly programming, a program needs to access the memory locations. All memory
locations within a segment are relative to the starting address of the segment. A segment
begins in an address evenly divisible by 16 or hexadecimal 10. So, the rightmost hex digit
in all such memory addresses is 0, which is not generally stored in the segment registers.
The segment registers stores the starting addresses of a segment. To get the exact
location of data or instruction within a segment, an offset value (or displacement) is
required. To reference any memory location in a segment, the processor combines the
segment address in the segment register with the offset value of the location.
Example
Look at the following simple program to understand the use of registers in assembly
programming. This program displays 9 stars on the screen along with a simple message −
Live Demo
section .text
global _start ;must be declared for linker (gcc)
section .data
msg db 'Displaying 9 stars',0xa ;a message
len equ $ - msg ;length of message
s2 times 9 db '*'
When the above code is compiled and executed, it produces the following result −
Displaying 9 stars
*********
You can make use of Linux system calls in your assembly programs. You need to take the
following steps for using Linux system calls in your program −
Put the system call number in the EAX register.
Store the arguments to the system call in the registers EBX, ECX, etc.
Call the relevant interrupt (80h).
The result is usually returned in the EAX register.
There are six registers that store the arguments of the system call used. These are the
EBX, ECX, EDX, ESI, EDI, and EBP. These registers take the consecutive arguments,
starting with the EBX register. If there are more than six arguments, then the memory
location of the first argument is stored in the EBX register.
The following code snippet shows the use of the system call sys_exit −
mov eax,1 ; system call number (sys_exit)
int 0x80 ; call kernel
The following code snippet shows the use of the system call sys_write −
mov edx,4 ; message length
mov ecx,msg ; message to write
mov ebx,1 ; file descriptor (stdout)
mov eax,4 ; system call number (sys_write)
int 0x80 ; call kernel
All the syscalls are listed in /usr/include/asm/unistd.h, together with their numbers (the
value to put in EAX before you call int 80h).
The following table shows some of the system calls used in this tutorial −
%ea %e %e %e
Name %ebx %ecx
x dx sx di
sys_exi
1 int - - - -
t
sys_for struct
2 - - - -
k pt_regs
sys_clo unsigned
6 - - - -
se int
Example
The following example reads a number from the keyboard and displays it on the screen −
Live Demo
; Exit code
mov eax, 1
mov ebx, 0
int 80h
When the above code is compiled and executed, it produces the following result −
Please enter a number:
1234
You have entered:1234
In this addressing mode, a register contains the operand. Depending upon the instruction,
the register may be the first operand, the second operand or both.
For example,
MOV DX, TAX_RATE ; Register in first operand
MOV COUNT, CX ; Register in second operand
MOV EAX, EBX ; Both the operands are in registers
As processing data between registers does not involve memory, it provides fastest
processing of data.
Immediate Addressing
When operands are specified in memory addressing mode, direct access to main memory,
usually to the data segment, is required. This way of addressing results in slower
processing of data. To locate the exact location of data in memory, we need the segment
start address, which is typically found in the DS register and an offset value. This offset
value is also called effective address.
In direct addressing mode, the offset value is specified directly as part of the instruction,
usually indicated by the variable name. The assembler calculates the offset value and
maintains a symbol table, which stores the offset values of all the variables used in the
program.
In direct memory addressing, one of the operands refers to a memory location and the
other operand references a register.
For example,
ADD BYTE_VALUE, DL ; Adds the register in the memory location
MOV BX, WORD_VALUE ; Operand from the memory is added to
register
Direct-Offset Addressing
This addressing mode uses the arithmetic operators to modify an address. For example,
look at the following definitions that define tables of data −
BYTE_TABLE DB 14, 15, 22, 45 ; Tables of bytes
WORD_TABLE DW 134, 345, 564, 123 ; Tables of words
The following operations access data from the tables in the memory into registers −
MOV CL, BYTE_TABLE[2] ; Gets the 3rd element of the BYTE_TABLE
MOV CL, BYTE_TABLE + 2 ; Gets the 3rd element of the BYTE_TABLE
MOV CX, WORD_TABLE[3] ; Gets the 4th element of the WORD_TABLE
MOV CX, WORD_TABLE + 3 ; Gets the 4th element of the WORD_TABLE
We have already used the MOV instruction that is used for moving data from one storage
space to another. The MOV instruction takes two operands.
Syntax
The MOV instruction may have one of the following five forms −
MOV register, register
MOV register, immediate
MOV memory, immediate
MOV register, memory
MOV memory, register
Please note that −
Both the operands in MOV operation should be of same size
The value of source operand remains unchanged
The MOV instruction causes ambiguity at times. For example, look at the statements −
MOV EBX, [MY_TABLE] ; Effective Address of MY_TABLE in EBX
MOV [EBX], 110 ; MY_TABLE[0] = 110
It is not clear whether you want to move a byte equivalent or word equivalent of the
number 110. In such cases, it is wise to use a type specifier.
Following table shows some of the common type specifiers −
Type Bytes
Specifier addressed
BYTE 1
WORD 2
DWORD 4
QWORD 8
TBYTE 10
Example
The following program illustrates some of the concepts discussed above. It stores a name
'Zara Ali' in the data section of the memory, then changes its value to another name 'Nuha
Ali' programmatically and displays both the names.
Live Demo
section .text
global _start ;must be declared for linker (ld)
_start: ;tell linker entry point
section .data
name db 'Zara Ali '
When the above code is compiled and executed, it produces the following result −
Zara Ali Nuha Ali
Assembly - Variables
NASM provides various define directives for reserving storage space for variables. The
define assembler directive is used for allocation of storage space. It can be used to
reserve as well as initialize one or more bytes.
Where, variable-name is the identifier for each storage space. The assembler associates
an offset value for each variable name defined in the data segment.
There are five basic forms of the define directive −
Define
DD allocates 4 bytes
Doubleword
allocates 10
DT Define Ten Bytes
bytes
Following are some examples of using define directives −
choice DB 'y'
number DW 12345
neg_number DW -12345
big_number DQ 123456789
real_number1 DD 1.234
real_number2 DQ 123.456
Please note that −
Each byte of character is stored as its ASCII value in hexadecimal.
Each decimal value is automatically converted to its 16-bit binary equivalent and
stored as a hexadecimal number.
Processor uses the little-endian byte ordering.
Negative numbers are converted to its 2's complement representation.
Short and long floating-point numbers are represented using 32 or 64 bits,
respectively.
The following program shows the use of define directive −
Live Demo
section .text
global _start ;must be declared for linker (gcc)
section .data
choice DB 'y'
When the above code is compiled and executed, it produces the following result −
y
The reserve directives are used for reserving space for uninitialized data. The reserve
directives take a single operand that specifies the number of units of space to be reserved.
Each define directive has a related reserve directive.
There are five basic forms of the reserve directive −
Directi
Purpose
ve
Reserve a
RESD
Doubleword
Multiple Definitions
You can have multiple data definition statements in a program. For example −
choice DB 'Y' ;ASCII of y = 79H
number1 DW 12345 ;12345D = 3039H
number2 DD 12345679 ;123456789D = 75BCD15H
The assembler allocates contiguous memory for multiple variable definitions.
Multiple Initializations
The TIMES directive allows multiple initializations to the same value. For example, an
array named marks of size 9 can be defined and initialized to zero using the following
statement −
marks TIMES 9 DW 0
The TIMES directive is useful in defining arrays and tables. The following program displays
9 asterisks on the screen −
Live Demo
section .text
global _start ;must be declared for linker (ld)
section .data
stars times 9 db '*'
When the above code is compiled and executed, it produces the following result −
*********
Assembly - Constants
There are several directives provided by NASM that define constants. We have already
used the EQU directive in previous chapters. We will particularly discuss three directives −
EQU
%assign
%define
The EQU Directive
The EQU directive is used for defining constants. The syntax of the EQU directive is as
follows −
CONSTANT_NAME EQU expression
For example,
TOTAL_STUDENTS equ 50
You can then use this constant value in your code, like −
mov ecx, TOTAL_STUDENTS
cmp eax, TOTAL_STUDENTS
The operand of an EQU statement can be an expression −
LENGTH equ 20
WIDTH equ 10
AREA equ length * width
Above code segment would define AREA as 200.
Example
SYS_EXIT equ 1
SYS_WRITE equ 4
STDIN equ 0
STDOUT equ 1
section .text
global _start ;must be declared for using gcc
section .data
msg1 db 'Hello, programmers!',0xA,0xD
len1 equ $ - msg1
The %assign directive can be used to define numeric constants like the EQU directive.
This directive allows redefinition. For example, you may define the constant TOTAL as −
%assign TOTAL 10
The %define directive allows defining both numeric and string constants. This directive is
similar to the #define in C. For example, you may define the constant PTR as −
%define PTR [EBP+4]
The INC instruction is used for incrementing an operand by one. It works on a single
operand that can be either in a register or in memory.
Syntax
Example
The DEC instruction is used for decrementing an operand by one. It works on a single
operand that can be either in a register or in memory.
Syntax
segment .data
count dw 0
value db 15
segment .text
inc [count]
dec [value]
The ADD and SUB instructions are used for performing simple addition/subtraction of
binary data in byte, word and doubleword size, i.e., for adding or subtracting 8-bit, 16-bit or
32-bit operands, respectively.
Syntax
The following example will ask two digits from the user, store the digits in the EAX and
EBX register, respectively, add the values, store the result in a memory location 'res' and
finally display the result.
Live Demo
SYS_EXIT equ 1
SYS_READ equ 3
SYS_WRITE equ 4
STDIN equ 0
STDOUT equ 1
segment .data
segment .bss
num1 resb 2
num2 resb 2
res resb 1
section .text
global _start ;must be declared for using gcc
; moving the first number to eax register and second number to ebx
; and subtracting ascii '0' to convert it into a decimal number
exit:
section .text
global _start ;must be declared for using gcc
mov ecx,sum
mov edx, 1
mov ebx,1 ;file descriptor (stdout)
mov eax,4 ;system call number (sys_write)
int 0x80 ;call kernel
section .data
msg db "The sum is:", 0xA,0xD
len equ $ - msg
segment .bss
sum resb 1
When the above code is compiled and executed, it produces the following result −
The sum is:
7
There are two instructions for multiplying binary data. The MUL (Multiply) instruction
handles unsigned data and the IMUL (Integer Multiply) handles signed data. Both
instructions affect the Carry and Overflow flag.
Syntax
Multiplicand in both cases will be in an accumulator, depending upon the size of the
multiplicand and the multiplier and the generated product is also stored in two registers
depending upon the size of the operands. Following section explains MUL instructions with
three different cases −
Sr.N
Scenarios
o.
The multiplicand is in the AL register, and the multiplier is a byte in the memory or
in another register. The product is in AX. High-order 8 bits of the product is stored
1 in AH and the low-order 8 bits are stored in AL.
2 The resultant product is a doubleword, which will need two registers. The high-
order (leftmost) portion gets stored in DX and the lower-order (rightmost) portion
gets stored in AX.
When two doubleword values are multiplied, the multiplicand should be in EAX
and the multiplier is a doubleword value stored in memory or in another register.
The product generated is stored in the EDX:EAX registers, i.e., the high order 32
3 bits gets stored in the EDX register and the low order 32-bits are stored in the
EAX register.
Example
MOV AL, 10
MOV DL, 25
MUL DL
...
MOV DL, 0FFH ; DL= -1
MOV AL, 0BEH ; AL = -66
IMUL DL
Example
section .text
global _start ;must be declared for using gcc
mov al,'3'
sub al, '0'
mov [res], al
mov ecx,msg
mov edx, len
mov ebx,1 ;file descriptor (stdout)
mov eax,4 ;system call number (sys_write)
int 0x80 ;call kernel
mov ecx,res
mov edx, 1
mov ebx,1 ;file descriptor (stdout)
mov eax,4 ;system call number (sys_write)
int 0x80 ;call kernel
Syntax
The dividend is in an accumulator. Both the instructions can work with 8-bit, 16-bit or 32-bit
operands. The operation affects all six status flags. Following section explains three cases
of division with different operand size −
Sr.N
Scenarios
o.
The dividend is assumed to be in the AX register (16 bits). After division, the
quotient goes to the AL register and the remainder goes to the AH register.
When the divisor is 1 word −
The dividend is assumed to be 32 bits long and in the DX:AX registers. The high-
order 16 bits are in DX and the low-order 16 bits are in AX. After division, the 16-
bit quotient goes to the AX register and the 16-bit remainder goes to the DX
register.
2
The dividend is assumed to be 64 bits long and in the EDX:EAX registers. The
high-order 32 bits are in EDX and the low-order 32 bits are in EAX. After division,
the 32-bit quotient goes to the EAX register and the 32-bit remainder goes to the
EDX register.
3
Example
section .text
global _start ;must be declared for using gcc
mov [res], ax
mov ecx,msg
mov edx, len
mov ebx,1 ;file descriptor (stdout)
mov eax,4 ;system call number (sys_write)
int 0x80 ;call kernel
mov ecx,res
mov edx, 1
mov ebx,1 ;file descriptor (stdout)
mov eax,4 ;system call number (sys_write)
int 0x80 ;call kernel
section .data
msg db "The result is:", 0xA,0xD
len equ $- msg
segment .bss
res resb 1
When the above code is compiled and executed, it produces the following result −
The result is:
4
Assembly - Logical Instructions
The processor instruction set provides the instructions AND, OR, XOR, TEST, and NOT
Boolean logic, which tests, sets, and clears the bits according to the need of the program.
The format for these instructions −
Sr.N Instructi
Format
o. on
AND operand1,
1 AND
operand2
2 OR OR operand1, operand2
XOR operand1,
3 XOR
operand2
TEST operand1,
4 TEST
operand2
The AND instruction is used for supporting logical expressions by performing bitwise AND
operation. The bitwise AND operation returns 1, if the matching bits from both the
operands are 1, otherwise it returns 0. For example −
Operand1: 0101
Operand2: 0011
----------------------------
After AND -> Operand1: 0001
The AND operation can be used for clearing one or more bits. For example, say the BL
register contains 0011 1010. If you need to clear the high-order bits to zero, you AND it
with 0FH.
AND BL, 0FH ; This sets BL to 0000 1010
Let's take up another example. If you want to check whether a given number is odd or
even, a simple test would be to check the least significant bit of the number. If this is 1, the
number is odd, else the number is even.
Assuming the number is in AL register, we can write −
AND AL, 01H ; ANDing with 0000 0001
JZ EVEN_NUMBER
The following program illustrates this −
Example
Live Demo
section .text
global _start ;must be declared for using gcc
evnn:
outprog:
section .data
even_msg db 'Even Number!' ;message showing even number
len1 equ $ - even_msg
odd_msg db 'Odd Number!' ;message showing odd number
len2 equ $ - odd_msg
When the above code is compiled and executed, it produces the following result −
Even Number!
Similarly to clear the entire register you can AND it with 00H.
The OR Instruction
The OR operation can be used for setting one or more bits. For example, let us assume
the AL register contains 0011 1010, you need to set the four low-order bits, you can OR it
with a value 0000 1111, i.e., FH.
OR BL, 0FH ; This sets BL to 0011 1111
Example
The following example demonstrates the OR instruction. Let us store the value 5 and 3 in
the AL and the BL registers, respectively, then the instruction,
OR AL, BL
should store 7 in the AL register −
Live Demo
section .text
global _start ;must be declared for using gcc
mov [result], al
mov eax, 4
mov ebx, 1
mov ecx, result
mov edx, 1
int 0x80
outprog:
mov eax,1 ;system call number (sys_exit)
int 0x80 ;call kernel
section .bss
result resb 1
When the above code is compiled and executed, it produces the following result −
7
The XOR instruction implements the bitwise XOR operation. The XOR operation sets the
resultant bit to 1, if and only if the bits from the operands are different. If the bits from the
operands are same (both 0 or both 1), the resultant bit is cleared to 0.
For example,
Operand1: 0101
Operand2: 0011
----------------------------
After XOR -> Operand1: 0110
XORing an operand with itself changes the operand to 0. This is used to clear a register.
XOR EAX, EAX
The TEST Instruction
The TEST instruction works same as the AND operation, but unlike AND instruction, it
does not change the first operand. So, if we need to check whether a number in a register
is even or odd, we can also do this using the TEST instruction without changing the
original number.
TEST AL, 01H
JZ EVEN_NUMBER
The NOT instruction implements the bitwise NOT operation. NOT operation reverses the
bits in an operand. The operand could be either in a register or in the memory.
For example,
Operand1: 0101 0011
After NOT -> Operand1: 1010 1100
Assembly - Conditions
Conditional execution in assembly language is accomplished by several looping and
branching instructions. These instructions can change the flow of control in a program.
Conditional execution is observed in two scenarios −
Sr.N
Conditional Instructions
o.
Unconditional jump
Conditional jump
Let us discuss the CMP instruction before discussing the conditional instructions.
CMP Instruction
The CMP instruction compares two operands. It is generally used in conditional execution.
This instruction basically subtracts one operand from the other for comparing whether the
operands are equal or not. It does not disturb the destination or source operands. It is
used along with the conditional jump instruction for decision making.
Syntax
CMP compares two numeric data fields. The destination operand could be either in
register or in memory. The source operand could be a constant (immediate) data, register
or memory.
Example
Unconditional Jump
As mentioned earlier, this is performed by the JMP instruction. Conditional execution often
involves a transfer of control to the address of an instruction that does not follow the
currently executing instruction. Transfer of control may be forward, to execute a new set of
instructions or backward, to re-execute the same steps.
Syntax
The JMP instruction provides a label name where the flow of control is transferred
immediately. The syntax of the JMP instruction is −
JMP label
Example
Conditional Jump
If some specified condition is satisfied in conditional jump, the control flow is transferred to
a target instruction. There are numerous conditional jump instructions depending upon the
condition and data.
Following are the conditional jump instructions used on signed data used for arithmetic
operations −
Instructio Flags
Description
n tested
Instructio Flags
Description
n tested
JC Jump If Carry CF
JO Jump If Overflow OF
Example
The following program displays the largest of three variables. The variables are double-
digit variables. The three variables num1, num2 and num3 have values 47, 22 and 31,
respectively −
Live Demo
section .text
global _start ;must be declared for using gcc
check_third_num:
_exit:
mov ecx,largest
mov edx, 2
mov ebx,1 ;file descriptor (stdout)
mov eax,4 ;system call number (sys_write)
int 0x80 ;call kernel
mov eax, 1
int 80h
section .data
segment .bss
largest resb 2
When the above code is compiled and executed, it produces the following result −
The largest digit is:
47
Assembly - Loops
The JMP instruction can be used for implementing loops. For example, the following code
snippet can be used for executing the loop-body 10 times.
MOV CL, 10
L1:
<LOOP-BODY>
DEC CL
JNZ L1
The processor instruction set, however, includes a group of loop instructions for
implementing iteration. The basic LOOP instruction has the following syntax −
LOOP label
Where, label is the target label that identifies the target instruction as in the jump
instructions. The LOOP instruction assumes that the ECX register contains the loop
count. When the loop instruction is executed, the ECX register is decremented and the
control jumps to the target label, until the ECX register value, i.e., the counter reaches the
value zero.
The above code snippet could be written as −
mov ECX,10
l1:
<loop body>
loop l1
Example
section .text
global _start ;must be declared for using gcc
l1:
mov [num], eax
mov eax, 4
mov ebx, 1
push ecx
Assembly - Numbers
Numerical data is generally represented in binary system. Arithmetic instructions operate
on binary data. When numbers are displayed on screen or entered from keyboard, they
are in ASCII form.
So far, we have converted this input data in ASCII form to binary for arithmetic calculations
and converted the result back to binary. The following code shows this −
Live Demo
section .text
global _start ;must be declared for using gcc
mov ecx,sum
mov edx, 1
mov ebx,1 ;file descriptor (stdout)
mov eax,4 ;system call number (sys_write)
int 0x80 ;call kernel
ASCII Representation
In ASCII representation, decimal numbers are stored as string of ASCII characters. For
example, the decimal value 1234 is stored as −
31 32 33 34H
Where, 31H is ASCII value for 1, 32H is ASCII value for 2, and so on. There are four
instructions for processing numbers in ASCII representation −
AAA − ASCII Adjust After Addition
AAS − ASCII Adjust After Subtraction
AAM − ASCII Adjust After Multiplication
AAD − ASCII Adjust Before Division
These instructions do not take any operands and assume the required operand to be in
the AL register.
The following example uses the AAS instruction to demonstrate the concept −
Live Demo
section .text
global _start ;must be declared for using gcc
section .data
msg db 'The Result is:',0xa
len equ $ - msg
section .bss
res resb 1
When the above code is compiled and executed, it produces the following result −
The Result is:
6
BCD Representation
Example
The following program adds up two 5-digit decimal numbers and displays the sum. It uses
the above concepts −
Live Demo
section .text
global _start ;must be declared for using gcc
section .data
msg db 'The Sum is:',0xa
len equ $ - msg
num1 db '12345'
num2 db '23456'
sum db ' '
When the above code is compiled and executed, it produces the following result −
The Sum is:
35801
Assembly - Strings
We have already used variable length strings in our previous examples. The variable
length strings can have as many characters as required. Generally, we specify the length
of the string by either of the two ways −
Explicitly storing string length
Using a sentinel character
We can store the string length explicitly by using the $ location counter symbol that
represents the current value of the location counter. In the following example −
msg db 'Hello, world!',0xa ;our dear string
len equ $ - msg ;length of our dear string
$ points to the byte after the last character of the string variable msg. Therefore, $-
msg gives the length of the string. We can also write
msg db 'Hello, world!',0xa ;our dear string
len equ 13 ;length of our dear string
Alternatively, you can store strings with a trailing sentinel character to delimit a string
instead of storing the string length explicitly. The sentinel character should be a special
character that does not appear within a string.
For example −
message DB 'I am loving it!', 0
String Instructions
Each string instruction may require a source operand, a destination operand or both. For
32-bit segments, string instructions use ESI and EDI registers to point to the source and
destination operands, respectively.
For 16-bit segments, however, the SI and the DI registers are used to point to the source
and destination, respectively.
There are five basic instructions for processing strings. They are −
MOVS − This instruction moves 1 Byte, Word or Doubleword of data from memory
location to another.
LODS − This instruction loads from memory. If the operand is of one byte, it is
loaded into the AL register, if the operand is one word, it is loaded into the AX
register and a doubleword is loaded into the EAX register.
STOS − This instruction stores data from register (AL, AX, or EAX) to memory.
CMPS − This instruction compares two data items in memory. Data could be of a
byte size, word or doubleword.
SCAS − This instruction compares the contents of a register (AL, AX or EAX) with
the contents of an item in memory.
Each of the above instruction has a byte, word, and doubleword version, and string
instructions can be repeated by using a repetition prefix.
These instructions use the ES:DI and DS:SI pair of registers, where DI and SI registers
contain valid offset addresses that refers to bytes stored in memory. SI is normally
associated with DS (data segment) and DI is always associated with ES (extra segment).
The DS:SI (or ESI) and ES:DI (or EDI) registers point to the source and destination
operands, respectively. The source operand is assumed to be at DS:SI (or ESI) and the
destination operand at ES:DI (or EDI) in memory.
For 16-bit addresses, the SI and DI registers are used, and for 32-bit addresses, the ESI
and EDI registers are used.
The following table provides various versions of string instructions and the assumed space
of the operands.
ES:DI,
MOVS MOVSB MOVSW MOVSD
DS:SI
DS:SI, ES:
CMPS CMPSB CMPSW CMPSD
DI
Repetition Prefixes
The REP prefix, when set before a string instruction, for example - REP MOVSB, causes
repetition of the instruction based on a counter placed at the CX register. REP executes
the instruction, decreases CX by 1, and checks whether CX is zero. It repeats the
instruction processing until CX is zero.
The Direction Flag (DF) determines the direction of the operation.
Use CLD (Clear Direction Flag, DF = 0) to make the operation left to right.
Use STD (Set Direction Flag, DF = 1) to make the operation right to left.
The REP prefix also has the following variations:
REP: It is the unconditional repeat. It repeats the operation until CX is zero.
REPE or REPZ: It is conditional repeat. It repeats the operation while the zero flag
indicates equal/zero. It stops when the ZF indicates not equal/zero or when CX is
zero.
REPNE or REPNZ: It is also conditional repeat. It repeats the operation while the
zero flag indicates not equal/zero. It stops when the ZF indicates equal/zero or
when CX is decremented to zero.
Assembly - Arrays
We have already discussed that the data definition directives to the assembler are used for
allocating storage for variables. The variable could also be initialized with some specific
value. The initialized value could be specified in hexadecimal, decimal or binary form.
For example, we can define a word variable 'months' in either of the following way −
MONTHS DW 12
MONTHS DW 0CH
MONTHS DW 0110B
The data definition directives can also be used for defining a one-dimensional array. Let us
define a one-dimensional array of numbers.
NUMBERS DW 34, 45, 56, 67, 75, 89
The above definition declares an array of six words each initialized with the numbers 34,
45, 56, 67, 75, 89. This allocates 2x6 = 12 bytes of consecutive memory space. The
symbolic address of the first number will be NUMBERS and that of the second number will
be NUMBERS + 2 and so on.
Let us take up another example. You can define an array named inventory of size 8, and
initialize all the values with zero, as −
INVENTORY DW 0
DW 0
DW 0
DW 0
DW 0
DW 0
DW 0
DW 0
Which can be abbreviated as −
INVENTORY DW 0, 0 , 0 , 0 , 0 , 0 , 0 , 0
The TIMES directive can also be used for multiple initializations to the same value. Using
TIMES, the INVENTORY array can be defined as:
INVENTORY TIMES 8 DW 0
Example
The following example demonstrates the above concepts by defining a 3-element array x,
which stores three values: 2, 3 and 4. It adds the values in the array and displays the sum
9−
Live Demo
section .text
global _start ;must be declared for linker (ld)
_start:
done:
display:
section .data
global x
x:
db 2
db 4
db 3
sum:
db 0
When the above code is compiled and executed, it produces the following result −
9
Assembly - Procedures
Procedures or subroutines are very important in assembly language, as the assembly
language programs tend to be large in size. Procedures are identified by a name.
Following this name, the body of the procedure is described which performs a well-defined
job. End of the procedure is indicated by a return statement.
Syntax
The called procedure returns the control to the calling procedure by using the RET
instruction.
Example
Let us write a very simple procedure named sum that adds the variables stored in the ECX
and EDX register and returns the sum in the EAX register −
Live Demo
section .text
global _start ;must be declared for using gcc
section .data
msg db "The sum is:", 0xA,0xD
len equ $- msg
segment .bss
res resb 1
When the above code is compiled and executed, it produces the following result −
The sum is:
9
A stack is an array-like data structure in the memory in which data can be stored and
removed from a location called the 'top' of the stack. The data that needs to be stored is
'pushed' into the stack and data to be retrieved is 'popped' out from the stack. Stack is a
LIFO data structure, i.e., the data stored first is retrieved last.
Assembly language provides two instructions for stack operations: PUSH and POP. These
instructions have syntaxes like −
PUSH operand
POP address/register
The memory space reserved in the stack segment is used for implementing stack. The
registers SS and ESP (or SP) are used for implementing the stack. The top of the stack,
which points to the last data item inserted into the stack is pointed to by the SS:ESP
register, where the SS register points to the beginning of the stack segment and the SP (or
ESP) gives the offset into the stack segment.
The stack implementation has the following characteristics −
Only words or doublewords could be saved into the stack, not a byte.
The stack grows in the reverse direction, i.e., toward the lower memory address
The top of the stack points to the last item inserted in the stack; it points to the
lower byte of the last word inserted.
As we discussed about storing the values of the registers in the stack before using them
for some use; it can be done in following way −
; Save the AX and BX registers in the stack
PUSH AX
PUSH BX
Example
The following program displays the entire ASCII character set. The main program calls a
procedure named display, which displays the ASCII character set.
section .text
global _start ;must be declared for using gcc
display:
mov ecx, 256
next:
push ecx
mov eax, 4
mov ebx, 1
mov ecx, achar
mov edx, 1
int 80h
pop ecx
mov dx, [achar]
cmp byte [achar], 0dh
inc byte [achar]
loop next
ret
section .data
achar db '0'
When the above code is compiled and executed, it produces the following result −
0123456789:;<=>?
@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}
...
...
Assembly - Recursion
A recursive procedure is one that calls itself. There are two kind of recursion: direct and
indirect. In direct recursion, the procedure calls itself and in indirect recursion, the first
procedure calls a second procedure, which in turn calls the first procedure.
Recursion could be observed in numerous mathematical algorithms. For example,
consider the case of calculating the factorial of a number. Factorial of a number is given by
the equation −
Fact (n) = n * fact (n-1) for n > 0
For example: factorial of 5 is 1 x 2 x 3 x 4 x 5 = 5 x factorial of 4 and this can be a good
example of showing a recursive procedure. Every recursive algorithm must have an
ending condition, i.e., the recursive calling of the program should be stopped when a
condition is fulfilled. In the case of factorial algorithm, the end condition is reached when n
is 0.
The following program shows how factorial n is implemented in assembly language. To
keep the program simple, we will calculate factorial 3.
Live Demo
section .text
global _start ;must be declared for using gcc
proc_fact:
cmp bl, 1
jg do_calculation
mov ax, 1
ret
do_calculation:
dec bl
call proc_fact
inc bl
mul bl ;ax = al * bl
ret
section .data
msg db 'Factorial 3 is:',0xa
len equ $ - msg
section .bss
fact resb 1
When the above code is compiled and executed, it produces the following result −
Factorial 3 is:
6
Assembly - Macros
Writing a macro is another way of ensuring modular programming in assembly language.
A macro is a sequence of instructions, assigned by a name and could be used
anywhere in the program.
In NASM, macros are defined with %macro and %endmacro directives.
The macro begins with the %macro directive and ends with the %endmacro
directive.
The Syntax for macro definition −
%macro macro_name number_of_params
<macro body>
%endmacro
Example
section .text
global _start ;must be declared for using gcc
section .data
msg1 db 'Hello, programmers!',0xA,0xD
len1 equ $ - msg1
File Descriptor
A file descriptor is a 16-bit integer assigned to a file as a file id. When a new file is
created or an existing file is opened, the file descriptor is used for accessing the file.
File descriptor of the standard file streams - stdin, stdout and stderr are 0, 1 and 2,
respectively.
File Pointer
A file pointer specifies the location for a subsequent read/write operation in the file in
terms of bytes. Each file is considered as a sequence of bytes. Each open file is
associated with a file pointer that specifies an offset in bytes, relative to the beginning of
the file. When a file is opened, the file pointer is set to zero.
The following table briefly describes the system calls related to file handling −
%ea
Name %ebx %ecx %edx
x
sys_for struct
2 - -
k pt_regs
sys_rea unsigned
3 char * size_t
d int
sys_clo unsigned
6 - -
se int
Writing to a File
Closing a File
Updating a File
Example
The following program creates and opens a file named myfile.txt, and writes a text
'Welcome to Tutorials Point' in this file. Next, the program reads from the file and stores
the data into a buffer named info. Lastly, it displays the text as stored in info.
section .text
global _start ;must be declared for using gcc
section .bss
fd_out resb 1
fd_in resb 1
info resb 26
When the above code is compiled and executed, it produces the following result −
Written to file
Welcome to Tutorials Point
Example
The following program allocates 16kb of memory using the sys_brk() system call −
Live Demo
section .text
global _start ;must be declared for using gcc
cmp eax, 0
jl exit ;exit, if error
mov edi, eax ;EDI = highest available address
sub edi, 4 ;pointing to the last DWORD
mov ecx, 4096 ;number of DWORDs allocated
xor eax, eax ;clear eax
std ;backward
rep stosd ;repete for entire allocated area
cld ;put DF flag to normal state
mov eax, 4
mov ebx, 1
mov ecx, msg
mov edx, len
int 80h ;print a message
exit:
mov eax, 1
xor ebx, ebx
int 80h
section .data
msg db "Allocated 16 kb of memory!", 10
len equ $ - msg
When the above code is compiled and executed, it produces the following result −
Allocated 16 kb of memory!