\documentclass[10pt,a4paper]{article}

% Packages
\usepackage{fancyhdr}           % For header and footer
\usepackage{multicol}           % Allows multicols in tables
\usepackage{tabularx}           % Intelligent column widths
\usepackage{tabulary}           % Used in header and footer
\usepackage{hhline}             % Border under tables
\usepackage{graphicx}           % For images
\usepackage{xcolor}             % For hex colours
%\usepackage[utf8x]{inputenc}    % For unicode character support
\usepackage[T1]{fontenc}        % Without this we get weird character replacements
\usepackage{colortbl}           % For coloured tables
\usepackage{setspace}           % For line height
\usepackage{lastpage}           % Needed for total page number
\usepackage{seqsplit}           % Splits long words.
%\usepackage{opensans}          % Can't make this work so far. Shame. Would be lovely.
\usepackage[normalem]{ulem}     % For underlining links
% Most of the following are not required for the majority
% of cheat sheets but are needed for some symbol support.
\usepackage{amsmath}            % Symbols
\usepackage{MnSymbol}           % Symbols
\usepackage{wasysym}            % Symbols
%\usepackage[english,german,french,spanish,italian]{babel}              % Languages

% Document Info
\author{FFY00}
\pdfinfo{
  /Title (assembly-for-reverse-engeneering.pdf)
  /Creator (Cheatography)
  /Author (FFY00)
  /Subject (Assembly for Reverse Engeneering Cheat Sheet)
}

% Lengths and widths
\addtolength{\textwidth}{6cm}
\addtolength{\textheight}{-1cm}
\addtolength{\hoffset}{-3cm}
\addtolength{\voffset}{-2cm}
\setlength{\tabcolsep}{0.2cm} % Space between columns
\setlength{\headsep}{-12pt} % Reduce space between header and content
\setlength{\headheight}{85pt} % If less, LaTeX automatically increases it
\renewcommand{\footrulewidth}{0pt} % Remove footer line
\renewcommand{\headrulewidth}{0pt} % Remove header line
\renewcommand{\seqinsert}{\ifmmode\allowbreak\else\-\fi} % Hyphens in seqsplit
% This two commands together give roughly
% the right line height in the tables
\renewcommand{\arraystretch}{1.3}
\onehalfspacing

% Commands
\newcommand{\SetRowColor}[1]{\noalign{\gdef\RowColorName{#1}}\rowcolor{\RowColorName}} % Shortcut for row colour
\newcommand{\mymulticolumn}[3]{\multicolumn{#1}{>{\columncolor{\RowColorName}}#2}{#3}} % For coloured multi-cols
\newcolumntype{x}[1]{>{\raggedright}p{#1}} % New column types for ragged-right paragraph columns
\newcommand{\tn}{\tabularnewline} % Required as custom column type in use

% Font and Colours
\definecolor{HeadBackground}{HTML}{333333}
\definecolor{FootBackground}{HTML}{666666}
\definecolor{TextColor}{HTML}{333333}
\definecolor{DarkBackground}{HTML}{248F24}
\definecolor{LightBackground}{HTML}{F1F8F1}
\renewcommand{\familydefault}{\sfdefault}
\color{TextColor}

% Header and Footer
\pagestyle{fancy}
\fancyhead{} % Set header to blank
\fancyfoot{} % Set footer to blank
\fancyhead[L]{
\noindent
\begin{multicols}{3}
\begin{tabulary}{5.8cm}{C}
    \SetRowColor{DarkBackground}
    \vspace{-7pt}
    {\parbox{\dimexpr\textwidth-2\fboxsep\relax}{\noindent
        \hspace*{-6pt}\includegraphics[width=5.8cm]{/web/www.cheatography.com/public/images/cheatography_logo.pdf}}
    }
\end{tabulary}
\columnbreak
\begin{tabulary}{11cm}{L}
    \vspace{-2pt}\large{\bf{\textcolor{DarkBackground}{\textrm{Assembly for Reverse Engeneering Cheat Sheet}}}} \\
    \normalsize{by \textcolor{DarkBackground}{FFY00} via \textcolor{DarkBackground}{\uline{cheatography.com/51103/cs/14023/}}}
\end{tabulary}
\end{multicols}}

\fancyfoot[L]{ \footnotesize
\noindent
\begin{multicols}{3}
\begin{tabulary}{5.8cm}{LL}
  \SetRowColor{FootBackground}
  \mymulticolumn{2}{p{5.377cm}}{\bf\textcolor{white}{Cheatographer}}  \\
  \vspace{-2pt}FFY00 \\
  \uline{cheatography.com/ffy00} \\
  \end{tabulary}
\vfill
\columnbreak
\begin{tabulary}{5.8cm}{L}
  \SetRowColor{FootBackground}
  \mymulticolumn{1}{p{5.377cm}}{\bf\textcolor{white}{Cheat Sheet}}  \\
   \vspace{-2pt}Not Yet Published.\\
   Updated 18th December, 2017.\\
   Page {\thepage} of \pageref{LastPage}.
\end{tabulary}
\vfill
\columnbreak
\begin{tabulary}{5.8cm}{L}
  \SetRowColor{FootBackground}
  \mymulticolumn{1}{p{5.377cm}}{\bf\textcolor{white}{Sponsor}}  \\
  \SetRowColor{white}
  \vspace{-5pt}
  %\includegraphics[width=48px,height=48px]{dave.jpeg}
  Measure your website readability!\\
  www.readability-score.com
\end{tabulary}
\end{multicols}}




\begin{document}
\raggedright
\raggedcolumns

% Set font size to small. Switch to any value
% from this page to resize cheat sheet text:
% www.emerson.emory.edu/services/latex/latex_169.html
\footnotesize % Small font.

\begin{multicols*}{3}

\begin{tabularx}{5.377cm}{p{0.94563 cm} x{4.03137 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{\{\{fa-gears\}\} General Registers}}  \tn
% Row 0
\SetRowColor{LightBackground}
EAX & Accumulator \tn 
% Row Count 1 (+ 1)
% Row 1
\SetRowColor{white}
EBX & Base \tn 
% Row Count 2 (+ 1)
% Row 2
\SetRowColor{LightBackground}
ECX & Counter \tn 
% Row Count 3 (+ 1)
% Row 3
\SetRowColor{white}
EDX & Data \tn 
% Row Count 4 (+ 1)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{5.377cm}{p{0.4977 cm} x{4.4793 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{\{\{fa-gears\}\} Pointer Registers}}  \tn
% Row 0
\SetRowColor{LightBackground}
ESP & Stack Pointer, "top" of the current stack frame (lower memory) \tn 
% Row Count 2 (+ 2)
% Row 1
\SetRowColor{white}
EBP & Base Pointer, "bottom" of the current stack frame (higher memory) \tn 
% Row Count 4 (+ 2)
% Row 2
\SetRowColor{LightBackground}
EIP & Instruction Pointer, pointer to the  next  instruction to  be executed by the CPU \tn 
% Row Count 7 (+ 3)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{5.377cm}{p{0.4977 cm} x{4.4793 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{\{\{fa-gear\}\} Index Registers}}  \tn
% Row 0
\SetRowColor{LightBackground}
ESI & Source Index, it is used as source index for string operations \tn 
% Row Count 2 (+ 2)
% Row 1
\SetRowColor{white}
EDI & Destination Index, it is used as destination index for string operations \tn 
% Row Count 4 (+ 2)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{5.377cm}{p{0.4977 cm} x{4.4793 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{\{\{fa-flag\}\} Flags Registers (EFLAGS)}}  \tn
% Row 0
\SetRowColor{LightBackground}
ZF & Zero Flag, set when result of an operation equals zero \tn 
% Row Count 2 (+ 2)
% Row 1
\SetRowColor{white}
CF & Carry Flag, set when the result of an operation is too large/small \tn 
% Row Count 4 (+ 2)
% Row 2
\SetRowColor{LightBackground}
SF & Sign Flag, set when the result of an operation is negative \tn 
% Row Count 6 (+ 2)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{5.377cm}{X}
\SetRowColor{DarkBackground}
\mymulticolumn{1}{x{5.377cm}}{\bf\textcolor{white}{\{\{fa-sort-amount-desc\}\} Stack}}  \tn
\SetRowColor{LightBackground}
\mymulticolumn{1}{p{5.377cm}}{\vspace{1px}\centerline{\includegraphics[width=5.1cm]{/web/www.cheatography.com/public/uploads/ffy00_1513637484_stack.png}}} \tn 
\hhline{>{\arrayrulecolor{DarkBackground}}-}
\SetRowColor{LightBackground}
\mymulticolumn{1}{x{5.377cm}}{Stack is a LIFO-Storage (Last In First Out)}  \tn 
\hhline{>{\arrayrulecolor{DarkBackground}}-}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{5.377cm}{x{2.18988 cm} x{2.78712 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{\{\{fa-exchange\}\} Moving Data}}  \tn
% Row 0
\SetRowColor{LightBackground}
mov ebx, eax & Move the value in {\emph{EAX}} to {\emph{EBX}} \tn 
% Row Count 2 (+ 2)
% Row 1
\SetRowColor{white}
mov eax, 0xDEADBEEF & Move {\emph{0xDEADBEEF}} into {\emph{EAX}} \tn 
% Row Count 4 (+ 2)
% Row 2
\SetRowColor{LightBackground}
mov edx, DWORD PTR {[}0x41424344{]} & Move the 4-byte value at address {\emph{0x41424344}} into {\emph{EDX}} \tn 
% Row Count 7 (+ 3)
% Row 3
\SetRowColor{white}
mov ecx, DWORD PTR {[}edx{]} & Move the 4-byte value at the address in {\emph{EDX}}, into {\emph{ECX}} \tn 
% Row Count 10 (+ 3)
% Row 4
\SetRowColor{LightBackground}
mov eax, DWORD PTR {[}ecx+esi*8{]} & Move the value at the address {\emph{ECX+ESI*8}} into {\emph{EAX}} \tn 
% Row Count 13 (+ 3)
% Row 5
\SetRowColor{white}
mov bx, 0C3EEh & Sign bit of {\emph{BL}} is now {\emph{1}}: {\emph{BH == 1100 0011}}, {\emph{BL == 1110 1110}} \tn 
% Row Count 16 (+ 3)
% Row 6
\SetRowColor{LightBackground}
movsx ebx, bx & Load signed 16-bit value into 32-bit register and sign-extend \tn 
% Row Count 19 (+ 3)
% Row 7
\SetRowColor{white}
movzx dx, bl & Load unsigned 8-bit value into 16-bit register and zero-extend \tn 
% Row Count 22 (+ 3)
% Row 8
\SetRowColor{LightBackground}
lea edi, {[}esi+0Bh{]} & Add {\emph{11}} to {\emph{ESI}} and store the result in {\emph{EDI}} \tn 
% Row Count 25 (+ 3)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\SetRowColor{LightBackground}
\mymulticolumn{2}{x{5.377cm}}{{\emph{eax}} is the value stored in eax \newline {\emph{{[}eax{]}}} is the value pointed to by eax}  \tn 
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{5.377cm}{x{1.94103 cm} x{3.03597 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{\{\{fa-list\}\} Data Types}}  \tn
% Row 0
\SetRowColor{LightBackground}
BYTE & 1 Byte (8 bits) \tn 
% Row Count 1 (+ 1)
% Row 1
\SetRowColor{white}
WORD & 2 Bytes (16 bits) \tn 
% Row Count 2 (+ 1)
% Row 2
\SetRowColor{LightBackground}
DOUBLE WORD & 4 Bytes (32 bits) \tn 
% Row Count 3 (+ 1)
% Row 3
\SetRowColor{white}
QUAD WORD & 8 Bytes (64 bits) \tn 
% Row Count 4 (+ 1)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{5.377cm}{x{1.44333 cm} x{3.53367 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{\{\{fa-wrench\}\} Frequent Instructions}}  \tn
% Row 0
\SetRowColor{LightBackground}
mov & MOV is the instruction used for assignment. MOV can move data between a register and memory. \tn 
% Row Count 4 (+ 4)
% Row 1
\SetRowColor{white}
movsx & {\emph{move with Sign Extension}}. The data is moved from a smaller register into a bigger register, and the sign is preserved. \tn 
% Row Count 9 (+ 5)
% Row 2
\SetRowColor{LightBackground}
movzx & {\emph{move with Zero Extension}}. The data is moved from a smaller register into a bigger register, and the sign is ignored. \tn 
% Row Count 14 (+ 5)
% Row 3
\SetRowColor{white}
lea & Similar to MOV, except that math can be done on the original value before it is used. The {\emph{{[}}} and {\emph{{]}}} characters always surround the second parameter, but in this case they do {\bf{not indicate dereferencing}}. \tn 
% Row Count 22 (+ 8)
% Row 4
\SetRowColor{LightBackground}
push & Decrements the stack pointer by the size of the operand, then saves the operand to the new address. Equivalent to `sub esp, 4 | mov DWORD PTR {[}esp{]}, ebx` \tn 
% Row Count 28 (+ 6)
% Row 5
\SetRowColor{white}
pop & Sets the operand to the value on the stack, then increments the stack pointer by the size of the operand. Equivalent to `mov ebx, DWORD PTR {[}esp{]} | add esp, 4` \tn 
% Row Count 34 (+ 6)
\end{tabularx}
\par\addvspace{1.3em}

\vfill
\columnbreak
\begin{tabularx}{5.377cm}{x{1.44333 cm} x{3.53367 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{\{\{fa-wrench\}\} Frequent Instructions (cont)}}  \tn
% Row 6
\SetRowColor{LightBackground}
cmp & Compares two operands and sets or unsets flags in the flags register based on the result. \tn 
% Row Count 4 (+ 4)
% Row 7
\SetRowColor{white}
test & Bitwise AND. \tn 
% Row Count 5 (+ 1)
% Row 8
\SetRowColor{LightBackground}
rep, repnz, repz & Repeat while Equal/Non Zero/Zero. \tn 
% Row Count 7 (+ 2)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}


% That's all folks
\end{multicols*}

\end{document}