991CNX/580VNX render_bitmap

On the 2nd floor, I will show you the syntax to use. (Note: If you want to use with loop, please add the restore loop after the syntax.)
The syntax (I write it in rop-asm format):
def 08AD0 render_bitmap
org <address>
home:
pop xr0
<pos_x>, <pos_y>, <size_x>, <size_y> ;note: if you put <size_x> to C0 (dec: 192) and <size_y> to 3F (dec: 63) then <pos_x> and <poss_y> should be set to 00
render_bitmap
pop er0
adr_of picture
render.ddd4
BRK
picture:
<insert hex of your picture here>
Explaination of my pseudo rop-asm syntax:
- Def <gadget> mean I define the gadget with labels.
- Org <address> mean define where the program starts.
For example, I write this pseudo rop-asm with "org 0xD830" mean we will start injecting the program at 0xD830.
So the program after I compile by hand should look like this:
D830:
34 61 01 00 <pos_x> <pos_x> <size_x> <size_y>
8A D0 00 00 40 26 01 00 4A D8 06 87 00 00 30 30 03 00 <picture>
For example, run this program (inject to 0xD830):
"34 61 01 00 20 20 08 08 8A D0 00 00 40 26 01 00 4A D8 06 87 00 00 30 30 03 00 FF FF FF FF FF FF FF FF"
Use this launcher (no an required): "FD24 2E D8 D8 91 30 30 10 93 30 30 70 0D 32"
The result should be displaying a square box on the screen, it means the syntax is correct.

歪果仁

Are you planning to make function_graph ROP by this?

and yeah i did use it to make a little game