HAY Herbert, wanna write a legal PE executable ?
in [ASM]
|
From: hutch-- on 6 Sep 2007 20:15 It seems like poor Herbert has been dragged back into defending the Betov camp again with his willingness to take up the lance to defend Wannabee's efforts in feeding bullsh*t to the members of ALA. It would appear that his last effort of dancing cheek to cheek with Betov did not sink in and he is back trying it again with the local half wit, Wannabee. Herbert offered a challenge to the sheer brutal power of MASM and mentioned another assembler yet his examples are just direct binary in ascii format which do not appear to be assembler code at all. Now as everyone and their dog knows, a legal PE executable file can be at its minimum 2 * 512 byte sections which total 1024 bytes yet Herbert labours under the misapprehension that a hand coded ascii binary file of 922 bytes is an executable PE file. Now with a challenge I must get something out of it for having bothered to read through this drivel so for poor Herbert to issue a challenge he must be willing to eat his hat, tender loud grovelling apologies to the members of ALA for feeding them bullsh*t then repeat after Betov, ROTASM IS A HEAP OF SH*T. While further floundering on this problem, here is a 1k working LEGAL PE executable window built with MASM. The source code for it is in the masm32 project under the name masm1k.exe. ; F:\masm32\examples\exampl12\masm1k\masm1k.exe 1024 bytes 00000000 :4D 5A 90 00 03 00 00 00 - 04 00 00 00 FF FF 00 00 00000010 :B8 00 00 00 00 00 00 00 - 40 00 00 00 00 00 00 00 00000020 :00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 00000030 :00 00 00 00 00 00 00 00 - 00 00 00 00 80 00 00 00 00000040 :0E 1F BA 0E 00 B4 09 CD - 21 B8 01 4C CD 21 54 68 00000050 :69 73 20 70 72 6F 67 72 - 61 6D 20 63 61 6E 6E 6F 00000060 :74 20 62 65 20 72 75 6E - 20 69 6E 20 44 4F 53 20 00000070 :6D 6F 64 65 2E 0D 0D 0A - 24 00 00 00 00 00 00 00 00000080 :50 45 00 00 4C 01 01 00 - 3E 9E A3 46 00 00 00 00 00000090 :00 00 00 00 E0 00 0F 01 - 0B 01 02 32 00 02 00 00 000000A0 :00 00 00 00 00 00 00 00 - 08 10 00 00 00 10 00 00 000000B0 :00 00 00 00 00 00 40 00 - 00 10 00 00 00 02 00 00 000000C0 :04 00 00 00 00 00 00 00 - 04 00 00 00 00 00 00 00 000000D0 :00 20 00 00 00 02 00 00 - 00 00 00 00 02 00 00 00 000000E0 :00 00 10 00 00 10 00 00 - 00 00 10 00 00 10 00 00 000000F0 :00 00 00 00 10 00 00 00 - 00 00 00 00 00 00 00 00 00000100 :CC 10 00 00 28 00 00 00 - 00 00 00 00 00 00 00 00 00000110 :00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 00000120 :00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 00000130 :00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 00000140 :00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 00000150 :00 00 00 00 00 00 00 00 - 18 11 00 00 24 00 00 00 00000160 :00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 00000170 :00 00 00 00 00 00 00 00 - 2E 74 65 78 74 00 00 00 00000180 :D0 01 00 00 00 10 00 00 - 00 02 00 00 00 02 00 00 00000190 :00 00 00 00 00 00 00 00 - 00 00 00 00 20 00 00 E0 000001A0 :00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 000001B0 :00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 000001C0 :00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 000001D0 :00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 000001E0 :00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 000001F0 :00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 00000200 :4D 41 53 4D 20 31 6B 00 - 55 8B EC 83 C4 B4 33 FF 00000210 :BE 00 00 40 00 BB 00 10 - 40 00 68 00 7F 00 00 57 00000220 :FF 15 18 11 40 00 C7 45 - B4 30 00 00 00 C7 45 B8 00000230 :03 00 00 00 C7 45 BC A4 - 10 40 00 89 7D C0 89 7D 00000240 :C4 89 75 C8 C7 45 D4 10 - 00 00 00 89 7D D8 89 5D 00000250 :DC 89 7D CC 89 45 D0 89 - 7D E0 8D 45 B4 50 FF 15 00000260 :1C 11 40 00 B9 00 00 00 - 80 57 56 57 57 57 51 57 00000270 :51 68 00 00 CF 00 53 53 - 57 FF 15 20 11 40 00 6A 00000280 :01 50 FF 15 24 11 40 00 - 8D 5D E4 EB 07 53 FF 15 00000290 :28 11 40 00 57 57 57 53 - FF 15 2C 11 40 00 84 C0 000002A0 :75 EB C9 C3 55 8B EC 83 - 7D 0C 02 75 08 6A 00 FF 000002B0 :15 30 11 40 00 FF 75 14 - FF 75 10 FF 75 0C FF 75 000002C0 :08 FF 15 34 11 40 00 C9 - C2 10 00 CC F4 10 00 00 000002D0 :00 00 00 00 00 00 00 00 - C4 11 00 00 18 11 00 00 000002E0 :00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 000002F0 :00 00 00 00 3C 11 00 00 - 4A 11 00 00 5E 11 00 00 00000300 :70 11 00 00 7E 11 00 00 - 92 11 00 00 A0 11 00 00 00000310 :B2 11 00 00 00 00 00 00 - 3C 11 00 00 4A 11 00 00 00000320 :5E 11 00 00 70 11 00 00 - 7E 11 00 00 92 11 00 00 00000330 :A0 11 00 00 B2 11 00 00 - 00 00 00 00 80 01 4C 6F 00000340 :61 64 43 75 72 73 6F 72 - 41 00 C8 01 52 65 67 69 00000350 :73 74 65 72 43 6C 61 73 - 73 45 78 41 00 00 54 00 00000360 :43 72 65 61 74 65 57 69 - 6E 64 6F 77 45 78 41 00 00000370 :2D 02 53 68 6F 77 57 69 - 6E 64 6F 77 00 00 8C 00 00000380 :44 69 73 70 61 74 63 68 - 4D 65 73 73 61 67 65 41 00000390 :00 00 19 01 47 65 74 4D - 65 73 73 61 67 65 41 00 000003A0 :BF 01 50 6F 73 74 51 75 - 69 74 4D 65 73 73 61 67 000003B0 :65 00 7E 00 44 65 66 57 - 69 6E 64 6F 77 50 72 6F 000003C0 :63 41 00 00 75 73 65 72 - 33 32 2E 64 6C 6C 00 00 000003D0 :00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 000003E0 :00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 000003F0 :00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00
From: Betov on 7 Sep 2007 03:51 hutch-- <hutch(a)movsd.com> �crivait news:1189124109.923192.290560 @r34g2000hsd.googlegroups.com: > It seems like poor Herbert has been dragged back into defending the > Betov camp again with his willingness to take up the lance to defend > Wannabee's efforts in feeding bullsh*t to the members of ALA. It would > appear that his last effort of dancing cheek to cheek with Betov did > not sink in and he is back trying it again with the local half wit, > Wannabee. For your information, Herbert is not a RosAsm and does not share much opinion with the RosAsm's camp. He is just an honnest guy who is used to verify assertions like yours and to point out to facts. > Herbert offered a challenge to the sheer brutal power of MASM and > mentioned another assembler yet his examples are just direct binary in > ascii format which do not appear to be assembler code at all. No. You have been challenged to show a couple of Assembly written PEs that *you* would have written. Still waiting... > Now as everyone and their dog knows, a legal PE executable file can be > at its minimum 2 * 512 byte sections which total 1024 bytes yet > Herbert labours under the misapprehension that a hand coded ascii > binary file of 922 bytes is an executable PE file. PEs size was not the topic, at all. Betov. < http://rosasm.org >
From: Herbert Kleebauer on 7 Sep 2007 04:28 hutch-- wrote: > It seems like poor Herbert has been dragged back into defending the > Betov camp again with his willingness to take up the lance to defend > Wannabee's efforts in feeding bullsh*t to the members of ALA. I defend nobody, as I said in my original post: Ok Hutch, let's see one of your MASM examples so we can decide if it's possible to improve it using a better assembler. But don't give us a link, post it right here, the complete source (with all necessary include files) for a short demo which can be assembled with MASM. I want to see the result of the challenge to know who has to eat the hat. It's like you and Wannabe are two boxers and he says "if I don't knock you out before the 10th round, I will eat my hat" and you continuously answers "now eat your hat, you didn't knock me out and you will never do, because I will never enter the ring with you". > Herbert offered a challenge to the sheer brutal power of MASM and I didn't offer any challenge, I asked you to post the short examples from your challenge with Wannabee. But all you posted was a program with a single nop. Now this is too small for a real improvement. We don't want your link to megabytes of code and not a one instruction program, but a short nice example which shows the "power of MASM" so we can compare it with the power of other assemblers. Now be man enough and enter the ring. > mentioned another assembler yet his examples are just direct binary in > ascii format which do not appear to be assembler code at all. Seems you are confusing assembly code and machine code. What I posted was pure machine code and nothing else. > Now as everyone and their dog knows, a legal PE executable file can be > at its minimum 2 * 512 byte sections which total 1024 bytes yet > Herbert labours under the misapprehension that a hand coded ascii > binary file of 922 bytes is an executable PE file. Now I know that a legal Win32 executable has to have at least 1024 bytes. And you now know, there is a legal Win32 application with only 922 byte (ok, it does only run in 32 bit Windows, so it can't be executed for example in Win3.1). Maybe you can tell me, what's "illegal" with the 922 byte Win32 application? Doesn't in correctly display the message box on any 32 bit Windows? > While further floundering on this problem, here is a 1k working LEGAL > PE executable window built with MASM. The source code for it is in the > masm32 project under the name masm1k.exe. > > ; F:\masm32\examples\exampl12\masm1k\masm1k.exe 1024 bytes Can you please explain which "sheer brutal power of MASM" is necessary to write a 1024 byte executable which displays a window? We are still waiting for: Ok Hutch, let's see one of your MASM examples so we can decide if it's possible to improve it using a better assembler. But don't give us a link, post it right here, the complete source (with all necessary include files) for a short demo which can be assembled with MASM. But if you really want a second challenge besides the one with Wannabee you have to provide a little bit more than a 1k program which displays a window. For example, show me the MASM source of a program which displays the OS version and where the same exe works in 16 bit DOS and 32 bit Windows. The batch below generates gver.exe which when executed in XP displays: set ver_major=00000005 set ver_minor=00000001 set ver_build=00000a28 set ver_platf=00000002 set ver_csd=Service Pack 2 But you can also execute the same gver.exe in DOS 6.2. echo hD1X-s0P_kUHP0UxGWX4ax1y1ieimnfeinklddmemkjanmndnadmndnpbbn>gver.com echo hhpbbnpljhoxolnhaigidpllnbkdnhlkfhlflefblffahfUebdfahhfkokh>>gver.com echo wvPp0w(a)h3k9C5/R/pN0d0uDh37bwo1YioGEWtbGov5//B6mkuMEo0IL0l/w>>gver.com echo ef2iC57R/pNEA/jeefHhC5AR/pNEA/juefXgC5ER/phCfDM(a)m042knfuurC>>gver.com echo l4Ncl5Bd4k03E53YlzzT0k0gF0/hl70QV2TE(a)AB61WWPqjvY0u31/WEXyT/>>gver.com echo U7ycf6/uS1/oaEnVUP/ApQ7nJ5RUMLNmxJPVdqPmp2Ak/2Ak/2AkoU1nJ5R>>gver.com echo UMLNmxJPdtqPmp2Ak/2Ak/2AkoU1nJ5RUMLNmxZMpZ5PYp2Ak/2Ak/2AkoU>>gver.com echo 1nJ5RUMLNmx4Qg45RapXNaNaNaNaNapU1nJ5RUMLNmxpMnFKDUEGi1/EkUX>>gver.com echo /A/6Ak3Em23/t8I/o8A/1W4QYsgDslKAw5A/JFLkI/0//ItJeBPQ/s/wE/@>>gver.com echo 3E0A//0PYUpEY03N/W5/R03N7k43gV03gl0UY00PIk/PE/3L/V5EQ03PI/3>>gver.com echo Pc/6EQ0DPA43Lkl5Os1RZV6RN/f/N/F53Y00Po/7L/y5zjlrg0l54k83Lc9>>gver.com echo 3Lc(a)3LMA3PI/NEgF1M0F5EQ0WEgF1u0l47/l5JIpI48pAms1Nglq4g0l56o>>gver.com echo INnBLMbJaEjVLE/gIFGtIFABXAiE5PgR0bEQVeEQViEQVlEgl04VLOo0ZQj>>gver.com echo BKNnBL56J5RHF6N74aPYlKNOQZQdFLN5Z5PZZlFZFbJZ8rQdxaP4VLE/U56>>gver.com echo G/3/zL04E/3/yOF3/0kjU70E/o(a)0NUCdNgs02SA0c2K5BJbvc@N58uDu(a)aV>>gver.com echo O/wT47/0E/ALNo0WRZ8rLh4aOj8LD/ALNo0WRZ8rLhZaPj8LD/ALNo0WRZ8>>gver.com echo rLWJLOgFKD/ALNo0WRZ8rLklKMoNKD/ALNo0WRZ8rLXB6Nx/UJtWE5yuM3/>>gver.com echo 0Ek/H/W12csD/cy8Mr//9w8/9AA7OVFWXijC50E/US2NspkPQE29/UW5M31>>gver.com echo /Hr0cDE5f(a)zkWOU3/0EA/DE0I70E/IL2eJzzJk/3/0kcI70E/c5/cVV3/0U>>gver.com echo O0Ua0G/3/ExT4E/0E/Y/kplVO/Uq0G/3/cRU3/0UO/wT4//0E/c5/zL01E/>>gver.com echo 3/0q25G/3/0YFRMDA/r8LOoJ57Z8bQj8r58Et5zjVs.>>gver.com gver.com>gver.exe del gever.com
From: hutch-- on 7 Sep 2007 04:35 Betov, > For your information, Herbert is not a RosAsm and does not share > much opinion with the RosAsm's camp. Whoever said he was ? > No. You have been challenged to show a couple of Assembly written > PEs that *you* would have written. Still waiting... You can find large amounts of code that I have written, its called the masm32 project. Wannabee could not deliver even though it has been posted fore YEARS because RotAsm is not powerful enough to emulate MASM. > > Now as everyone and their dog knows, a legal PE executable file can be > > at its minimum 2 * 512 byte sections which total 1024 bytes yet > > Herbert labours under the misapprehension that a hand coded ascii > > binary file of 922 bytes is an executable PE file. > > PEs size was not the topic, at all. It is when Herbert claims to have improved on a MASM 1024 byte exe with a broken example coded in ascii when he claimed he was going to run another assembler to compete with MASM. Herbert's 922 byte file is a broken piece of junk because it does not conform to the PE specification. Now Wannabee already has to eat his hat, will you eat your hat if you cannot emulate the masm32 library ?
From: Betov on 7 Sep 2007 04:56
hutch-- <hutch(a)movsd.com> �crivait news:1189154136.861074.234000@ 19g2000hsx.googlegroups.com: > You can find large amounts of code that I have written, its called the > masm32 project. Glad to hear that you have written MASM: I thought it was a MicroSoft C-Side-Toy, that you had stolen. :) Betov. < http://rosasm.org > |