home .. forth .. colorforth mail list archive ..

Re: [colorforth] How to recreate the 31 July color.com


Hello, Albert, colorCoders,

On Sat, Feb 23, 2008 at 5:08 AM, Albert van der Horst
<albert@xxxxxxxxxxxxxxxxxx> wrote:
> On Fri, Feb 22, 2008 at 06:11:41PM -0700, John Comeau wrote:
> <SNIP>
> >
> > I ran byte-by-byte and assembler-line-by-assembler-line comparisons
> > until I got everything but the actual numeric opcodes the same; GNU's
> > "as" and MASM just choose different variants.
>




> I'm very proud that my reverse engineering system doesn't
> have that problem, but of course it is written in Forth.
>


**HERE**
As you should be. If I recall correctly, your ciasdis can pretty much
dis anything on x86, no?



> It distinguishes between
>  MOV, T| BX| R| AX'|
> and
>  MOV, F| AX| R| BX'|
> (move register ax from bx, move register bx to ax)
> which are actually different opcodes in Intel.
>
> I used the same comparison technique as you.
> If you imagine that you have multi megabyte executables, the opcode
> problem could become unbearable.
>
> More on my site below. Choose FTP, then pub then colorforth.
>
> Groetjes Albert
>
> --
> Albert van der Horst, UTRECHT,THE NETHERLANDS
> Economic growth -- like all pyramid schemes -- ultimately falters.
> albert@spe&ar&c.xs4all.nl &=n http://home.hccnet.nl/a.w.m.van.der.horst
>


Ray

-- 
Raymond St. Marie ii,

---------------------------------------------------------------------
To unsubscribe, e-mail: colorforth-unsubscribe@xxxxxxxxxxxxxxxxxx
For additional commands, e-mail: colorforth-help@xxxxxxxxxxxxxxxxxx
Main web page - http://www.colorforth.com