Re: [colorforth] How to recreate the 31 July color.com
- Subject: Re: [colorforth] How to recreate the 31 July color.com
- From: "Ray St. Marie" <ray.stmarie@xxxxxxxxx>
- Date: Sat, 23 Feb 2008 18:55:31 -0700
Hello, Albert, colorCoders,
On Sat, Feb 23, 2008 at 5:08 AM, Albert van der Horst
<albert@xxxxxxxxxxxxxxxxxx> wrote:
> On Fri, Feb 22, 2008 at 06:11:41PM -0700, John Comeau wrote:
> <SNIP>
> >
> > I ran byte-by-byte and assembler-line-by-assembler-line comparisons
> > until I got everything but the actual numeric opcodes the same; GNU's
> > "as" and MASM just choose different variants.
>
> I'm very proud that my reverse engineering system doesn't
> have that problem, but of course it is written in Forth.
>
**HERE**
As you should be. If I recall correctly, your ciasdis can pretty much
dis anything on x86, no?
> It distinguishes between
> MOV, T| BX| R| AX'|
> and
> MOV, F| AX| R| BX'|
> (move register ax from bx, move register bx to ax)
> which are actually different opcodes in Intel.
>
> I used the same comparison technique as you.
> If you imagine that you have multi megabyte executables, the opcode
> problem could become unbearable.
>
> More on my site below. Choose FTP, then pub then colorforth.
>
> Groetjes Albert
>
> --
> Albert van der Horst, UTRECHT,THE NETHERLANDS
> Economic growth -- like all pyramid schemes -- ultimately falters.
> albert@spe&ar&c.xs4all.nl &=n http://home.hccnet.nl/a.w.m.van.der.horst
>
Ray
--
Raymond St. Marie ii,
---------------------------------------------------------------------
To unsubscribe, e-mail: colorforth-unsubscribe@xxxxxxxxxxxxxxxxxx
For additional commands, e-mail: colorforth-help@xxxxxxxxxxxxxxxxxx
Main web page - http://www.colorforth.com