Re: How to recreate the 31 July color.com
"Ray St. Marie" <[email protected]> Sat, 23 Feb 2008 18:55:31 -0700
| Newsgroups | gmane.comp.lang.forth.colorforth |
|---|---|
| Message-ID | <[email protected]> |
Hello, Albert, colorCoders, On Sat, Feb 23, 2008 at 5:08 AM, Albert van der Horst <[email protected]> wrote: > On Fri, Feb 22, 2008 at 06:11:41PM -0700, John Comeau wrote: > <SNIP> > > > > I ran byte-by-byte and assembler-line-by-assembler-line comparisons > > until I got everything but the actual numeric opcodes the same; GNU's > > "as" and MASM just choose different variants. > > I'm very proud that my reverse engineering system doesn't > have that problem, but of course it is written in Forth. > **HERE** As you should be. If I recall correctly, your ciasdis can pretty much dis anything on x86, no? > It distinguishes between > MOV, T| BX| R| AX'| > and > MOV, F| AX| R| BX'| > (move register ax from bx, move register bx to ax) > which are actually different opcodes in Intel. > > I used the same comparison technique as you. > If you imagine that you have multi megabyte executables, the opcode > problem could become unbearable. > > More on my site below. Choose FTP, then pub then colorforth. > > Groetjes Albert > > -- > Albert van der Horst, UTRECHT,THE NETHERLANDS > Economic growth -- like all pyramid schemes -- ultimately falters. > albert@spe&ar&c.xs4all.nl &=n http://home.hccnet.nl/a.w.m.van.der.horst > Ray -- Raymond St. Marie ii,