format PE GUI
entry start

section '.code' code readable executable

start:
push ebp
mov ebp,esp
sub esp,0x7650
lea eax,
mov edx,0x1b66
push 0x2
mov ,eax
mov ecx,edx
pop eax
lea edi,
rep stosd
lea eax,
mov byte ,0x16
mov ,edx
mov dword ,0x36cb
mov ,eax
mov edi,0x2710
image00400148:
mov eax,
xor ebx,ebx
cmp dword ,0xffffffff
mov ,eax
jz image00400189
mov eax,
mov esi,
mov ,eax
image0040015f:
mov ecx,
mov eax,
imul ecx,ebx
imul eax,eax,0x2710
add ecx,eax
mov eax,ecx
cdq
idiv dword
mov ,edx
sub esi,0x4
dec dword
sub dword ,0x2
cmp dword ,0x0
mov ebx,eax
jnz image0040015f
image00400189:
mov eax,
dec byte
mov byte ,0xa
jnz image0040019b
inc dword
mov byte ,0x14
image0040019b:
mov eax,ebx
mov ecx,edi
cdq
idiv ecx
mov ecx,eax
add ecx,
push ecx
push msgformat
push dword
mov ,edx
call
sub dword ,0x1c
add dword ,0x4
sub dword ,0xe
sub dword ,0x38
add esp,0xc
cmp dword ,0xffffffff
jne image00400148
push 0x24
lea eax,
push msgtitle
push eax
push 0x0
call
push 0
call
leave
ret


stack 8000h,8000h

section '.data' data readable writeable

msgformat db '%04d',0
msgtitle db 'PI is 3.???',0

section '.idata' import data readable writeable

dd 0,0,0,RVA kernel_name,RVA kernel_table
dd 0,0,0,RVA user_name,RVA user_table
dd 0,0,0,0,0

kernel_table:
ExitProcess dd RVA _ExitProcess
dd 0
user_table:
MessageBox dd RVA _MessageBoxA
wsprintf dd RVA _wsprintfA
dd 0

kernel_name db 'KERNEL32.DLL',0
user_name db 'USER32.DLL',0

_ExitProcess dw 0
db 'ExitProcess',0
_MessageBoxA dw 0
db 'MessageBoxA',0
_wsprintfA dw 0
db 'wsprintfA',0


section '.reloc' fixups data readable discardable
Posted on 2002-10-24 08:57:30 by Ares
looks like something ripped out from that 548 bytes windows example by that russian guy...
Posted on 2002-10-24 13:20:29 by Delight
Ares: this looks like a disassembly. Reverse engineering is not allowed here.
Posted on 2002-10-24 14:01:55 by Tomasz Grysztar
Delight and Privalov,

Yeah, you are right!
But it's only for learning, it's the chance for us to improve our capability.
Can you promise that you have never reversed/analysed other program?!:mad:

I think the rule should be changed,:(
Anyway, I will abide the rule.:grin:

Thanks.
Posted on 2002-10-24 18:52:25 by Ares
This rule is there for good reasons... this board is up for more than two years now (if we take in account the old messageboard) and I think it is reasonably good lifetime for an assembly forum as many others were closed because they dealt with cracking, keygenning and reverse engineering...

The point is not what we do or what we did: we don't care if somebody do illegal things in his life, we are not cops or judge, we just want to keep this messageboard legal to keep it running and keep l33t0 w@n@b33$ h@x0rs and the idiot fringe as are virii writers out of there...
If you want to know more about our rules, the link is on my signature: you are welcome on the board as long you comply with them but we will not change it for anybody...

Regards,

PS: You could have mentioned the author of this program... stealing programmers is not the best thing to do to be accepted by a programming community, imho.
Posted on 2002-10-25 01:01:11 by JCP


PS: You could have mentioned the author of this program... stealing programmers is not the best thing to do to be accepted by a programming community, imho.


Thanks Readiosys!! In the messageboard, we have some members who prefers to "steal sometimes" instead of creating somethings "genuine". (Ares,i am mentioning about other members , I like maths. :alright: )

Regards,

Vortex
Posted on 2002-10-25 09:04:06 by Vortex
Who are you referring to if I may ask ? :rolleyes:
Posted on 2002-10-25 11:09:53 by JimmyClif
Some of our members are very very very smart! I don't know them... but they are real geniuses.

Regards,

Vortex
Posted on 2002-10-25 12:36:07 by Vortex
Dear amigo JimmyClif,

You don't have to worry about those peoples.Relax... Run after nice girls... You are very young yet... Enjoy life...
Read poems... Enjoy the classical music... Prepare some nice tools with Masm32... Me? Just a Vortex... That's all...
You are a honest man,no?

Regards,

Vortex
Posted on 2002-10-25 12:40:17 by Vortex
Dear amigo Vortex,

I'm certain this is nothing but a language barrier which makes you think whatever you think.

Your welcome to mail me thru the board and tell me exactly why you're acting like this.

I'll give it my best shot to explain it all.

JC



Maybe I was a bit harsh. So I edited it.
Posted on 2002-10-25 14:13:32 by JimmyClif
JimmyClif: I dont' know where you saw the implication that you stole. He said some. Then you get pissed off for no reason?
Posted on 2002-10-25 14:55:53 by Asm_Freak
Gurus,

Actually, I post the code here only want to ask if somebody can explain it, I really forgot who wrote it originally.
I searched it before I posted it here, but I can't find it. Sorry for the Author, if you can see the message, would you please explain it.

I havn't said the code is writen by me, It's has nothing to do with the "steal".:mad:
Posted on 2002-10-25 23:55:45 by Ares
You know, I have 2 funny quotes I am now collecting right now.

1. Stop Watching Al-Jazeera by Rondog
2. Dear Amigo .... by Vortex

:grin:


Dear Amigo Asm_freak,

I think this thread started it all http://www.asmcommunity.net/board/index.php?topic=8514

/me steps out of this thread while a flame war starts to begin... :grin:
Posted on 2002-10-26 00:18:33 by stryker