Saturday, August 19, 2017

Digest for comp.lang.c++@googlegroups.com - 7 updates in 3 topics

"Rick C. Hodgin" <rick.c.hodgin@gmail.com>: Aug 18 04:32PM -0700

On Friday, August 18, 2017 at 5:29:41 PM UTC-4, Mr Flibble wrote:
> > I'm telling you that I used to think I was correct too.  In fact, I
> > was convinced of it.  But, I honestly did not know for sure.
 
> Oh I know for sure.
 
You don't really, Leigh. You do not have any evidence, but rely
only on your faith that what you believe is correct. All people
who used to not believe in the saving power of Jesus Christ felt
the same way you do before they were drawn to Him from within,
and before being born again.
 
It is the spirit nature which gives us assurance of things the
flesh cannot.
 
It's all I can teach you, Leigh. You said you haven't read the
posts I've written. Go back and read them. It's my best offering
to you.
 
Thank you,
Rick C. Hodgin
Mr Flibble <flibbleREMOVETHISBIT@i42.co.uk>: Aug 19 06:35AM +0100

On 19/08/2017 00:32, Rick C. Hodgin wrote:
>>> was convinced of it.  But, I honestly did not know for sure.
 
>> Oh I know for sure.
 
> You don't really, Leigh.
 
Yes, I do.
 
> You do not have any evidence,
 
Yes, I do.
 
> but rely only on your faith
 
No, you are the one relying on faith not me.
 
/Flibble
David Brown <david.brown@hesbynett.no>: Aug 19 05:55PM +0200

>> misinterpretations of out-of-context books from over two thousand years
>> ago. I suspect once you have done that it all works out fairly evenly.
 
> Here's Ben Shapiro figuring things out in 2015:
 
Ben Shapiro is not a figure anyone would consider unbiased, rational,
objective or honest. Quoting him is just confirmation bias on your
part, and adds nothing to your argument as far as anyone else is
concerned. He makes his living from selling conspiracy theories to
right-wingers who just love to hear how Hollywood is destroying the
country's youth, or universities are corrupting people through dangerous
"education".
fir <profesor.fir@gmail.com>: Aug 19 06:20AM -0700

I think i need some code that would work like
that
 
AddImportsForModule("KERNEL32.DLL", "ExitProcess", "GetModuleHandleA", "GetProcAddress");
 
AddImportsForModule("msvcrt.dll", "fopen", "free", "printf", "exit", "fclose", "fread");
 
 
 
well maybe it would be more like
 
char* import_names[] = {"fopen", "free", "printf", "exit", "fclose", "fread");
 
AddImportsForModule("msvcrt.dll", import_names);
 
but this is detail
 
the code just need to build binary block of .idata section that i can flush to exe file
when flushing exe to disk in my assembler
 
im howewer a bit confused how weirdly this .idata binary is build, so maybe some hints on that?
 
btw some best info i found on this topic is here
 
https://github.com/macton/x64-fasm-examples/blob/master/Windows/00_BasicOS/00_pe_return_03.asm
 
or around here, so if someone would like to focus on this and give me some hints may use it
 
tnx
fir <profesor.fir@gmail.com>: Aug 19 04:38AM -0700

some times ago it was discussed and i know thet here are probably not much many people knowing that things but maybe some
 
if you load exe program into memory it is typically loaded under adress 0040_0000 (which is 4 MB skiping from begining)
 
header is typically loaded under 0040_0000,
code is typically loaded under 0040_1000, and data is loaded after that (in small hello worlds it will be 0040_2000),
consts after that, static empty ram area is reserved after that, then imports and other sections also somewhere after that
 
still i am not sure as to one thing.. in exe
i think you dont necessary need relocations
(or am i wrong?) So this would mean that in
such exe adresses may be fixed (and they in fact would have some values like 004x_xxxx and so on (may be obviously bigger but in small exe this kind of values))
 
is this really the case? no relocations and this kind of fixed values there?
 
 
<yet maybe second a bit more hard of this question -> if realocations are present are
they only a list of adresses in ram where you need to add "base adress" of image (as i heard) or yet something other to that?>
 
tnx
"Alf P. Steinbach" <alf.p.steinbach+usenet@gmail.com>: Aug 19 02:02PM +0200

On 8/19/2017 1:38 PM, fir wrote:
> are present are they only a list of adresses in ram where you need to
> add "base adress" of image (as i heard) or yet something other to
> that?>
 
Visual Studio projects default to using randomized load addresses. It's
a Windows loader feature. Things can end up pretty much anywhere, in
order to foil hackers' attempts.
 
 
Cheers & hth.,
 
- Alf
fir <profesor.fir@gmail.com>: Aug 19 05:12AM -0700

W dniu sobota, 19 sierpnia 2017 14:02:57 UTC+2 użytkownik Alf P. Steinbach napisał:
 
> Visual Studio projects default to using randomized load addresses. It's
> a Windows loader feature. Things can end up pretty much anywhere, in
> order to foil hackers' attempts.
 
i dlls - but i talk on exes here (need to know that as i write my own simple basic x86 assembler that wuld flush to disk only exes right now)
You received this digest because you're subscribed to updates for this group. You can change your settings on the group membership page.
To unsubscribe from this group and stop receiving emails from it send an email to comp.lang.c+++unsubscribe@googlegroups.com.
Posted by at

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)