[Code-Crunchers] Tiny PE: now 274 bytes

[Peter Ferrie]

Ah, that's too bad.  I didn't read the rules.
Okay, that will add probably 20 bytes.
Maybe tomorrow.

________________________________

From: Gil Dabah [mailto:distorm at gmail.com]
Sent: Fri 10/20/2006 7:09 PM
To: Peter Ferrie; code-crunchers at whitestar.linuxbox.org
Subject: RE: [Code-Crunchers] Tiny PE: now 274 bytes



That's a nice achievement.
But that is against the rules I posted, WinExec must not be viewable as well
as the urlmon and other api's.

I said only GetProcAddress and LoadLibraryA, but if that's not for the
challenge then fine :)

> -----Original Message-----
> From: Peter Ferrie [mailto:pferrie at symantec.com]
> Sent: Saturday, October 21, 2006 3:19 AM
> To: code-crunchers at whitestar.linuxbox.org
> Subject: [Code-Crunchers] Tiny PE: now 274 bytes
>
> Imported WinExec avoids the LoadLibraryA call, moved "WinExec" after the
> "MZ", "kernel32.dll" and "LoadLibraryA" strings moved into the PE header,
> "GetProcAddress" string is in the section table.
>
> _______________________________________________
> Code-Crunchers mailing list
> Code-Crunchers at whitestar.linuxbox.org
> http://whitestar.linuxbox.org/mailman/listinfo/code-crunchers