HelloAssembly The smallest possible complete Windows application

70 points
1/21/1970
6 hours ago
by Bluestein

Comments


rfgplk

"smallest possible" is exactly one instruction; possibly 0xc3 [ret] or 0x90 [nop]; the problem lies in how you define "complete Windows application", because the answer really differs depending on if you want to make it ABI compliant. But there's nothing preventing you from creating a custom loader/executor that reads a pure binary file, maps it as exec and runs it.

an hour ago

QuantumNomad_

It should be an exe file you can double click and execute.

36 minutes ago

abcd_f

The smallest meaningful program for MS-DOS was exactly 2 bytes:

  FA F4
That's CLI HLT, which effectively deadlocked the machine. Had to be saved as a .com fule obviously, not as an .exe.
2 hours ago

ggerules

Windows and assembly is a fun topic!

Putting the search terms "Windows" and "assembly language" turns up all sort of books. The one that got me to initially explore the topic (from 1993).... [0]

For a more up to date treatment of assembly and windows.... comes with source code for the IDE also. Ray Seyfarth's book [1].

[0] Windows Assembly Language & Systems Programming: Object Oriented & Low-Level Systems Programming in Assembly Language for Windows 3.X

[1] Introduction to 64 Bit Windows Assembly Language Programming: Fourth Edition ISBN-13: 978-1543138849, ISBN-10: 1543138845

3 hours ago

delta_p_delta_x

Interesting to bypass CRT and work directly against the Windows API. That said, these rely on USER.32.DLL and KERNEL32.DLL to do the majority of the heavy lifting.

It's a bit like 'smallest hello world in assembly' but the code is just setting up the calling convention and then passing the zero-terminated character string into `write`. Cool, but that could be done a bit more straightforwardly in C, too. A lot of assembly (including in the linked repository) is book-keeping for the platform's calling convention.

5 hours ago

skrellm

> That said, these rely on USER.32.DLL and KERNEL32.DLL to do the majority of the heavy lifting.

Since the low-level Windows kernel API is undocumented and non-public, using these system DLLs is your only option on Windows.

It's just like linking against libc.so on any POSIX systems.

5 hours ago

Pannoniae

no, you can also call ntdll (or even syscalls although those aren't stable), there's plenty of documentation on the internet

but also why would you, not much point except for very niche functionality

2 hours ago

munchler

It’s a minimal Windows app, so the whole idea is to rely on Windows DLLs as much as possible.

5 hours ago

actionfromafar

Officially, one should not use KERNEL32.dll for instance but go via crt. In practice, most interfaces are stable.

5 hours ago

delta_p_delta_x

KERNEL32.DLL (in spite of the name) provides user-mode system services for the Windows API. The CRT provides the C99 API. There are many entry points to the same thing on Windows; you can do any of `malloc`/`HeapAlloc`/`new`/`VirtualAlloc` to get a void* memory buffer. `malloc` is from the CRT; `HeapAlloc` is from KERNEL32.DLL, and `new` is from the C++ runtime.

4 hours ago

neonz80

kernel32 is an official API, you're probably thinking of ntdll. CRT is the C-runtime. Not everything is written in C.

5 hours ago

actionfromafar

Yes, you are right, must have been thinking of ntdll.

4 hours ago

haunter

Meanwhile in the Unix world you can go as low as 45 bytes https://www.muppetlabs.com/~breadbox/software/tiny/teensy.ht...

5 hours ago

Someone

Unfair comparison. The Windows tool (FTA):

“Runs a Windows message loop Has a title bar, minimize, maximize, and close buttons, which all work as expected Has a system menu with the same Paints the background and some text centered in the middle, equal to or larger than "Dave's Tiny App"”

That Linux program:

“Let’s take an incredibly simple program, one that does nothing but return a number back to the operating system”

See https://archive.is/w01DO#selection-265.0-265.44 for a fairer comparison (97/133 bytes)

4 hours ago

WalterGR

97 bytes for Windows at the time this very nice walkthrough was written: http://www.phreedom.org/research/tinype/

3 hours ago

Bluestein

Goodness gracious me.-

5 hours ago

p00dles

I hope that expression makes a comeback.

4 hours ago

Bluestein

You know? FOR ONE expression our current neuralese-spewing friends could standarize on - I'd not mind this one (and the ilk) becoming "load-bearing", again.-

PS. Honest take :)

4 hours ago

WillAdams

For more of the same (though I wish source was available) which actually does something useful, see the various small utilities at

https://www.grc.com/freepopular.htm

5 hours ago

Bluestein

Shields Up!

5 hours ago

eggy

I should try FASM to see if it produces a smaller size exe. COM files are small, but 16-bit DOS was the thing back in the day - 100H yeah and basically a memory dump.

5 hours ago

Bluestein

> 100H yeah and basically a memory dump

... the days! :)

5 hours ago

hnea3ekp5i

Appreciate you writing it up

3 hours ago

drdexebtjl

The developer, Dave Plummer, left Microsoft to develop and distribute malware and scams in the 90s. See previous thread at [1].

Nowadays he spreads misinformation disguised as war stories from his time at Microsoft.

[1]: https://news.ycombinator.com/item?id=39813625

5 hours ago

JoeDaDude

What about his contributions to human civilization? ;)

He got a world record score on the Tempest arcade game [1], then developed an AI which beat his own record[2]. His biggest failure was, that after rebuilding TEMPEST from arcade machine ROMS, he added levels to the game but never made them public [3].

[1]. https://www.youtube.com/watch?v=EuSMCWu02hA

[2]. https://www.youtube.com/watch?v=TdbpoDjIvPk

[3]. https://www.youtube.com/watch?v=BjsVSEbXDOM

5 hours ago

silisili

It's frustrating, because he does do some cool things. But I had to quit following him because of his constant yarning about how he grew up not rich and made millions from Microsoft, so young people now are stupid and lazy.

an hour ago

Keyframe

Dave Cutler was a guest in his garage and it was a great episode. That lands some gravity at least?

3 hours ago

whobre

Also Raymond Chen

an hour ago

skinfaxi

My how the overton window has moved. Some of violative conduct is standard practice now.

> When consumers prepared to purchase a product, additional services and products including a $9.95 back-up disc and $4.95 ‘optional extended service’ plan appeared on the check-out form. The form also listed “one free year of updates” – selected by default – but the company was then authorized to automatically charge a consumer’s credit card at the end of the year unless the buyer cancels the update plan.

4 hours ago

drdexebtjl

But also things that are absolutely not okay:

> Inducing computer users to install software by misrepresenting that the user's computer is at risk for crashes or privacy and security invasions.

> Marketing its InternetShield software by means of a “free scan.”

> Using “buttons” in its advertisements that do not function as the user would expect them. For example, the X found in the corner of a window is normally associated with closing the window and should not open another ad. Installing software on a user’s computer that causes multiple pop-up advertisements when the user tries to close out of advertisements.

> Failing to provide a functional uninstall option for removing all software files.

> Failing to obtain a consumer’s explicit consent to purchase a product or a service.

2 hours ago

skinfaxi

Yes I thought I accounted for that with my use of "some". I wasn't intending to downplay anything.

2 hours ago

rvz

Do you have any evidence of these (unsubstantiated) claims against him?

5 hours ago

drdexebtjl

Edited with previous threads linking court documents.

5 hours ago

TiredOfLife

He also lied about his contributions to Start menu

5 hours ago

taf2

love this and it's timely as I think with AI more of my code will just be native assembly for example: https://github.com/taf2/tic-tac-toe my m series native assembly based tic tac toe windowed game... very portable too you just simply execute codex --yolo port my app to x y z host...

6 hours ago

eggy

I haven't played with yolo yet. I'll have to use my airgapped, old Lenovo ThinkPad for this! Whenever I see yolo, I can't stop thinking of Joseph Redmon's YOLO and his astounding resume format!

5 hours ago