eax is cleared/reassigned yes, but the flags remain in tact after lodsd :) i use inc al to check if al is -1 or -2 (hash or ordinal).


yeah, i forgot about that :)


All I want is for it to be as good as PTCT was, thats not too much to ask is it ;)


ptct in 4k? sounds good :)
Posted on 2005-03-07 04:23:57 by rambo
ptct in 4k? sounds good :)

I didn't say ptct in 4k :-D
At least that's not what I meant. I meant something as good as ptct except a 4k instead of 64k. Wishful thinking :roll:
Posted on 2005-03-07 05:09:32 by snq
i know, i know :) i wait for your 4k on pouet.net`s "top10" in the near future ;)
Posted on 2005-03-07 05:30:54 by rambo


call [ebp+4] ; apicall LoadLibrary
test eax, eax ; if hmodule = null, no more libs
jz short .NoMoreLibs
xchg eax, ebx ; ebx = hmodule


try to exchange, in both procs, ebx with ecx, and use code like that:



call [ebp+4] ; apicall LoadLibrary
xchg eax,ecx
jecxz short .NoMoreLibs
xchg eax, ecx ; ecx = hmodule


it should save one or more bytes.
Posted on 2005-03-07 06:15:05 by rambo
i`ve released it long time ago, but it may be useful for 4k coders.. : )

http://xthost.info/rambo/
search for "tsunami v0.15" in cyber_stuff : )
useful hints?
Posted on 2005-06-22 07:40:00 by rambo