eax is cleared/reassigned yes, but the flags remain in tact after lodsd :) i use inc al to check if al is -1 or -2 (hash or ordinal).
yeah, i forgot about that :)
All I want is for it to be as good as PTCT was, thats not too much to ask is it ;)
ptct in 4k? sounds good :)
ptct in 4k? sounds good :)
I didn't say ptct in 4k :-D
At least that's not what I meant. I meant something as good as ptct except a 4k instead of 64k. Wishful thinking :roll:
i know, i know :) i wait for your 4k on pouet.net`s "top10" in the near future ;)
call [ebp+4] ; apicall LoadLibrary
test eax, eax ; if hmodule = null, no more libs
jz short .NoMoreLibs
xchg eax, ebx ; ebx = hmodule
try to exchange, in both procs, ebx with ecx, and use code like that:
call [ebp+4] ; apicall LoadLibrary
xchg eax,ecx
jecxz short .NoMoreLibs
xchg eax, ecx ; ecx = hmodule
it should save one or more bytes.
i`ve released it long time ago, but it may be useful for 4k coders.. : )
http://xthost.info/rambo/
search for "tsunami v0.15" in cyber_stuff : )
useful hints?
http://xthost.info/rambo/
search for "tsunami v0.15" in cyber_stuff : )
useful hints?