Initial checking of hp_magentservice module #129
Conversation
|
Crap. Sorry about that. I definitely wasn't paying attention. |
|
Not sure how I managed to delete the comment on the ret. It's from the msvcp60.dll that was included/installed with the software. |
|
I can double check when I get to work tomorrow but I'm pretty sure it was loaded from the application's installed directory. |
|
0x780c8fd4 : pop ebx # pop ebp # ret 0c | {PAGE_EXECUTE_READ} [MSVCP60.dll] ASLR: False, Rebase: False, SafeSEH: False, OS: True, v6.00.8168.0 (C:\MercuryDiagnostics\Server\nanny\windows\bin\MSVCP60.dll) |
|
Ignore that. Copy/paste fail. 0x780c8f1f : pop ebx # pop ebp # ret 0c | {PAGE_EXECUTE_READ} [MSVCP60.dll] ASLR: False, Rebase: False, SafeSEH: False, OS: True, v6.00.8168.0 (C:\MercuryDiagnostics\Server\nanny\windows\bin\MSVCP60.dll) |
|
0x00406ba3 : pop esi # pop ebx # ret 10 | startnull {PAGE_EXECUTE_READ} [magentservice.exe] ASLR: False, Rebase: False, SafeSEH: False, OS: True, v500.0.0.5229 (C:\MercuryDiagnostics\Server\nanny\windows\bin\magentservice.exe) also works if you'd prefer to have one inside of the service itself. Which also means that BadChar "\x00" is not needed. |
|
Nice. Thanks for the update. Processing... |
No description provided.