My improved 991cnx VerC/580VNX ROP scrolling text is here, anyone wanna have a test?
Launcher (110an):<34 bytes> E2 30 31 FE 12 01 E0 E9 E0 E5 30 30 CC 87 31 30 30 30 E2 30 31 FE 12 01 E0 E9 30 D7 2E D7 CC 87 31 30 30 30 38 1D 32 48
[lbk]CALC[rbk][lbk]=[rbk]
Program 0xE9E0:
c2 8f 00 00 40 d8 d8 91 00 00 dc 3a 01 00 14 4b01 00 a8 21 01 00 0e 11 b2 21 02 00 06 87 00 0036 9a 00 00 64 d7 72 0d 02 00 60 d7 54 a8 02 0000 00 00 00 00 00 00 00 00 00 00 00 c4 52 01 00d8 91 00 00 8c 92 00 00 c2 8f 00 00 40 04 6a 8d00 00 04 8a 00 00 a0 d7 c2 8f 00 00 38 00 12 4b01 00 00 24 02 00 00 00 00 00 00 00 00 00 38 1d02 00 76 60 01 00 c2 8f 00 00 80 08 6a 8d 00 0004 8a 00 00 ce d7 c2 8f 00 00 1a 00 12 4b 01 0000 24 02 00 00 00 00 00 00 00 00 00 38 1d 02 00ba 61 01 00 10 d8 38 1d 02 00 e2 30 01 00 00 00ff ff 00 00 f8 d7 38 1d 02 00 e2 30 01 00 00 0001 00 00 00 f8 d7 38 1d 02 00 36 9a 00 00 40 d824 8f 00 00 00 00 00 00 a8 21 01 00 00 05 6c 9100 00 8c 92 00 00 36 9a 00 00 38 d8 c2 8f 00 0001 00 28 8f 00 00 00 00 00 00 e2 30 01 00 12 01e0 e5 30 d7 2e d7 cc 87 08 00 00 00 38 1d 02 00[lbk]addr[rbk]
Inject text to any [lbk]addr[rbk] you want. For example, set [lbk]addr[rbk] = 40 EB mean you will inject text to 0xEB40.
@RH_QDG @amngis
Launcher (110an):<34 bytes> E2 30 31 FE 12 01 E0 E9 E0 E5 30 30 CC 87 31 30 30 30 E2 30 31 FE 12 01 E0 E9 30 D7 2E D7 CC 87 31 30 30 30 38 1D 32 48
[lbk]CALC[rbk][lbk]=[rbk]
Program 0xE9E0:
c2 8f 00 00 40 d8 d8 91 00 00 dc 3a 01 00 14 4b01 00 a8 21 01 00 0e 11 b2 21 02 00 06 87 00 0036 9a 00 00 64 d7 72 0d 02 00 60 d7 54 a8 02 0000 00 00 00 00 00 00 00 00 00 00 00 c4 52 01 00d8 91 00 00 8c 92 00 00 c2 8f 00 00 40 04 6a 8d00 00 04 8a 00 00 a0 d7 c2 8f 00 00 38 00 12 4b01 00 00 24 02 00 00 00 00 00 00 00 00 00 38 1d02 00 76 60 01 00 c2 8f 00 00 80 08 6a 8d 00 0004 8a 00 00 ce d7 c2 8f 00 00 1a 00 12 4b 01 0000 24 02 00 00 00 00 00 00 00 00 00 38 1d 02 00ba 61 01 00 10 d8 38 1d 02 00 e2 30 01 00 00 00ff ff 00 00 f8 d7 38 1d 02 00 e2 30 01 00 00 0001 00 00 00 f8 d7 38 1d 02 00 36 9a 00 00 40 d824 8f 00 00 00 00 00 00 a8 21 01 00 00 05 6c 9100 00 8c 92 00 00 36 9a 00 00 38 d8 c2 8f 00 0001 00 28 8f 00 00 00 00 00 00 e2 30 01 00 12 01e0 e5 30 d7 2e d7 cc 87 08 00 00 00 38 1d 02 00[lbk]addr[rbk]
Inject text to any [lbk]addr[rbk] you want. For example, set [lbk]addr[rbk] = 40 EB mean you will inject text to 0xEB40.
@RH_QDG @amngis