rtcEnvironBstr Declare Help

[SantaMorte]

Hi all ... i need some Help

Maybe Someone know the rtcEnvironBstr Export of MSVBVM60.dll

i need the Declare of rtcEnvironBstr export function

Thanks to anyone who help me

[x64core]

Impossible, that function used the registry EBP plus a offset in the stack for the arguments, if u can make a shellcode then
see this:

Código [Seleccionar] Expandir

push edx
mov [ebp-60],ebx
mov [ebp-68],edi
mov [ebp-50],ebx
mov [ebp-58],edi
mov [ebp-40],ebx
mov [ebp-48],edi
mov [ebp-70],ecx
mov [ebp-78],4008
call  dword ptr ds:[<&MSVBVM60.#667>]

EDX = address to 0
EBX = value 80020004h
EDI = length for string
ECX = address for string

the values as 80020004,0,4008 i know not why is write

[SantaMorte]

Thanks a lot ......

[Karcrack]

Here is it:

Código (vb) [Seleccionar] Expandir

Option Explicit

Private Type environstruct
   k       As Long '8
   null    As Long '0
   envstr  As Long 'StrPtr(str)
End Type

'MSVBVM60
Private Declare Function rtcEnvironBstr Lib "MSVBVM60" (ByRef struct As environstruct) As String

Private Sub Form_Load()
   Dim es  As environstruct
   
   With es
       .k = 8
       .envstr = StrPtr("TMP")
   End With
   
   MsgBox StrConv(rtcEnvironBstr(es), vbFromUnicode)
End Sub


@RHL: You need to improve your debugging skills

[SantaMorte]

Thanks A Lot ....

KarCrack Always the best