View Single Post
  #342  
Old 03-13-2015, 12:54 PM
troller12 troller12 is offline
Senior Member
 
Join Date: Sep 2013
Posts: 433
troller12 is on a distinguished road
Default

Re: Customized rtmpdump binaries with patch file


Hi,

normaly you shouldn't get a access violation at this offset in the latest rtmpsuck so at this address is no command to execute which get access on normaly way by rtmpsuck itself.
Code:
$ ==>    00449A2B     FFC7                 INC EDI      ; <--- offset 3c2b
$+2      00449A2D     44                   INC ESP
$+3      00449A2E     24 38                AND AL,0x38
$+5      00449A30     FFFF                 ???                                  
$+7      00449A32     FFFF                 ???            



$-9      00449A22     E8 79E2FFFF          CALL 00447CA0 
$-4      00449A27     E9 64F7FFFF          JMP 00449190                               
$+1      00449A2C     C74424 38 FFFFFFFF   MOV DWORD PTR SS:[ESP+0x38],-0x1
PS: If you do use rtmpsuck + rtmpdumphelper then rtmpsuck can also close (without to get exception info message in my case) in some rarly cases if you access any site.Also your message that it happens "weekly" sounds also strange.So I think you did try to do the same steps after the error too and then you got not the problem anymore or?

greetz
Reply With Quote