#split

... k. References Splitting The Disk Part #1- The Sleuth Kit Informer Issue #2 http://www.sleuthkit.org/informer/sleuthkit-informer-2.html#split The Sleuth Kit http://www.sleuthkit.org/sleuthkit Copyright © 2004 by Brian Carrier. All Rights Reserved ...

... 47;nij/196352.pdf Splitting the Disk: The Sleuth Kit Informer Issue #2 http://www.sleuthkit.org/informer/sleuthkit-informer-2.html#split UNIX Incident Verification with The Sleuth Kit: The Sleuth Kit Informer Issue #10 http://www.sleuthkit.org/informer/sleuthkit-informer-10.html#verify Updated on 1/15/04 to fix the meaning of DCFL. Copyright © 2003 by Brian Carrier. All Rights Reserved ...

... 16] ;splitchar xor eax, eax ;zero out eax for later mov edx, esp ;save current stack pos. push dword edi ;save ptr to first substring cmp ecx, 0 ;is #splits NULL? jnz do_split ;--no, start splitting mov ecx, 0xFFFF ;--yes, set to MAX do_split: mov bh, byte [edi] ;get byte from target string cmp bl, bh ;equal to delimiter? je .splitstr ;--yes, then split it cmp al, bh ;end of string? [al == 0x0] je EOS ;--yes, then leave split() inc edi ;next char loop do_split .splitstr: mov [edi], byte al ;replace split delimiter with "\0" inc edi ;move to first char after delimiter push edi ;save ptr to next substring loop do_split ;loop #splits or till EOS EOS: ...