朱皮特的博客 自由的飞翔

可能是send函数的逆向代码

2009-09-02
朱皮特
sec
阅读量:

00778420    51              push    ecx
00778421    53              push    ebx
00778422    56              push    esi
00778423    8B7424 18       mov     esi, dword ptr [esp+18]
00778427    57              push    edi
00778428    8B7C24 18       mov     edi, dword ptr [esp+18]
0077842C    8D4424 0C       lea     eax, dword ptr [esp+C]
00778430    50              push    eax
00778431    56              push    esi
00778432    57              push    edi
00778433    E8 A8F0FFFF     call    007774E0
00778438    56              push    esi
00778439    8B7424 24       mov     esi, dword ptr [esp+24]
0077843D    57              push    edi
0077843E    56              push    esi
0077843F    8BD8            mov     ebx, eax
00778441    E8 4AFEFFFF     call    00778290
00778446    8B4424 24       mov     eax, dword ptr [esp+24]
0077844A    8B16            mov     edx, dword ptr [esi]
0077844C    83C4 18         add     esp, 18
0077844F    50              push    eax                                                            ; datalen
00778450    53              push    ebx                                                            ; dataAddr
00778451    8BCE            mov     ecx, esi
00778453    FF12            call    dword ptr [edx]                                                ; send
00778455    5F              pop     edi
00778456    5E              pop     esi
00778457    5B              pop     ebx
00778458    59              pop     ecx
00778459    C3              retn

Comments

Content