Sunday, February 5, 2012

Binary Auditing part 9, Passing Arguments via Registers

This is pretty similiar to A08, the only difference being that the push before calling printf is with eax.

eax in this program has stored the results of sub_401000, and we immediately push it onto the stack. By pushing before a function call, we're essentially passing it to the function.

No comments:

Post a Comment

Sometimes you have to look after yourself (Monitor) #watchyour6

#coding #Monitor #myopinionnotyours During my day today I was asked about how coding is relevant on a cyber detection team.  This is a goo...