Originally Posted by
luizimloko
Code:
//74891024 |. 6A 0A PUSH 0A ; /n = A (10.)
//74891026 |. 6A 0A PUSH 0A ; |c = 0A (Line Feed)
//74891028 |. 74 14 JE SHORT CFAL[PVT.7489103E ; |
//7489102A |. 68 E8208974 PUSH CFAL[PVT.748920E8 ; |src = CFAL[PVT.748920E8
//7489102F |. 68 84817300 PUSH 738184 ; |dest = 00738184
//74891034 |. FF15 78208974 CALL DWORD PTR DS:[<&MSVCR100._memccpy>] ; \_memccpy
//7489103A |. 83C4 10 ADD ESP,10
//...
//748920E8 CC INT3
//748920E9 CC INT3
//748920EA CC INT3
//748920EB CC INT3
//748920EC CC INT3
//748920ED CC INT3
//748920EE CC INT3
//748920EF CC INT3
//748920F0 CC INT3
//748920F1 CC INT3
memcpy( (PVOID)0x738184, (PVOID)(PBYTE)"\x12\x12\x12\x12\x12\x12\x12\x12\x12\x12", 10 );
IDA Fela da purga..
Code:
CALL DWORD PTR DS:[<&MSVCR100._memccpy>]
Code:
_memccpy( (PVOID)0x738184, (PVOID)(PBYTE)"\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC\xCC", 10 ,10);