Parameters?

10/15/2009 03:32 howcow95#1
Quote:
Originally Posted by NovaCygni View Post
Heres a helping hand...
EBP+0x004973: Old EBP
EBP+0x0546: Return Address of Calling Function
EBP+0x5: Parameter 1 -- socket
EBP+0x54: Parameter 2 -- packet buffer
EBP+0x0: Parameter 3 -- length
EBP+0x84: Parameter 4 -- flags

Obviouslly as there not ur actual values the example is incorrect Its just to show u what each parameter is,,, Urll be wanting to learn more about the Stack to start being able to play around here ;) Though ur only a step away from DH :p
:) Only one more step for you, and your'll be able to do what u want :)
This is the reply from Nova I got when I asked what some things did... and quite honestly I didn't fully understand his reply, to my knowledge basically only parameter 4 is the only one that is needed to be changed but my issue is that every time I craft a get a different "EBP+0x0546: Return Address of Calling Function" the only real constant that I notice between the different SocketTrace tests is the "flag" which according to Nova would be EBP+0x27 <<<<<<<<<<<<< yes that's the REAL numbers I got ... but idk where to find this address or what to do when I find it... I could guess to NOP it but in my logic that doesn't make much sense.


AND WHY DO THE ADDRESSES KEEP CHANGING FOR EVERYTHING ZOMG PISSING ME OFFFF@@@
10/15/2009 22:39 brian86#2
waaaa.. so complicated... hehehe. EBP stand for?

unpacked or live dbug?
10/15/2009 23:29 howcow95#3
there's a reason I'm asking :(... i don't get it either :P and i dont think its abotu wut EBP stands for but more of WUT it is and where to find and wut to do to it