Книга: Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software
Назад: Lab 5-1 Solutions
Дальше: Lab 6-2 Solutions

shows a flow graph of this function.

. Once the printf function is called, we see that EAX is set to either 1 or 0 before the function returns.

To summarize, this function checks for an active Internet connection, and then prints the result of its check, followed by returning a 1 if it is connected and 0 if it is not. Malware often performs a similar check for a valid Internet connection.

Назад: Lab 5-1 Solutions
Дальше: Lab 6-2 Solutions

sss
sss

© RuTLib.com 2015-2018