Hi,anyone knows why IDA dissassembly of the code:

URL db 'http://somedummyurl.com',0
xor ebx,ebx
push ebx
push ebx
push ebx
push offset URL
push ebx
push ebx
call ShellExecute
push ebx
call ExitProcess
end _start

gives me:

text:00401000 public start
.text:00401000 start proc near
.text:00401000 xor ebx, ebx
.text:00401002 push ebx ; nShowCmd
.text:00401003 push ebx ; lpDirectory
.text:00401004 push ebx ; lpParameters
.text:00401005 push offset aHttpWww_lionki ; lpFile
.text:0040100A push ebx ; lpOperation
.text:0040100B push ebx ; hwnd
.text:0040100C call ShellExecuteA
.text:00401011 push ebx ; uExitCode
.text:00401012 call ExitProcess
.text:00401017 int 3 ; Trap to Debugger
.text:00401017 start endp

how come int3 after ExitProcess?
Posted on 2002-02-25 15:30:13 by ramzez
seems a bit weird. Post your entire .asm file as an attachment.
Posted on 2002-02-25 18:05:43 by f0dder
..for dissmemberment
Posted on 2002-02-25 18:33:14 by ramzez
seems pretty strange, I get it with your exe as well as when I
assemble and link it myself. Perhaps the 0CCh comes from the
import library? It's nothing I would worry too much about anyway,
just strange :).
Posted on 2002-02-25 18:44:12 by f0dder