Thursday, December 15, 2011

Spyeye function name hashing(masm32)

In my last post I had written a C program to find the corresponding hashes of the function names - I spent the morning writing the same in masm32. The following code isn't that good though; i'm pushing and popping all registers just because im too lazy to lookup which registers get destroyed(print destroys ecx and edx?).

You can find the code here.