锘??xml version="1.0" encoding="utf-8" standalone="yes"?>亚洲综合AV在线在线播放,亚洲人成网站18禁止久久影院,亚洲欧美综合精品成人导航http://www.tkk7.com/RR00/category/31982.html涓嶈鍩嬪ご鑻﹀共錛岃瀛︿範錛屽涔狅紝鍐嶅涔犮傘傘傘傘?
<br>
powered by <font color='orange'>R.Zeus</font>zh-cnMon, 11 Aug 2008 23:56:44 GMTMon, 11 Aug 2008 23:56:44 GMT60Exploit codehttp://www.tkk7.com/RR00/articles/220137.htmlR.ZeusR.ZeusTue, 05 Aug 2008 05:10:00 GMThttp://www.tkk7.com/RR00/articles/220137.htmlhttp://www.tkk7.com/RR00/comments/220137.htmlhttp://www.tkk7.com/RR00/articles/220137.html#Feedback0http://www.tkk7.com/RR00/comments/commentRss/220137.htmlhttp://www.tkk7.com/RR00/services/trackbacks/220137.html
we should use registers which store the useful information in code.
]]>idahttp://www.tkk7.com/RR00/articles/218069.htmlR.ZeusR.ZeusMon, 28 Jul 2008 07:04:00 GMThttp://www.tkk7.com/RR00/articles/218069.htmlhttp://www.tkk7.com/RR00/comments/218069.htmlhttp://www.tkk7.com/RR00/articles/218069.html#Feedback0http://www.tkk7.com/RR00/comments/commentRss/218069.htmlhttp://www.tkk7.com/RR00/services/trackbacks/218069.html
use stud_pe to view what is it ida adds.
]]>pushz "hello.txt"http://www.tkk7.com/RR00/articles/206125.htmlR.ZeusR.ZeusThu, 05 Jun 2008 10:16:00 GMThttp://www.tkk7.com/RR00/articles/206125.htmlhttp://www.tkk7.com/RR00/comments/206125.htmlhttp://www.tkk7.com/RR00/articles/206125.html#Feedback0http://www.tkk7.com/RR00/comments/commentRss/206125.htmlhttp://www.tkk7.com/RR00/services/trackbacks/206125.html
local nexti call nexti
db szText,00h
nexti:
endm
//db szText,00h the "db" directive will make the "szText" as opcode next to the "call nexti" when expand the macro.
after invoke this macro,the esp will point to the szText opcode because of the call mechanism.
call = put eip+1 to esp,jump to call method.
usage: pushz "hello.txt"
//dw is the same as db,but I don't know what is the dd do.