Sorry, on my past email there was a error when I put movl %0x4, %esp. The correct is subl %0x4, %esp and sub %0x18, %esp. I understood how it works at least. I have written a paper about all this. If you are interested it is on packetstorm (www.packetstorm.securify.com) on papers/unix/disassembling.txt.


Thanks & Regards.


Angel Ramos.




Reply via email to