b/br/call/callr/ret会清零ZGL。 i 如果L标志或Z标志被置起则跳转到当前指令地址+i*2 此处i范围为-1024~1023 call i 把下一条指令地址压栈,并跳转到当前指令地址+i*2的指令地址 此处i范围为-128~127 callr op[15:5] bgz i 25=>op[4:0],i=>op[15:5] blz i 26=>op[4:0],i=>op[15:5] call i 27=>op[4:0],i=>op[15:5] callr
The callr package is a general tool to run code in new R sessions.
0x40061a print("[+] pop_rbx_rbp_r12_r13_r14_r15_ret = 0x%x" % pop_rbx_rbp_r12_r13_r14_r15_ret) rdx_rsi_rdi_callr12 _ret = 0x400600 print("[+] rdx_rsi_rdi_callr12_ret = 0x%x" % rdx_rsi_rdi_callr12_ret) """ 0000000000601018 payload1 += p64(1) # param1 : 1 payload1 += p64(rdx_rsi_rdi_callr12 += p64(0) # param1 : 0 payload2 += p64(rdx_rsi_rdi_callr12 bss_addr+8) # param1 : bss_addr+8 payload3 += p64(rdx_rsi_rdi_callr12
cli_2.0.2 desc_1.2.0 labeling_0.3 ## [21] scales_1.1.1 callr
#> [43] prettyunits_1.0.2 stringr_1.4.0 munsell_0.5.0 #> [46] locfit_1.5-9.1 callr