MS IE OBJECT tag exploit'



              

- 3


.text:75ACC4C0 ?GetInstantClassInfo@COleSite@@QAEPAUINSTANTCLASSINFO@@XZ

proc near

.text:75ACC4C0 push esi

.text:75ACC4C1 mov esi, ecx

.text:75ACC4C3 call ?GetDocPtr@CElement@@QBEPVCDoc@@XZ;CElement::GetDocPtr()

.text:75ACC4C8 mov si, [esi+6Ch]

.text:75ACC4CC test si, si

.text:75ACC4CF jz short loc_75ACC4E9

.text:75ACC4D1 movzx ecx, si

.text:75ACC4D4 imul ecx, 98h

.text:75ACC4DA mov eax, [eax+420h] ; ß

.text:75ACC4E0 pop esi

.text:75ACC4E1 lea eax, [ecx+eax-98h]

.text:75ACC4E8 retn

.text:75ACC4E9 ; --------------------------------------------------------------------

.text:75ACC4E9

.text:75ACC4E9 loc_75ACC4E9:

.text:75ACC4E9 mov eax, offset ?g_ciNull@@3UCLASSINFO@@A;CLASSINFO g_ciNull

.text:75ACC4EE pop esi

.text:75ACC4EF retn

.text:75ACC4EF ?GetInstantClassInfo@COleSite@@QAEPAUINSTANTCLASSINFO@@XZ

endp

 

, COleSite::GetInstantClassInfo(void), INSTANTCLASSINFO. , pdb- ( Microsoft !), __ , !

, CElement::GetDocPtr(void), EAX , (.  10):

.text:75A9211D ?GetDocPtr@CElement@@QBEPAVCDoc@@XZ proc near; CElement::GetDocPtr()

.text:75A9211D mov eax, [ecx+10h]

.text:75A92120 mov ecx, [ecx+1Ch]

.text:75A92123 test cl, 2

.text:75A92126 jz short loc_75A9212B

.text:75A92128 mov eax, [eax+0Ch]

.text:75A9212B