blob: cf074029faca48e7dd892ec036946a5790e3ba9b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
|
Read 39 bytes of code and static data..
1000000: EB1B jmp 0x100001d
1000002: 55 push ebp
1000003: 54 push esp
1000004: 5D pop ebp
1000005: E802000000 call 0x100000c
100000A: 5D pop ebp
100000B: C3 ret
100000C: 55 push ebp
100000D: 54 push esp
100000E: 5D pop ebp
100000F: B801000000 mov eax, 1
1000014: 50 push eax
1000015: 58 pop eax
1000016: A323000001 mov dword ptr [0x1000023], eax
100001B: 5D pop ebp
100001C: C3 ret
100001D: E8E0FFFFFF call 0x1000002
1000022: F4 hlt
data:
01000023: 00000000
core start 1000000
data start 1000023
data size 4
stack start 1800000
Single step execution:
-- iteration 1
1000000: EB1B jmp 0x100001d
EIP: 0100001D
ESP: 01800000
EBP: 01800000
EAX: 00000000
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
data:
01000023: 00000000
-- iteration 2
100001D: E8E0FFFFFF call 0x1000002
EIP: 01000002
ESP: 017FFFFC
EBP: 01800000
EAX: 00000000
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
017FFFFC: 01000022
data:
01000023: 00000000
-- iteration 3
1000002: 55 push ebp
EIP: 01000003
ESP: 017FFFF8
EBP: 01800000
EAX: 00000000
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
017FFFF8: 01800000
017FFFFC: 01000022
data:
01000023: 00000000
-- iteration 4
1000003: 54 push esp
EIP: 01000004
ESP: 017FFFF4
EBP: 01800000
EAX: 00000000
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
017FFFF4: 017FFFF8
017FFFF8: 01800000
017FFFFC: 01000022
data:
01000023: 00000000
-- iteration 5
1000004: 5D pop ebp
EIP: 01000005
ESP: 017FFFF8
EBP: 017FFFF8
EAX: 00000000
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
017FFFF8: 01800000
017FFFFC: 01000022
data:
01000023: 00000000
-- iteration 6
1000005: E802000000 call 0x100000c
EIP: 0100000C
ESP: 017FFFF4
EBP: 017FFFF8
EAX: 00000000
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
017FFFF4: 0100000A
017FFFF8: 01800000
017FFFFC: 01000022
data:
01000023: 00000000
-- iteration 7
100000C: 55 push ebp
EIP: 0100000D
ESP: 017FFFF0
EBP: 017FFFF8
EAX: 00000000
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
017FFFF0: 017FFFF8
017FFFF4: 0100000A
017FFFF8: 01800000
017FFFFC: 01000022
data:
01000023: 00000000
-- iteration 8
100000D: 54 push esp
EIP: 0100000E
ESP: 017FFFEC
EBP: 017FFFF8
EAX: 00000000
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
017FFFEC: 017FFFF0
017FFFF0: 017FFFF8
017FFFF4: 0100000A
017FFFF8: 01800000
017FFFFC: 01000022
data:
01000023: 00000000
-- iteration 9
100000E: 5D pop ebp
EIP: 0100000F
ESP: 017FFFF0
EBP: 017FFFF0
EAX: 00000000
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
017FFFF0: 017FFFF8
017FFFF4: 0100000A
017FFFF8: 01800000
017FFFFC: 01000022
data:
01000023: 00000000
-- iteration 10
100000F: B801000000 mov eax, 1
EIP: 01000014
ESP: 017FFFF0
EBP: 017FFFF0
EAX: 00000001
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
017FFFF0: 017FFFF8
017FFFF4: 0100000A
017FFFF8: 01800000
017FFFFC: 01000022
data:
01000023: 00000000
-- iteration 11
1000014: 50 push eax
EIP: 01000015
ESP: 017FFFEC
EBP: 017FFFF0
EAX: 00000001
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
017FFFEC: 00000001
017FFFF0: 017FFFF8
017FFFF4: 0100000A
017FFFF8: 01800000
017FFFFC: 01000022
data:
01000023: 00000000
-- iteration 12
1000015: 58 pop eax
EIP: 01000016
ESP: 017FFFF0
EBP: 017FFFF0
EAX: 00000001
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
017FFFF0: 017FFFF8
017FFFF4: 0100000A
017FFFF8: 01800000
017FFFFC: 01000022
data:
01000023: 00000000
-- iteration 13
1000016: A323000001 mov dword ptr [0x1000023], eax
EIP: 0100001B
ESP: 017FFFF0
EBP: 017FFFF0
EAX: 00000001
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
017FFFF0: 017FFFF8
017FFFF4: 0100000A
017FFFF8: 01800000
017FFFFC: 01000022
data:
01000023: 01000000
-- iteration 14
100001B: 5D pop ebp
EIP: 0100001C
ESP: 017FFFF4
EBP: 017FFFF8
EAX: 00000001
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
017FFFF4: 0100000A
017FFFF8: 01800000
017FFFFC: 01000022
data:
01000023: 01000000
-- iteration 15
100001C: C3 ret
EIP: 0100000A
ESP: 017FFFF8
EBP: 017FFFF8
EAX: 00000001
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
017FFFF8: 01800000
017FFFFC: 01000022
data:
01000023: 01000000
-- iteration 16
100000A: 5D pop ebp
EIP: 0100000B
ESP: 017FFFFC
EBP: 01800000
EAX: 00000001
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
017FFFFC: 01000022
data:
01000023: 01000000
-- iteration 17
100000B: C3 ret
EIP: 01000022
ESP: 01800000
EBP: 01800000
EAX: 00000001
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
data:
01000023: 01000000
-- iteration 18
1000022: F4 hlt
EIP: 01000023
ESP: 01800000
EBP: 01800000
EAX: 00000001
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
data:
01000023: 01000000
|
