blob: 8ded4820d5f54fb4fb026fe51ac5b4f24a1868da (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
|
Read 35 bytes of code and static data..
1000000: EB00 jmp 0x1000002
1000002: B814000000 mov eax, 0x14
1000007: 50 push eax
1000008: 58 pop eax
1000009: A31F000001 mov dword ptr [0x100001f], eax
100000E: A11F000001 mov eax, dword ptr [0x100001f]
1000013: 50 push eax
1000014: 58 pop eax
1000015: A31B000001 mov dword ptr [0x100001b], eax
100001A: F4 hlt
data:
0100001B: 00000000
0100001F: 00000000
core start 1000000
data start 100001b
data size 8
stack start 1800000
Single step execution:
-- iteration 1
1000000: EB00 jmp 0x1000002
EIP: 01000002
ESP: 01800000
EBP: 01800000
EAX: 00000000
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
data:
0100001B: 00000000
0100001F: 00000000
-- iteration 2
1000002: B814000000 mov eax, 0x14
EIP: 01000007
ESP: 01800000
EBP: 01800000
EAX: 00000014
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
data:
0100001B: 00000000
0100001F: 00000000
-- iteration 3
1000007: 50 push eax
EIP: 01000008
ESP: 017FFFFC
EBP: 01800000
EAX: 00000014
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
017FFFFC: 00000014
data:
0100001B: 00000000
0100001F: 00000000
-- iteration 4
1000008: 58 pop eax
EIP: 01000009
ESP: 01800000
EBP: 01800000
EAX: 00000014
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
data:
0100001B: 00000000
0100001F: 00000000
-- iteration 5
1000009: A31F000001 mov dword ptr [0x100001f], eax
EIP: 0100000E
ESP: 01800000
EBP: 01800000
EAX: 00000014
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
data:
0100001B: 00000000
0100001F: 14000000
-- iteration 6
100000E: A11F000001 mov eax, dword ptr [0x100001f]
EIP: 01000013
ESP: 01800000
EBP: 01800000
EAX: 00000014
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
data:
0100001B: 00000000
0100001F: 14000000
-- iteration 7
1000013: 50 push eax
EIP: 01000014
ESP: 017FFFFC
EBP: 01800000
EAX: 00000014
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
017FFFFC: 00000014
data:
0100001B: 00000000
0100001F: 14000000
-- iteration 8
1000014: 58 pop eax
EIP: 01000015
ESP: 01800000
EBP: 01800000
EAX: 00000014
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
data:
0100001B: 00000000
0100001F: 14000000
-- iteration 9
1000015: A31B000001 mov dword ptr [0x100001b], eax
EIP: 0100001A
ESP: 01800000
EBP: 01800000
EAX: 00000014
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
data:
0100001B: 14000000
0100001F: 14000000
-- iteration 10
100001A: F4 hlt
EIP: 0100001B
ESP: 01800000
EBP: 01800000
EAX: 00000014
EBX: 00000000
ECX: 00000000
EDX: 00000000
ESI: 00000000
EDI: 00000000
stack:
data:
0100001B: 14000000
0100001F: 14000000
|
