## Writeup 1. Same as baby step 1, `info function` then `disas main` ```shell ┌──(kali㉿kali)-[~/code] └─$ gdb debugger0_b GNU gdb (Debian 13.2-1) 13.2 Copyright (C) 2023 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <https://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from debugger0_b... (No debugging symbols found in debugger0_b) gdb-peda$ info function All defined functions: Non-debugging symbols: 0x0000000000401000 _init 0x0000000000401020 _start 0x0000000000401050 _dl_relocate_static_pie 0x0000000000401060 deregister_tm_clones 0x0000000000401090 register_tm_clones 0x00000000004010d0 __do_global_dtors_aux 0x0000000000401100 frame_dummy 0x0000000000401106 main 0x0000000000401150 __libc_csu_init 0x00000000004011c0 __libc_csu_fini 0x00000000004011c8 _fini gdb-peda$ disas main Dump of assembler code for function main: 0x0000000000401106 <+0>: endbr64 0x000000000040110a <+4>: push rbp 0x000000000040110b <+5>: mov rbp,rsp 0x000000000040110e <+8>: mov DWORD PTR [rbp-0x14],edi 0x0000000000401111 <+11>: mov QWORD PTR [rbp-0x20],rsi 0x0000000000401115 <+15>: mov DWORD PTR [rbp-0x4],0x1e0da 0x000000000040111c <+22>: mov DWORD PTR [rbp-0xc],0x25f 0x0000000000401123 <+29>: mov DWORD PTR [rbp-0x8],0x0 0x000000000040112a <+36>: jmp 0x401136 <main+48> 0x000000000040112c <+38>: mov eax,DWORD PTR [rbp-0x8] 0x000000000040112f <+41>: add DWORD PTR [rbp-0x4],eax 0x0000000000401132 <+44>: add DWORD PTR [rbp-0x8],0x1 0x0000000000401136 <+48>: mov eax,DWORD PTR [rbp-0x8] 0x0000000000401139 <+51>: cmp eax,DWORD PTR [rbp-0xc] 0x000000000040113c <+54>: jl 0x40112c <main+38> 0x000000000040113e <+56>: mov eax,DWORD PTR [rbp-0x4] 0x0000000000401141 <+59>: pop rbp 0x0000000000401142 <+60>: ret End of assembler dump. ``` 2. set breakpoint at main ```shell gdb-peda$ b main Breakpoint 1 at 0x40110e ``` 3. Then run it (*NOTE: remember to `chmod +x debugger0_b` outside `gdb` first, or else you'll get permission denied*), it should stop at the first instruction of `main` ```shell gdb-peda$ r Starting program: /home/kali/code/debugger0_b [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Warning: 'set logging off', an alias for the command 'set logging enabled', is deprecated. Use 'set logging enabled off'. Warning: 'set logging on', an alias for the command 'set logging enabled', is deprecated. Use 'set logging enabled on'. [----------------------------------registers-----------------------------------] RAX: 0x401106 (<main>: endbr64) RBX: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RCX: 0x7ffff7f9e840 --> 0x7ffff7fa0300 --> 0x0 RDX: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") RSI: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RDI: 0x1 RBP: 0x7fffffffde50 --> 0x1 RSP: 0x7fffffffde50 --> 0x1 RIP: 0x40110e (<main+8>: mov DWORD PTR [rbp-0x14],edi) R8 : 0x4011c0 (<__libc_csu_fini>: endbr64) R9 : 0x7ffff7fcfaf0 (<_dl_fini>: push rbp) R10: 0x7ffff7fcb858 --> 0xa00120000000e R11: 0x7ffff7fe1bc0 (<_dl_audit_preinit>: mov eax,DWORD PTR [rip+0x1b292] # 0x7ffff7ffce58 <_rtld_global_ro+888>) R12: 0x0 R13: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") R14: 0x0 R15: 0x7ffff7ffd000 --> 0x7ffff7ffe2c0 --> 0x0 EFLAGS: 0x246 (carry PARITY adjust ZERO sign trap INTERRUPT direction overflow) [-------------------------------------code-------------------------------------] 0x401106 <main>: endbr64 0x40110a <main+4>: push rbp 0x40110b <main+5>: mov rbp,rsp => 0x40110e <main+8>: mov DWORD PTR [rbp-0x14],edi 0x401111 <main+11>: mov QWORD PTR [rbp-0x20],rsi 0x401115 <main+15>: mov DWORD PTR [rbp-0x4],0x1e0da 0x40111c <main+22>: mov DWORD PTR [rbp-0xc],0x25f 0x401123 <main+29>: mov DWORD PTR [rbp-0x8],0x0 [------------------------------------stack-------------------------------------] 0000| 0x7fffffffde50 --> 0x1 0008| 0x7fffffffde58 --> 0x7ffff7df26ca (<__libc_start_call_main+122>:mov edi,eax) 0016| 0x7fffffffde60 --> 0x0 0024| 0x7fffffffde68 --> 0x401106 (<main>: endbr64) 0032| 0x7fffffffde70 --> 0x100000000 0040| 0x7fffffffde78 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0048| 0x7fffffffde80 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0056| 0x7fffffffde88 --> 0x60d8b86ed7663d0 [------------------------------------------------------------------------------] Legend: code, data, rodata, value Breakpoint 1, 0x000000000040110e in main () ``` 4. Here I originally thought [`ni`](https://cs.brown.edu/courses/cs033/docs/guides/gdb.pdf) will work, but after entering `ni` several times, I found that it have to [recurse many times](https://hackmd.io/URPao0CVTMC6gNn7K44_Uw#ni-part-ltendlessgt). I then found that I should set another breakpoint at `ret` (which stands for *return*), so that I can get the final value of `eax` after the lengthy recursion. ```shell gdb-peda$ b *0x401142 Breakpoint 2 at 0x401142 ``` 5. Then continue(which is `c`) ```shell gdb-peda$ c Continuing. [----------------------------------registers-----------------------------------] RAX: 0x4af4b RBX: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RCX: 0x7ffff7f9e840 --> 0x7ffff7fa0300 --> 0x0 RDX: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") RSI: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RDI: 0x1 RBP: 0x1 RSP: 0x7fffffffde58 --> 0x7ffff7df26ca (<__libc_start_call_main+122>:mov edi,eax) RIP: 0x401142 (<main+60>: ret) R8 : 0x4011c0 (<__libc_csu_fini>: endbr64) R9 : 0x7ffff7fcfaf0 (<_dl_fini>: push rbp) R10: 0x7ffff7fcb858 --> 0xa00120000000e R11: 0x7ffff7fe1bc0 (<_dl_audit_preinit>: mov eax,DWORD PTR [rip+0x1b292] # 0x7ffff7ffce58 <_rtld_global_ro+888>) R12: 0x0 R13: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") R14: 0x0 R15: 0x7ffff7ffd000 --> 0x7ffff7ffe2c0 --> 0x0 EFLAGS: 0x246 (carry PARITY adjust ZERO sign trap INTERRUPT direction overflow) [-------------------------------------code-------------------------------------] 0x40113c <main+54>: jl 0x40112c <main+38> 0x40113e <main+56>: mov eax,DWORD PTR [rbp-0x4] 0x401141 <main+59>: pop rbp => 0x401142 <main+60>: ret 0x401143: cs nop WORD PTR [rax+rax*1+0x0] 0x40114d: nop DWORD PTR [rax] 0x401150 <__libc_csu_init>: endbr64 0x401154 <__libc_csu_init+4>: push r15 [------------------------------------stack-------------------------------------] 0000| 0x7fffffffde58 --> 0x7ffff7df26ca (<__libc_start_call_main+122>:mov edi,eax) 0008| 0x7fffffffde60 --> 0x0 0016| 0x7fffffffde68 --> 0x401106 (<main>: endbr64) 0024| 0x7fffffffde70 --> 0x100000000 0032| 0x7fffffffde78 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0040| 0x7fffffffde80 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0048| 0x7fffffffde88 --> 0xef126cd96700eb14 0056| 0x7fffffffde90 --> 0x0 [------------------------------------------------------------------------------] Legend: code, data, rodata, value Breakpoint 2, 0x0000000000401142 in main () ``` 6. Here we can check where we are (though there's an arrow pointing at that line) ```shell gdb-peda$ info registers rip rip 0x401142 0x401142 <main+60> ``` *NOTE: `rip` stands for **instruction pointer register*** 7. Now is the last step, print out the value of `eax` ! ```shell gdb-peda$ print/d $eax $4 = 307019 ``` #### `ni` part <endless> ```shell db-peda$ ni [----------------------------------registers-----------------------------------] RAX: 0x401106 (<main>: endbr64) RBX: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RCX: 0x7ffff7f9e840 --> 0x7ffff7fa0300 --> 0x0 RDX: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") RSI: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RDI: 0x1 RBP: 0x7fffffffde50 --> 0x1 RSP: 0x7fffffffde50 --> 0x1 RIP: 0x401111 (<main+11>: mov QWORD PTR [rbp-0x20],rsi) R8 : 0x4011c0 (<__libc_csu_fini>: endbr64) R9 : 0x7ffff7fcfaf0 (<_dl_fini>: push rbp) R10: 0x7ffff7fcb858 --> 0xa00120000000e R11: 0x7ffff7fe1bc0 (<_dl_audit_preinit>: mov eax,DWORD PTR [rip+0x1b292] # 0x7ffff7ffce58 <_rtld_global_ro+888>) R12: 0x0 R13: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") R14: 0x0 R15: 0x7ffff7ffd000 --> 0x7ffff7ffe2c0 --> 0x0 EFLAGS: 0x246 (carry PARITY adjust ZERO sign trap INTERRUPT direction overflow) [-------------------------------------code-------------------------------------] 0x40110a <main+4>: push rbp 0x40110b <main+5>: mov rbp,rsp 0x40110e <main+8>: mov DWORD PTR [rbp-0x14],edi => 0x401111 <main+11>: mov QWORD PTR [rbp-0x20],rsi 0x401115 <main+15>: mov DWORD PTR [rbp-0x4],0x1e0da 0x40111c <main+22>: mov DWORD PTR [rbp-0xc],0x25f 0x401123 <main+29>: mov DWORD PTR [rbp-0x8],0x0 0x40112a <main+36>: jmp 0x401136 <main+48> [------------------------------------stack-------------------------------------] 0000| 0x7fffffffde50 --> 0x1 0008| 0x7fffffffde58 --> 0x7ffff7df26ca (<__libc_start_call_main+122>:mov edi,eax) 0016| 0x7fffffffde60 --> 0x0 0024| 0x7fffffffde68 --> 0x401106 (<main>: endbr64) 0032| 0x7fffffffde70 --> 0x100000000 0040| 0x7fffffffde78 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0048| 0x7fffffffde80 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0056| 0x7fffffffde88 --> 0x60d8b86ed7663d0 [------------------------------------------------------------------------------] Legend: code, data, rodata, value 0x0000000000401111 in main () gdb-peda$ [----------------------------------registers-----------------------------------] RAX: 0x401106 (<main>: endbr64) RBX: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RCX: 0x7ffff7f9e840 --> 0x7ffff7fa0300 --> 0x0 RDX: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") RSI: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RDI: 0x1 RBP: 0x7fffffffde50 --> 0x1 RSP: 0x7fffffffde50 --> 0x1 RIP: 0x401115 (<main+15>: mov DWORD PTR [rbp-0x4],0x1e0da) R8 : 0x4011c0 (<__libc_csu_fini>: endbr64) R9 : 0x7ffff7fcfaf0 (<_dl_fini>: push rbp) R10: 0x7ffff7fcb858 --> 0xa00120000000e R11: 0x7ffff7fe1bc0 (<_dl_audit_preinit>: mov eax,DWORD PTR [rip+0x1b292] # 0x7ffff7ffce58 <_rtld_global_ro+888>) R12: 0x0 R13: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") R14: 0x0 R15: 0x7ffff7ffd000 --> 0x7ffff7ffe2c0 --> 0x0 EFLAGS: 0x246 (carry PARITY adjust ZERO sign trap INTERRUPT direction overflow) [-------------------------------------code-------------------------------------] 0x40110b <main+5>: mov rbp,rsp 0x40110e <main+8>: mov DWORD PTR [rbp-0x14],edi 0x401111 <main+11>: mov QWORD PTR [rbp-0x20],rsi => 0x401115 <main+15>: mov DWORD PTR [rbp-0x4],0x1e0da 0x40111c <main+22>: mov DWORD PTR [rbp-0xc],0x25f 0x401123 <main+29>: mov DWORD PTR [rbp-0x8],0x0 0x40112a <main+36>: jmp 0x401136 <main+48> 0x40112c <main+38>: mov eax,DWORD PTR [rbp-0x8] [------------------------------------stack-------------------------------------] 0000| 0x7fffffffde50 --> 0x1 0008| 0x7fffffffde58 --> 0x7ffff7df26ca (<__libc_start_call_main+122>:mov edi,eax) 0016| 0x7fffffffde60 --> 0x0 0024| 0x7fffffffde68 --> 0x401106 (<main>: endbr64) 0032| 0x7fffffffde70 --> 0x100000000 0040| 0x7fffffffde78 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0048| 0x7fffffffde80 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0056| 0x7fffffffde88 --> 0x60d8b86ed7663d0 [------------------------------------------------------------------------------] Legend: code, data, rodata, value 0x0000000000401115 in main () gdb-peda$ [----------------------------------registers-----------------------------------] RAX: 0x401106 (<main>: endbr64) RBX: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RCX: 0x7ffff7f9e840 --> 0x7ffff7fa0300 --> 0x0 RDX: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") RSI: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RDI: 0x1 RBP: 0x7fffffffde50 --> 0x1 RSP: 0x7fffffffde50 --> 0x1 RIP: 0x40111c (<main+22>: mov DWORD PTR [rbp-0xc],0x25f) R8 : 0x4011c0 (<__libc_csu_fini>: endbr64) R9 : 0x7ffff7fcfaf0 (<_dl_fini>: push rbp) R10: 0x7ffff7fcb858 --> 0xa00120000000e R11: 0x7ffff7fe1bc0 (<_dl_audit_preinit>: mov eax,DWORD PTR [rip+0x1b292] # 0x7ffff7ffce58 <_rtld_global_ro+888>) R12: 0x0 R13: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") R14: 0x0 R15: 0x7ffff7ffd000 --> 0x7ffff7ffe2c0 --> 0x0 EFLAGS: 0x246 (carry PARITY adjust ZERO sign trap INTERRUPT direction overflow) [-------------------------------------code-------------------------------------] 0x40110e <main+8>: mov DWORD PTR [rbp-0x14],edi 0x401111 <main+11>: mov QWORD PTR [rbp-0x20],rsi 0x401115 <main+15>: mov DWORD PTR [rbp-0x4],0x1e0da => 0x40111c <main+22>: mov DWORD PTR [rbp-0xc],0x25f 0x401123 <main+29>: mov DWORD PTR [rbp-0x8],0x0 0x40112a <main+36>: jmp 0x401136 <main+48> 0x40112c <main+38>: mov eax,DWORD PTR [rbp-0x8] 0x40112f <main+41>: add DWORD PTR [rbp-0x4],eax [------------------------------------stack-------------------------------------] 0000| 0x7fffffffde50 --> 0x1 0008| 0x7fffffffde58 --> 0x7ffff7df26ca (<__libc_start_call_main+122>:mov edi,eax) 0016| 0x7fffffffde60 --> 0x0 0024| 0x7fffffffde68 --> 0x401106 (<main>: endbr64) 0032| 0x7fffffffde70 --> 0x100000000 0040| 0x7fffffffde78 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0048| 0x7fffffffde80 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0056| 0x7fffffffde88 --> 0x60d8b86ed7663d0 [------------------------------------------------------------------------------] Legend: code, data, rodata, value 0x000000000040111c in main () gdb-peda$ [----------------------------------registers-----------------------------------] RAX: 0x401106 (<main>: endbr64) RBX: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RCX: 0x7ffff7f9e840 --> 0x7ffff7fa0300 --> 0x0 RDX: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") RSI: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RDI: 0x1 RBP: 0x7fffffffde50 --> 0x1 RSP: 0x7fffffffde50 --> 0x1 RIP: 0x401123 (<main+29>: mov DWORD PTR [rbp-0x8],0x0) R8 : 0x4011c0 (<__libc_csu_fini>: endbr64) R9 : 0x7ffff7fcfaf0 (<_dl_fini>: push rbp) R10: 0x7ffff7fcb858 --> 0xa00120000000e R11: 0x7ffff7fe1bc0 (<_dl_audit_preinit>: mov eax,DWORD PTR [rip+0x1b292] # 0x7ffff7ffce58 <_rtld_global_ro+888>) R12: 0x0 R13: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") R14: 0x0 R15: 0x7ffff7ffd000 --> 0x7ffff7ffe2c0 --> 0x0 EFLAGS: 0x246 (carry PARITY adjust ZERO sign trap INTERRUPT direction overflow) [-------------------------------------code-------------------------------------] 0x401111 <main+11>: mov QWORD PTR [rbp-0x20],rsi 0x401115 <main+15>: mov DWORD PTR [rbp-0x4],0x1e0da 0x40111c <main+22>: mov DWORD PTR [rbp-0xc],0x25f => 0x401123 <main+29>: mov DWORD PTR [rbp-0x8],0x0 0x40112a <main+36>: jmp 0x401136 <main+48> 0x40112c <main+38>: mov eax,DWORD PTR [rbp-0x8] 0x40112f <main+41>: add DWORD PTR [rbp-0x4],eax 0x401132 <main+44>: add DWORD PTR [rbp-0x8],0x1 [------------------------------------stack-------------------------------------] 0000| 0x7fffffffde50 --> 0x1 0008| 0x7fffffffde58 --> 0x7ffff7df26ca (<__libc_start_call_main+122>:mov edi,eax) 0016| 0x7fffffffde60 --> 0x0 0024| 0x7fffffffde68 --> 0x401106 (<main>: endbr64) 0032| 0x7fffffffde70 --> 0x100000000 0040| 0x7fffffffde78 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0048| 0x7fffffffde80 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0056| 0x7fffffffde88 --> 0x60d8b86ed7663d0 [------------------------------------------------------------------------------] Legend: code, data, rodata, value 0x0000000000401123 in main () gdb-peda$ [----------------------------------registers-----------------------------------] RAX: 0x401106 (<main>: endbr64) RBX: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RCX: 0x7ffff7f9e840 --> 0x7ffff7fa0300 --> 0x0 RDX: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") RSI: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RDI: 0x1 RBP: 0x7fffffffde50 --> 0x1 RSP: 0x7fffffffde50 --> 0x1 RIP: 0x40112a (<main+36>: jmp 0x401136 <main+48>) R8 : 0x4011c0 (<__libc_csu_fini>: endbr64) R9 : 0x7ffff7fcfaf0 (<_dl_fini>: push rbp) R10: 0x7ffff7fcb858 --> 0xa00120000000e R11: 0x7ffff7fe1bc0 (<_dl_audit_preinit>: mov eax,DWORD PTR [rip+0x1b292] # 0x7ffff7ffce58 <_rtld_global_ro+888>) R12: 0x0 R13: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") R14: 0x0 R15: 0x7ffff7ffd000 --> 0x7ffff7ffe2c0 --> 0x0 EFLAGS: 0x246 (carry PARITY adjust ZERO sign trap INTERRUPT direction overflow) [-------------------------------------code-------------------------------------] 0x401115 <main+15>: mov DWORD PTR [rbp-0x4],0x1e0da 0x40111c <main+22>: mov DWORD PTR [rbp-0xc],0x25f 0x401123 <main+29>: mov DWORD PTR [rbp-0x8],0x0 => 0x40112a <main+36>: jmp 0x401136 <main+48> | 0x40112c <main+38>: mov eax,DWORD PTR [rbp-0x8] | 0x40112f <main+41>: add DWORD PTR [rbp-0x4],eax | 0x401132 <main+44>: add DWORD PTR [rbp-0x8],0x1 | 0x401136 <main+48>: mov eax,DWORD PTR [rbp-0x8] |-> 0x401136 <main+48>: mov eax,DWORD PTR [rbp-0x8] 0x401139 <main+51>: cmp eax,DWORD PTR [rbp-0xc] 0x40113c <main+54>: jl 0x40112c <main+38> 0x40113e <main+56>: mov eax,DWORD PTR [rbp-0x4] JUMP is taken [------------------------------------stack-------------------------------------] 0000| 0x7fffffffde50 --> 0x1 0008| 0x7fffffffde58 --> 0x7ffff7df26ca (<__libc_start_call_main+122>:mov edi,eax) 0016| 0x7fffffffde60 --> 0x0 0024| 0x7fffffffde68 --> 0x401106 (<main>: endbr64) 0032| 0x7fffffffde70 --> 0x100000000 0040| 0x7fffffffde78 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0048| 0x7fffffffde80 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0056| 0x7fffffffde88 --> 0x60d8b86ed7663d0 [------------------------------------------------------------------------------] Legend: code, data, rodata, value 0x000000000040112a in main () gdb-peda$ [----------------------------------registers-----------------------------------] RAX: 0x401106 (<main>: endbr64) RBX: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RCX: 0x7ffff7f9e840 --> 0x7ffff7fa0300 --> 0x0 RDX: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") RSI: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RDI: 0x1 RBP: 0x7fffffffde50 --> 0x1 RSP: 0x7fffffffde50 --> 0x1 RIP: 0x401136 (<main+48>: mov eax,DWORD PTR [rbp-0x8]) R8 : 0x4011c0 (<__libc_csu_fini>: endbr64) R9 : 0x7ffff7fcfaf0 (<_dl_fini>: push rbp) R10: 0x7ffff7fcb858 --> 0xa00120000000e R11: 0x7ffff7fe1bc0 (<_dl_audit_preinit>: mov eax,DWORD PTR [rip+0x1b292] # 0x7ffff7ffce58 <_rtld_global_ro+888>) R12: 0x0 R13: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") R14: 0x0 R15: 0x7ffff7ffd000 --> 0x7ffff7ffe2c0 --> 0x0 EFLAGS: 0x246 (carry PARITY adjust ZERO sign trap INTERRUPT direction overflow) [-------------------------------------code-------------------------------------] 0x40112c <main+38>: mov eax,DWORD PTR [rbp-0x8] 0x40112f <main+41>: add DWORD PTR [rbp-0x4],eax 0x401132 <main+44>: add DWORD PTR [rbp-0x8],0x1 => 0x401136 <main+48>: mov eax,DWORD PTR [rbp-0x8] 0x401139 <main+51>: cmp eax,DWORD PTR [rbp-0xc] 0x40113c <main+54>: jl 0x40112c <main+38> 0x40113e <main+56>: mov eax,DWORD PTR [rbp-0x4] 0x401141 <main+59>: pop rbp [------------------------------------stack-------------------------------------] 0000| 0x7fffffffde50 --> 0x1 0008| 0x7fffffffde58 --> 0x7ffff7df26ca (<__libc_start_call_main+122>:mov edi,eax) 0016| 0x7fffffffde60 --> 0x0 0024| 0x7fffffffde68 --> 0x401106 (<main>: endbr64) 0032| 0x7fffffffde70 --> 0x100000000 0040| 0x7fffffffde78 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0048| 0x7fffffffde80 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0056| 0x7fffffffde88 --> 0x60d8b86ed7663d0 [------------------------------------------------------------------------------] Legend: code, data, rodata, value 0x0000000000401136 in main () gdb-peda$ [----------------------------------registers-----------------------------------] RAX: 0x0 RBX: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RCX: 0x7ffff7f9e840 --> 0x7ffff7fa0300 --> 0x0 RDX: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") RSI: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RDI: 0x1 RBP: 0x7fffffffde50 --> 0x1 RSP: 0x7fffffffde50 --> 0x1 RIP: 0x401139 (<main+51>: cmp eax,DWORD PTR [rbp-0xc]) R8 : 0x4011c0 (<__libc_csu_fini>: endbr64) R9 : 0x7ffff7fcfaf0 (<_dl_fini>: push rbp) R10: 0x7ffff7fcb858 --> 0xa00120000000e R11: 0x7ffff7fe1bc0 (<_dl_audit_preinit>: mov eax,DWORD PTR [rip+0x1b292] # 0x7ffff7ffce58 <_rtld_global_ro+888>) R12: 0x0 R13: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") R14: 0x0 R15: 0x7ffff7ffd000 --> 0x7ffff7ffe2c0 --> 0x0 EFLAGS: 0x246 (carry PARITY adjust ZERO sign trap INTERRUPT direction overflow) [-------------------------------------code-------------------------------------] 0x40112f <main+41>: add DWORD PTR [rbp-0x4],eax 0x401132 <main+44>: add DWORD PTR [rbp-0x8],0x1 0x401136 <main+48>: mov eax,DWORD PTR [rbp-0x8] => 0x401139 <main+51>: cmp eax,DWORD PTR [rbp-0xc] 0x40113c <main+54>: jl 0x40112c <main+38> 0x40113e <main+56>: mov eax,DWORD PTR [rbp-0x4] 0x401141 <main+59>: pop rbp 0x401142 <main+60>: ret [------------------------------------stack-------------------------------------] 0000| 0x7fffffffde50 --> 0x1 0008| 0x7fffffffde58 --> 0x7ffff7df26ca (<__libc_start_call_main+122>:mov edi,eax) 0016| 0x7fffffffde60 --> 0x0 0024| 0x7fffffffde68 --> 0x401106 (<main>: endbr64) 0032| 0x7fffffffde70 --> 0x100000000 0040| 0x7fffffffde78 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0048| 0x7fffffffde80 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0056| 0x7fffffffde88 --> 0x60d8b86ed7663d0 [------------------------------------------------------------------------------] Legend: code, data, rodata, value 0x0000000000401139 in main () gdb-peda$ [----------------------------------registers-----------------------------------] RAX: 0x0 RBX: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RCX: 0x7ffff7f9e840 --> 0x7ffff7fa0300 --> 0x0 RDX: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") RSI: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RDI: 0x1 RBP: 0x7fffffffde50 --> 0x1 RSP: 0x7fffffffde50 --> 0x1 RIP: 0x40113c (<main+54>: jl 0x40112c <main+38>) R8 : 0x4011c0 (<__libc_csu_fini>: endbr64) R9 : 0x7ffff7fcfaf0 (<_dl_fini>: push rbp) R10: 0x7ffff7fcb858 --> 0xa00120000000e R11: 0x7ffff7fe1bc0 (<_dl_audit_preinit>: mov eax,DWORD PTR [rip+0x1b292] # 0x7ffff7ffce58 <_rtld_global_ro+888>) R12: 0x0 R13: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") R14: 0x0 R15: 0x7ffff7ffd000 --> 0x7ffff7ffe2c0 --> 0x0 EFLAGS: 0x293 (CARRY parity ADJUST zero SIGN trap INTERRUPT direction overflow) [-------------------------------------code-------------------------------------] 0x401132 <main+44>: add DWORD PTR [rbp-0x8],0x1 0x401136 <main+48>: mov eax,DWORD PTR [rbp-0x8] 0x401139 <main+51>: cmp eax,DWORD PTR [rbp-0xc] => 0x40113c <main+54>: jl 0x40112c <main+38> | 0x40113e <main+56>: mov eax,DWORD PTR [rbp-0x4] | 0x401141 <main+59>: pop rbp | 0x401142 <main+60>: ret | 0x401143: cs nop WORD PTR [rax+rax*1+0x0] |-> 0x40112c <main+38>: mov eax,DWORD PTR [rbp-0x8] 0x40112f <main+41>: add DWORD PTR [rbp-0x4],eax 0x401132 <main+44>: add DWORD PTR [rbp-0x8],0x1 0x401136 <main+48>: mov eax,DWORD PTR [rbp-0x8] JUMP is taken [------------------------------------stack-------------------------------------] 0000| 0x7fffffffde50 --> 0x1 0008| 0x7fffffffde58 --> 0x7ffff7df26ca (<__libc_start_call_main+122>:mov edi,eax) 0016| 0x7fffffffde60 --> 0x0 0024| 0x7fffffffde68 --> 0x401106 (<main>: endbr64) 0032| 0x7fffffffde70 --> 0x100000000 0040| 0x7fffffffde78 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0048| 0x7fffffffde80 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0056| 0x7fffffffde88 --> 0x60d8b86ed7663d0 [------------------------------------------------------------------------------] Legend: code, data, rodata, value 0x000000000040113c in main () gdb-peda$ [----------------------------------registers-----------------------------------] RAX: 0x0 RBX: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RCX: 0x7ffff7f9e840 --> 0x7ffff7fa0300 --> 0x0 RDX: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") RSI: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RDI: 0x1 RBP: 0x7fffffffde50 --> 0x1 RSP: 0x7fffffffde50 --> 0x1 RIP: 0x40112c (<main+38>: mov eax,DWORD PTR [rbp-0x8]) R8 : 0x4011c0 (<__libc_csu_fini>: endbr64) R9 : 0x7ffff7fcfaf0 (<_dl_fini>: push rbp) R10: 0x7ffff7fcb858 --> 0xa00120000000e R11: 0x7ffff7fe1bc0 (<_dl_audit_preinit>: mov eax,DWORD PTR [rip+0x1b292] # 0x7ffff7ffce58 <_rtld_global_ro+888>) R12: 0x0 R13: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") R14: 0x0 R15: 0x7ffff7ffd000 --> 0x7ffff7ffe2c0 --> 0x0 EFLAGS: 0x293 (CARRY parity ADJUST zero SIGN trap INTERRUPT direction overflow) [-------------------------------------code-------------------------------------] 0x40111c <main+22>: mov DWORD PTR [rbp-0xc],0x25f 0x401123 <main+29>: mov DWORD PTR [rbp-0x8],0x0 0x40112a <main+36>: jmp 0x401136 <main+48> => 0x40112c <main+38>: mov eax,DWORD PTR [rbp-0x8] 0x40112f <main+41>: add DWORD PTR [rbp-0x4],eax 0x401132 <main+44>: add DWORD PTR [rbp-0x8],0x1 0x401136 <main+48>: mov eax,DWORD PTR [rbp-0x8] 0x401139 <main+51>: cmp eax,DWORD PTR [rbp-0xc] [------------------------------------stack-------------------------------------] 0000| 0x7fffffffde50 --> 0x1 0008| 0x7fffffffde58 --> 0x7ffff7df26ca (<__libc_start_call_main+122>:mov edi,eax) 0016| 0x7fffffffde60 --> 0x0 0024| 0x7fffffffde68 --> 0x401106 (<main>: endbr64) 0032| 0x7fffffffde70 --> 0x100000000 0040| 0x7fffffffde78 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0048| 0x7fffffffde80 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0056| 0x7fffffffde88 --> 0x60d8b86ed7663d0 [------------------------------------------------------------------------------] Legend: code, data, rodata, value 0x000000000040112c in main () gdb-peda$ [----------------------------------registers-----------------------------------] RAX: 0x0 RBX: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RCX: 0x7ffff7f9e840 --> 0x7ffff7fa0300 --> 0x0 RDX: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") RSI: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RDI: 0x1 RBP: 0x7fffffffde50 --> 0x1 RSP: 0x7fffffffde50 --> 0x1 RIP: 0x40112f (<main+41>: add DWORD PTR [rbp-0x4],eax) R8 : 0x4011c0 (<__libc_csu_fini>: endbr64) R9 : 0x7ffff7fcfaf0 (<_dl_fini>: push rbp) R10: 0x7ffff7fcb858 --> 0xa00120000000e R11: 0x7ffff7fe1bc0 (<_dl_audit_preinit>: mov eax,DWORD PTR [rip+0x1b292] # 0x7ffff7ffce58 <_rtld_global_ro+888>) R12: 0x0 R13: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") R14: 0x0 R15: 0x7ffff7ffd000 --> 0x7ffff7ffe2c0 --> 0x0 EFLAGS: 0x293 (CARRY parity ADJUST zero SIGN trap INTERRUPT direction overflow) [-------------------------------------code-------------------------------------] 0x401123 <main+29>: mov DWORD PTR [rbp-0x8],0x0 0x40112a <main+36>: jmp 0x401136 <main+48> 0x40112c <main+38>: mov eax,DWORD PTR [rbp-0x8] => 0x40112f <main+41>: add DWORD PTR [rbp-0x4],eax 0x401132 <main+44>: add DWORD PTR [rbp-0x8],0x1 0x401136 <main+48>: mov eax,DWORD PTR [rbp-0x8] 0x401139 <main+51>: cmp eax,DWORD PTR [rbp-0xc] 0x40113c <main+54>: jl 0x40112c <main+38> [------------------------------------stack-------------------------------------] 0000| 0x7fffffffde50 --> 0x1 0008| 0x7fffffffde58 --> 0x7ffff7df26ca (<__libc_start_call_main+122>:mov edi,eax) 0016| 0x7fffffffde60 --> 0x0 0024| 0x7fffffffde68 --> 0x401106 (<main>: endbr64) 0032| 0x7fffffffde70 --> 0x100000000 0040| 0x7fffffffde78 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0048| 0x7fffffffde80 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0056| 0x7fffffffde88 --> 0x60d8b86ed7663d0 [------------------------------------------------------------------------------] Legend: code, data, rodata, value 0x000000000040112f in main () gdb-peda$ [----------------------------------registers-----------------------------------] RAX: 0x0 RBX: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RCX: 0x7ffff7f9e840 --> 0x7ffff7fa0300 --> 0x0 RDX: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") RSI: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RDI: 0x1 RBP: 0x7fffffffde50 --> 0x1 RSP: 0x7fffffffde50 --> 0x1 RIP: 0x401132 (<main+44>: add DWORD PTR [rbp-0x8],0x1) R8 : 0x4011c0 (<__libc_csu_fini>: endbr64) R9 : 0x7ffff7fcfaf0 (<_dl_fini>: push rbp) R10: 0x7ffff7fcb858 --> 0xa00120000000e R11: 0x7ffff7fe1bc0 (<_dl_audit_preinit>: mov eax,DWORD PTR [rip+0x1b292] # 0x7ffff7ffce58 <_rtld_global_ro+888>) R12: 0x0 R13: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") R14: 0x0 R15: 0x7ffff7ffd000 --> 0x7ffff7ffe2c0 --> 0x0 EFLAGS: 0x202 (carry parity adjust zero sign trap INTERRUPT direction overflow) [-------------------------------------code-------------------------------------] 0x40112a <main+36>: jmp 0x401136 <main+48> 0x40112c <main+38>: mov eax,DWORD PTR [rbp-0x8] 0x40112f <main+41>: add DWORD PTR [rbp-0x4],eax => 0x401132 <main+44>: add DWORD PTR [rbp-0x8],0x1 0x401136 <main+48>: mov eax,DWORD PTR [rbp-0x8] 0x401139 <main+51>: cmp eax,DWORD PTR [rbp-0xc] 0x40113c <main+54>: jl 0x40112c <main+38> 0x40113e <main+56>: mov eax,DWORD PTR [rbp-0x4] [------------------------------------stack-------------------------------------] 0000| 0x7fffffffde50 --> 0x1 0008| 0x7fffffffde58 --> 0x7ffff7df26ca (<__libc_start_call_main+122>:mov edi,eax) 0016| 0x7fffffffde60 --> 0x0 0024| 0x7fffffffde68 --> 0x401106 (<main>: endbr64) 0032| 0x7fffffffde70 --> 0x100000000 0040| 0x7fffffffde78 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0048| 0x7fffffffde80 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0056| 0x7fffffffde88 --> 0x60d8b86ed7663d0 [------------------------------------------------------------------------------] Legend: code, data, rodata, value 0x0000000000401132 in main () gdb-peda$ [----------------------------------registers-----------------------------------] RAX: 0x0 RBX: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RCX: 0x7ffff7f9e840 --> 0x7ffff7fa0300 --> 0x0 RDX: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") RSI: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RDI: 0x1 RBP: 0x7fffffffde50 --> 0x1 RSP: 0x7fffffffde50 --> 0x1 RIP: 0x401136 (<main+48>: mov eax,DWORD PTR [rbp-0x8]) R8 : 0x4011c0 (<__libc_csu_fini>: endbr64) R9 : 0x7ffff7fcfaf0 (<_dl_fini>: push rbp) R10: 0x7ffff7fcb858 --> 0xa00120000000e R11: 0x7ffff7fe1bc0 (<_dl_audit_preinit>: mov eax,DWORD PTR [rip+0x1b292] # 0x7ffff7ffce58 <_rtld_global_ro+888>) R12: 0x0 R13: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") R14: 0x0 R15: 0x7ffff7ffd000 --> 0x7ffff7ffe2c0 --> 0x0 EFLAGS: 0x202 (carry parity adjust zero sign trap INTERRUPT direction overflow) [-------------------------------------code-------------------------------------] 0x40112c <main+38>: mov eax,DWORD PTR [rbp-0x8] 0x40112f <main+41>: add DWORD PTR [rbp-0x4],eax 0x401132 <main+44>: add DWORD PTR [rbp-0x8],0x1 => 0x401136 <main+48>: mov eax,DWORD PTR [rbp-0x8] 0x401139 <main+51>: cmp eax,DWORD PTR [rbp-0xc] 0x40113c <main+54>: jl 0x40112c <main+38> 0x40113e <main+56>: mov eax,DWORD PTR [rbp-0x4] 0x401141 <main+59>: pop rbp [------------------------------------stack-------------------------------------] 0000| 0x7fffffffde50 --> 0x1 0008| 0x7fffffffde58 --> 0x7ffff7df26ca (<__libc_start_call_main+122>:mov edi,eax) 0016| 0x7fffffffde60 --> 0x0 0024| 0x7fffffffde68 --> 0x401106 (<main>: endbr64) 0032| 0x7fffffffde70 --> 0x100000000 0040| 0x7fffffffde78 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0048| 0x7fffffffde80 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0056| 0x7fffffffde88 --> 0x60d8b86ed7663d0 [------------------------------------------------------------------------------] Legend: code, data, rodata, value 0x0000000000401136 in main () gdb-peda$ [----------------------------------registers-----------------------------------] RAX: 0x1 RBX: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RCX: 0x7ffff7f9e840 --> 0x7ffff7fa0300 --> 0x0 RDX: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") RSI: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RDI: 0x1 RBP: 0x7fffffffde50 --> 0x1 RSP: 0x7fffffffde50 --> 0x1 RIP: 0x401139 (<main+51>: cmp eax,DWORD PTR [rbp-0xc]) R8 : 0x4011c0 (<__libc_csu_fini>: endbr64) R9 : 0x7ffff7fcfaf0 (<_dl_fini>: push rbp) R10: 0x7ffff7fcb858 --> 0xa00120000000e R11: 0x7ffff7fe1bc0 (<_dl_audit_preinit>: mov eax,DWORD PTR [rip+0x1b292] # 0x7ffff7ffce58 <_rtld_global_ro+888>) R12: 0x0 R13: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") R14: 0x0 R15: 0x7ffff7ffd000 --> 0x7ffff7ffe2c0 --> 0x0 EFLAGS: 0x202 (carry parity adjust zero sign trap INTERRUPT direction overflow) [-------------------------------------code-------------------------------------] 0x40112f <main+41>: add DWORD PTR [rbp-0x4],eax 0x401132 <main+44>: add DWORD PTR [rbp-0x8],0x1 0x401136 <main+48>: mov eax,DWORD PTR [rbp-0x8] => 0x401139 <main+51>: cmp eax,DWORD PTR [rbp-0xc] 0x40113c <main+54>: jl 0x40112c <main+38> 0x40113e <main+56>: mov eax,DWORD PTR [rbp-0x4] 0x401141 <main+59>: pop rbp 0x401142 <main+60>: ret [------------------------------------stack-------------------------------------] 0000| 0x7fffffffde50 --> 0x1 0008| 0x7fffffffde58 --> 0x7ffff7df26ca (<__libc_start_call_main+122>:mov edi,eax) 0016| 0x7fffffffde60 --> 0x0 0024| 0x7fffffffde68 --> 0x401106 (<main>: endbr64) 0032| 0x7fffffffde70 --> 0x100000000 0040| 0x7fffffffde78 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0048| 0x7fffffffde80 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0056| 0x7fffffffde88 --> 0x60d8b86ed7663d0 [------------------------------------------------------------------------------] Legend: code, data, rodata, value 0x0000000000401139 in main () gdb-peda$ [----------------------------------registers-----------------------------------] RAX: 0x1 RBX: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RCX: 0x7ffff7f9e840 --> 0x7ffff7fa0300 --> 0x0 RDX: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") RSI: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RDI: 0x1 RBP: 0x7fffffffde50 --> 0x1 RSP: 0x7fffffffde50 --> 0x1 RIP: 0x40113c (<main+54>: jl 0x40112c <main+38>) R8 : 0x4011c0 (<__libc_csu_fini>: endbr64) R9 : 0x7ffff7fcfaf0 (<_dl_fini>: push rbp) R10: 0x7ffff7fcb858 --> 0xa00120000000e R11: 0x7ffff7fe1bc0 (<_dl_audit_preinit>: mov eax,DWORD PTR [rip+0x1b292] # 0x7ffff7ffce58 <_rtld_global_ro+888>) R12: 0x0 R13: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") R14: 0x0 R15: 0x7ffff7ffd000 --> 0x7ffff7ffe2c0 --> 0x0 EFLAGS: 0x293 (CARRY parity ADJUST zero SIGN trap INTERRUPT direction overflow) [-------------------------------------code-------------------------------------] 0x401132 <main+44>: add DWORD PTR [rbp-0x8],0x1 0x401136 <main+48>: mov eax,DWORD PTR [rbp-0x8] 0x401139 <main+51>: cmp eax,DWORD PTR [rbp-0xc] => 0x40113c <main+54>: jl 0x40112c <main+38> | 0x40113e <main+56>: mov eax,DWORD PTR [rbp-0x4] | 0x401141 <main+59>: pop rbp | 0x401142 <main+60>: ret | 0x401143: cs nop WORD PTR [rax+rax*1+0x0] |-> 0x40112c <main+38>: mov eax,DWORD PTR [rbp-0x8] 0x40112f <main+41>: add DWORD PTR [rbp-0x4],eax 0x401132 <main+44>: add DWORD PTR [rbp-0x8],0x1 0x401136 <main+48>: mov eax,DWORD PTR [rbp-0x8] JUMP is taken [------------------------------------stack-------------------------------------] 0000| 0x7fffffffde50 --> 0x1 0008| 0x7fffffffde58 --> 0x7ffff7df26ca (<__libc_start_call_main+122>:mov edi,eax) 0016| 0x7fffffffde60 --> 0x0 0024| 0x7fffffffde68 --> 0x401106 (<main>: endbr64) 0032| 0x7fffffffde70 --> 0x100000000 0040| 0x7fffffffde78 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0048| 0x7fffffffde80 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0056| 0x7fffffffde88 --> 0x60d8b86ed7663d0 [------------------------------------------------------------------------------] Legend: code, data, rodata, value 0x000000000040113c in main () gdb-peda$ [----------------------------------registers-----------------------------------] RAX: 0x1 RBX: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RCX: 0x7ffff7f9e840 --> 0x7ffff7fa0300 --> 0x0 RDX: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") RSI: 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") RDI: 0x1 RBP: 0x7fffffffde50 --> 0x1 RSP: 0x7fffffffde50 --> 0x1 RIP: 0x40112c (<main+38>: mov eax,DWORD PTR [rbp-0x8]) R8 : 0x4011c0 (<__libc_csu_fini>: endbr64) R9 : 0x7ffff7fcfaf0 (<_dl_fini>: push rbp) R10: 0x7ffff7fcb858 --> 0xa00120000000e R11: 0x7ffff7fe1bc0 (<_dl_audit_preinit>: mov eax,DWORD PTR [rip+0x1b292] # 0x7ffff7ffce58 <_rtld_global_ro+888>) R12: 0x0 R13: 0x7fffffffdf78 --> 0x7fffffffe2d8 ("COLORFGBG=15;0") R14: 0x0 R15: 0x7ffff7ffd000 --> 0x7ffff7ffe2c0 --> 0x0 EFLAGS: 0x293 (CARRY parity ADJUST zero SIGN trap INTERRUPT direction overflow) [-------------------------------------code-------------------------------------] 0x40111c <main+22>: mov DWORD PTR [rbp-0xc],0x25f 0x401123 <main+29>: mov DWORD PTR [rbp-0x8],0x0 0x40112a <main+36>: jmp 0x401136 <main+48> => 0x40112c <main+38>: mov eax,DWORD PTR [rbp-0x8] 0x40112f <main+41>: add DWORD PTR [rbp-0x4],eax 0x401132 <main+44>: add DWORD PTR [rbp-0x8],0x1 0x401136 <main+48>: mov eax,DWORD PTR [rbp-0x8] 0x401139 <main+51>: cmp eax,DWORD PTR [rbp-0xc] [------------------------------------stack-------------------------------------] 0000| 0x7fffffffde50 --> 0x1 0008| 0x7fffffffde58 --> 0x7ffff7df26ca (<__libc_start_call_main+122>:mov edi,eax) 0016| 0x7fffffffde60 --> 0x0 0024| 0x7fffffffde68 --> 0x401106 (<main>: endbr64) 0032| 0x7fffffffde70 --> 0x100000000 0040| 0x7fffffffde78 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0048| 0x7fffffffde80 --> 0x7fffffffdf68 --> 0x7fffffffe2bc ("/home/kali/code/debugger0_b") 0056| 0x7fffffffde88 --> 0x60d8b86ed7663d0 [------------------------------------------------------------------------------] Legend: code, data, rodata, value 0x000000000040112c in main () (then I gave up) ```