Skip to content

Instantly share code, notes, and snippets.

View Cee's full-sized avatar
πŸŽ€
ハネだ (<ゝω·)β˜†

Tianyu Wang Cee

πŸŽ€
ハネだ (<ゝω·)β˜†
View GitHub Profile
@Cee
Cee / Getbuf.c
Created July 30, 2014 16:28
Getbuf
unsigned long long getbuf() {
char buf[36];
volatile char* variable_length;
int i;
unsigned long long val = (unsigned long long)Gets(buf);
variable_length = alloca((val % 40) < 36 ? 36 : val % 40);
for(i = 0; i < 36; i++) {
variable_length[i] = buf[i];
}
return val % 40;
@Cee
Cee / fun7.asm
Created July 29, 2014 17:16
fun7
0x000000000040111c <+0>: sub $0x8,%rsp
0x0000000000401120 <+4>: test %rdi,%rdi
0x0000000000401123 <+7>: je 0x401150 <fun7+52>
0x0000000000401125 <+9>: mov (%rdi),%edx
0x0000000000401127 <+11>: cmp %esi,%edx
0x0000000000401129 <+13>: jle 0x401138 <fun7+28>
0x000000000040112b <+15>: mov 0x8(%rdi),%rdi
0x000000000040112f <+19>: callq 0x40111c <fun7>
0x0000000000401134 <+24>: add %eax,%eax
0x0000000000401136 <+26>: jmp 0x401155 <fun7+57>
@Cee
Cee / secret_phase.asm
Created July 29, 2014 17:15
secret_phase
0x000000000040115a <+0>: push %rbx
0x000000000040115b <+1>: callq 0x40165f <read_line>
0x0000000000401160 <+6>: mov $0xa,%edx
0x0000000000401165 <+11>: mov $0x0,%esi
0x000000000040116a <+16>: mov %rax,%rdi
0x000000000040116d <+19>: callq 0x400b80 <strtol@plt>
0x0000000000401172 <+24>: mov %eax,%ebx
0x0000000000401174 <+26>: lea -0x1(%rbx),%eax
0x0000000000401177 <+29>: cmp $0x3e8,%eax
0x000000000040117c <+34>: jbe 0x401183 <secret_phase+41>
@Cee
Cee / phase_defused.asm
Created July 29, 2014 17:12
phase_defused
0x0000000000401785 <+0>: sub $0x68,%rsp
0x0000000000401789 <+4>: cmpl $0x6,0x2014f0(%rip) # 0x602c80 <num_input_strings>
0x0000000000401790 <+11>: jne 0x4017f0 <phase_defused+107>
0x0000000000401792 <+13>: lea 0x10(%rsp),%rcx
0x0000000000401797 <+18>: lea 0xc(%rsp),%rdx
0x000000000040179c <+23>: mov $0x401ec4,%esi
0x00000000004017a1 <+28>: mov $0x603030,%edi
0x00000000004017a6 <+33>: mov $0x0,%eax
0x00000000004017ab <+38>: callq 0x400ab0 <__isoc99_sscanf@plt>
0x00000000004017b0 <+43>: cmp $0x2,%eax
@Cee
Cee / fun6.asm
Created July 26, 2014 13:04
fun6
0x000000000040106f <+0>: mov 0x8(%rdi),%r8
0x0000000000401073 <+4>: movq $0x0,0x8(%rdi)
0x000000000040107b <+12>: mov %rdi,%rax
0x000000000040107e <+15>: mov %rdi,%rcx
0x0000000000401081 <+18>: test %r8,%r8
0x0000000000401084 <+21>: jne 0x4010c6 <fun6+87>
0x0000000000401086 <+23>: mov %rdi,%rax
0x0000000000401089 <+26>: retq
0x000000000040108a <+27>: mov %rdx,%rcx
0x000000000040108d <+30>: mov 0x8(%rcx),%rdx
@Cee
Cee / phase_6.asm
Created July 26, 2014 08:31
phase_6
0x00000000004010d9 <+0>: sub $0x8,%rsp
0x00000000004010dd <+4>: mov $0xa,%edx
0x00000000004010e2 <+9>: mov $0x0,%esi
0x00000000004010e7 <+14>: callq 0x400b80 <strtol@plt>
0x00000000004010ec <+19>: mov %eax,0x20168e(%rip) # 0x602780 <node0>
0x00000000004010f2 <+25>: mov $0x602780,%edi
0x00000000004010f7 <+30>: callq 0x40106f <fun6>
0x00000000004010fc <+35>: mov 0x8(%rax),%rax
0x0000000000401100 <+39>: mov 0x8(%rax),%rax
0x0000000000401104 <+43>: mov 0x8(%rax),%rax
@Cee
Cee / phase_5.asm
Created July 26, 2014 07:51
phase_5
0x0000000000401002 <+0>: sub $0x18,%rsp
0x0000000000401006 <+4>: lea 0x8(%rsp),%rcx
0x000000000040100b <+9>: lea 0xc(%rsp),%rdx
0x0000000000401010 <+14>: mov $0x401ebe,%esi
0x0000000000401015 <+19>: mov $0x0,%eax
0x000000000040101a <+24>: callq 0x400ab0 <__isoc99_sscanf@plt>
0x000000000040101f <+29>: cmp $0x1,%eax
0x0000000000401022 <+32>: jg 0x401029 <phase_5+39>
0x0000000000401024 <+34>: callq 0x40163d <explode_bomb>
0x0000000000401029 <+39>: mov 0xc(%rsp),%eax
@Cee
Cee / func4.asm
Created July 26, 2014 07:40
func4
0x0000000000400f84 <+0>: mov %rbx,-0x10(%rsp)
0x0000000000400f89 <+5>: mov %rbp,-0x8(%rsp)
0x0000000000400f8e <+10>: sub $0x18,%rsp
0x0000000000400f92 <+14>: mov %edi,%ebx
0x0000000000400f94 <+16>: mov $0x1,%eax
0x0000000000400f99 <+21>: cmp $0x1,%edi
0x0000000000400f9c <+24>: jle 0x400fb2 <func4+46>
0x0000000000400f9e <+26>: lea -0x1(%rbx),%edi
0x0000000000400fa1 <+29>: callq 0x400f84 <func4>
0x0000000000400fa6 <+34>: mov %eax,%ebp
@Cee
Cee / phase_4.asm
Created July 26, 2014 07:11
phase_4
0x0000000000400fc1 <+0>: sub $0x18,%rsp
0x0000000000400fc5 <+4>: lea 0xc(%rsp),%rdx
0x0000000000400fca <+9>: mov $0x401ec1,%esi
0x0000000000400fcf <+14>: mov $0x0,%eax
0x0000000000400fd4 <+19>: callq 0x400ab0 <__isoc99_sscanf@plt>
0x0000000000400fd9 <+24>: cmp $0x1,%eax
0x0000000000400fdc <+27>: jne 0x400fe5 <phase_4+36>
0x0000000000400fde <+29>: cmpl $0x0,0xc(%rsp)
0x0000000000400fe3 <+34>: jg 0x400fea <phase_4+41>
0x0000000000400fe5 <+36>: callq 0x40163d <explode_bomb>
@Cee
Cee / phase_3.asm
Created July 26, 2014 06:55
phase_3
0x0000000000400ef9 <+0>: sub $0x18,%rsp
0x0000000000400efd <+4>: lea 0x8(%rsp),%rcx
0x0000000000400f02 <+9>: lea 0xc(%rsp),%rdx
0x0000000000400f07 <+14>: mov $0x401ebe,%esi
0x0000000000400f0c <+19>: mov $0x0,%eax
0x0000000000400f11 <+24>: callq 0x400ab0 <__isoc99_sscanf@plt>
0x0000000000400f16 <+29>: cmp $0x1,%eax
0x0000000000400f19 <+32>: jg 0x400f20 <phase_3+39>
0x0000000000400f1b <+34>: callq 0x40163d <explode_bomb>
0x0000000000400f20 <+39>: cmpl $0x7,0xc(%rsp)