This is the bomb lab and i am stuck on phase six, here is the assemble code i cant figure out the order please help Dump of assembler code for function phase 6 0x00000000000018a7 endbr64 0x00000000000018ab push r14 0x00000000000018ad push r13 0x00000000000018af push r12 0x00000000000018b1 push rbp 0x00000000000018b2 push rbx 0x00000000000018b3 sub $0x60, rsp 0x00000000000018b7 mov fs 0x28, rax 0x00000000000018c0 mov rax,0x58( rsp) 0x00000000000018c5 xor eax, eax 0x00000000000018c7 mov rsp, r13 0x00000000000018ca mov r13, rsi 0x00000000000018cd call 0x1e4f 0x00000000000018d2 mov $0x1, r14d 0x00000000000018d8 mov rsp, r12 0x00000000000018db jmp 0x1905 0x00000000000018dd call 0x1e0d 0x00000000000018e2 jmp 0x1914 0x00000000000018e4 add $0x1, rbx 0x00000000000018e8 cmp $0x5, ebx 0x00000000000018eb jg 0x18fd 0x00000000000018ed mov ( r12, rbx,4), eax 0x00000000000018f1 cmp eax,0x0( rbp) 0x00000000000018f4 jne 0x18e4 0x00000000000018f6 call 0x1e0d 0x00000000000018fb jmp 0x18e4 0x00000000000018fd add $0x1, r14 Type for more, q to quit, c to continue without paging 0x0000000000001905 mov r13, rbp 0x0000000000001908 mov 0x0( r13), eax 0x000000000000190c sub $0x1, eax 0x000000000000190f cmp $0x5, eax 0x0000000000001912 ja 0x18dd 0x0000000000001914 cmp $0x5, r14d 0x0000000000001918 jg 0x191f 0x000000000000191a mov r14, rbx 0x000000000000191d jmp 0x18ed 0x000000000000191f mov $0x0, esi 0x0000000000001924 mov ( rsp, rsi,4), ecx 0x0000000000001927 mov $0x1, eax 0x000000000000192c lea 0x38ed( rip), rdx 0x5220 0x0000000000001933 cmp $0x1, ecx 0x0000000000001936 jle 0x1943 0x0000000000001938 mov 0x8( rdx), rdx 0x000000000000193c add $0x1, eax 0x000000000000193f cmp ecx, eax 0x0000000000001941 jne 0x1938 0x0000000000001943 mov rdx,0x20( rsp, rsi,8) 0x0000000000001948 add $0x1, rsi 0x000000000000194c cmp $0x6, rsi 0x0000000000001950 jne 0x1924 0x0000000000001952 mov 0x20( rsp), rbx 0x0000000000001957 mov 0x28( rsp), rax 0x000000000000195c mov rax,0x8( rbx) 0x0000000000001960 mov 0x30( rsp), rdx 0x0000000000001965 mov rdx,0x8( rax) 0x0000000000001969 mov 0x38( rsp), rax 0x000000000000196e mov rax,0x8( rdx) 0x0000000000001972 mov 0x40( rsp), rdx Type for more, q to quit, c to continue without paging 0x0000000000001977 mov rdx,0x8( rax) 0x000000000000197b mov 0x48( rsp), rax 0x0000000000001980 mov rax,0x8( rdx) 0x0000000000001984 movq $0x0,0x8( rax) 0x000000000000198c mov $0x5, ebp 0x0000000000001991 jmp 0x199c 0x0000000000001993 mov 0x8( rbx), rbx 0x0000000000001997 sub $0x1, ebp 0x000000000000199a je 0x19ad 0x000000000000199c mov 0x8( rbx), rax 0x00000000000019a0 mov ( rax), eax 0x00000000000019a2 cmp eax,( rbx) 0x00000000000019a4 jle 0x1993 0x00000000000019a6 call 0x1e0d 0x00000000000019ab jmp 0x1993 0x00000000000019ad mov 0x58( rsp), rax 0x00000000000019b2 xor fs 0x28, rax 0x00000000000019bb jne 0x19ca 0x00000000000019bd add $0x60, rsp 0x00000000000019c1 pop rbx 0x00000000000019c2 pop rbp 0x00000000000019c3 pop r12 0x00000000000019c5 pop r13 0x00000000000019c7 pop r14 0x00000000000019c9 ret 0x00000000000019ca call 0x1250 End of assembler dump

The Answer is in the image, click to view ...

Answered step by step

Verified Expert Solution

Link Copied!

Question

1 Approved Answer

Posted on Sep 24, 2024

This is the bomb lab and i am stuck on phase six, here is the assemble code i cant figure out the order please help

Dump of assembler code for function phase_6: 0x00000000000018a7 <+0>: endbr64 0x00000000000018ab <+4>: push %r14 0x00000000000018ad <+6>: push %r13 0x00000000000018af <+8>: push %r12 0x00000000000018b1 <+10>: push %rbp 0x00000000000018b2 <+11>: push %rbx 0x00000000000018b3 <+12>: sub $0x60,%rsp 0x00000000000018b7 <+16>: mov %fs:0x28,%rax 0x00000000000018c0 <+25>: mov %rax,0x58(%rsp) 0x00000000000018c5 <+30>: xor %eax,%eax 0x00000000000018c7 <+32>: mov %rsp,%r13 0x00000000000018ca <+35>: mov %r13,%rsi 0x00000000000018cd <+38>: call 0x1e4f 0x00000000000018d2 <+43>: mov $0x1,%r14d 0x00000000000018d8 <+49>: mov %rsp,%r12 0x00000000000018db <+52>: jmp 0x1905 0x00000000000018dd <+54>: call 0x1e0d 0x00000000000018e2 <+59>: jmp 0x1914 0x00000000000018e4 <+61>: add $0x1,%rbx 0x00000000000018e8 <+65>: cmp $0x5,%ebx 0x00000000000018eb <+68>: jg 0x18fd 0x00000000000018ed <+70>: mov (%r12,%rbx,4),%eax 0x00000000000018f1 <+74>: cmp %eax,0x0(%rbp) 0x00000000000018f4 <+77>: jne 0x18e4 0x00000000000018f6 <+79>: call 0x1e0d 0x00000000000018fb <+84>: jmp 0x18e4 0x00000000000018fd <+86>: add $0x1,%r14 --Type for more, q to quit, c to continue without paging-- 0x0000000000001905 <+94>: mov %r13,%rbp 0x0000000000001908 <+97>: mov 0x0(%r13),%eax 0x000000000000190c <+101>: sub $0x1,%eax 0x000000000000190f <+104>: cmp $0x5,%eax 0x0000000000001912 <+107>: ja 0x18dd 0x0000000000001914 <+109>: cmp $0x5,%r14d 0x0000000000001918 <+113>: jg 0x191f 0x000000000000191a <+115>: mov %r14,%rbx 0x000000000000191d <+118>: jmp 0x18ed 0x000000000000191f <+120>: mov $0x0,%esi 0x0000000000001924 <+125>: mov (%rsp,%rsi,4),%ecx 0x0000000000001927 <+128>: mov $0x1,%eax 0x000000000000192c <+133>: lea 0x38ed(%rip),%rdx # 0x5220 0x0000000000001933 <+140>: cmp $0x1,%ecx 0x0000000000001936 <+143>: jle 0x1943 0x0000000000001938 <+145>: mov 0x8(%rdx),%rdx 0x000000000000193c <+149>: add $0x1,%eax 0x000000000000193f <+152>: cmp %ecx,%eax 0x0000000000001941 <+154>: jne 0x1938 0x0000000000001943 <+156>: mov %rdx,0x20(%rsp,%rsi,8) 0x0000000000001948 <+161>: add $0x1,%rsi 0x000000000000194c <+165>: cmp $0x6,%rsi 0x0000000000001950 <+169>: jne 0x1924 0x0000000000001952 <+171>: mov 0x20(%rsp),%rbx 0x0000000000001957 <+176>: mov 0x28(%rsp),%rax 0x000000000000195c <+181>: mov %rax,0x8(%rbx) 0x0000000000001960 <+185>: mov 0x30(%rsp),%rdx 0x0000000000001965 <+190>: mov %rdx,0x8(%rax) 0x0000000000001969 <+194>: mov 0x38(%rsp),%rax 0x000000000000196e <+199>: mov %rax,0x8(%rdx) 0x0000000000001972 <+203>: mov 0x40(%rsp),%rdx --Type for more, q to quit, c to continue without paging-- 0x0000000000001977 <+208>: mov %rdx,0x8(%rax) 0x000000000000197b <+212>: mov 0x48(%rsp),%rax 0x0000000000001980 <+217>: mov %rax,0x8(%rdx) 0x0000000000001984 <+221>: movq $0x0,0x8(%rax) 0x000000000000198c <+229>: mov $0x5,%ebp 0x0000000000001991 <+234>: jmp 0x199c 0x0000000000001993 <+236>: mov 0x8(%rbx),%rbx 0x0000000000001997 <+240>: sub $0x1,%ebp 0x000000000000199a <+243>: je 0x19ad 0x000000000000199c <+245>: mov 0x8(%rbx),%rax 0x00000000000019a0 <+249>: mov (%rax),%eax 0x00000000000019a2 <+251>: cmp %eax,(%rbx) 0x00000000000019a4 <+253>: jle 0x1993 0x00000000000019a6 <+255>: call 0x1e0d 0x00000000000019ab <+260>: jmp 0x1993 0x00000000000019ad <+262>: mov 0x58(%rsp),%rax 0x00000000000019b2 <+267>: xor %fs:0x28,%rax 0x00000000000019bb <+276>: jne 0x19ca 0x00000000000019bd <+278>: add $0x60,%rsp 0x00000000000019c1 <+282>: pop %rbx 0x00000000000019c2 <+283>: pop %rbp 0x00000000000019c3 <+284>: pop %r12 0x00000000000019c5 <+286>: pop %r13 0x00000000000019c7 <+288>: pop %r14 0x00000000000019c9 <+290>: ret 0x00000000000019ca <+291>: call 0x1250 <__stack_chk_fail@plt> End of assembler dump.