CodeJitsu targetted Shellphish running NRFIN_00052 in round 74.

---

Type 1 POV

eip:0xe800004 - edi:0x60ac6c20

---

The application exited with a segmentation fault

0x804aa8d: 0x804aa8d // esp: 0xbaaaaa04

---

Execution control corruption via return (return to: 0xbaaaaa04).

Tracing data from eip: 0x804aa8d tracing source of memory: 0xbaaaaa04 (value: 0xe800004)

0x804a9de : receive syscall (return)
0x804aa74 : mov ecx,dword ptr [edx]
0x804aa8a : mov dword ptr [esp],ecx
0x804aa8d: ret // address: 0xbaaaaa04 value: 0xe800004

---

Negotiated general register: edi:0x60ac6c20

Tracing data from eip: 0x804aa8d tracing source of register: edi (value: 0x60ac6c20)

0x804a9de : receive syscall (return)
0x804aa82 : mov edi,dword ptr [edx+0x14]
0x804aa8d: ret // address: edi value: 0x60ac6c20