ForAllSecure targetted DeepRed running NRFIN_00052 in round 95.

---

Type 1 POV

eip:0xd58a1173 - eax:0x548798ba

---

Execution control corruption via return (return to: 0x8060e44).

Tracing data from eip: 0x804aabd tracing source of memory: 0x8060e44 (value: 0xd58a1173)

0x804a9de : receive syscall (return)
0x8049368 : mov dl,byte ptr [eax+ecx]
0x8049371 : mov byte ptr [eax+ecx],dl
0x804aabd: ret // address: 0x8060e44 value: 0xd58a1173

---

Negotiated general register: eax:0x548798ba

Tracing data from eip: 0x804aabd tracing source of register: eax (value: 0x548798ba)

0x804a9de : receive syscall (return)
0x8049368 : mov dl,byte ptr [eax+ecx]
0x8049371 : mov byte ptr [eax+ecx],dl
0x804aabc : pop eax
0x804aabd: ret // address: eax value: 0x548798ba