Shellphish targetted Disekt running NRFIN_00059 in round 48.

---

Type 2 POV

Reading from protected address: 0x4347c000

0x804a63c : mov dl,byte ptr [ecx+eax]

Tracing data from eip: 0x804a63c tracing source of register: ecx (value: 0x4347c000)

0x804a8bf : cgc loader
0x8049204 : mov esi,dword ptr [0x804be50]
0x804920a : add esi,edx
0x804920f : mov dword ptr [esp+0x4],esi
0x804a5f9 : mov ecx,dword ptr [ebp+0xc]
0x804a607 : mov dword ptr [ebp-0x10],ecx
0x804a613 : mov eax,dword ptr [ebp-0x10]
0x804a616 : mov dword ptr [ebp-0x1c],eax
0x804a639 : mov ecx,dword ptr [ebp-0x1c]
0x804a63c: mov dl,byte ptr [ecx+eax] // address: ecx value: 0x4347c000