Question: Defuse the binary bomb. Each student will be provided a unique executable ( A 4 Q 2 x . exe ) . Each executable will

Defuse the binary bomb. Each student will be provided a unique executable (A4Q2 x.exe). Each executable will require a password to defuse the bomb. You will need to use the debugger to disassemble the executable, and use traces and memory dumps to find the password. However, the password is also encoded! Therefore, you must not only find where the password is stored in memory, but also decode the password to defuse the bomb.
In a word document, please provide the following information:
(15 marks) The password of your exercise
(5 marks) The effective address at which the first character of the password is located. In the debuger, the memory address is in hexadecimal. Please submit the memory address in decimal (it should be a number between 60 and 90).
Hints:
Beforetryingtodefusethebinarybomb,thinkabouthowyouwouldstoreapasswordinanassemblyprogram and compare it with user input. This will help you narrow down a set of instructions to look for while tracing through the program.
You may assume that the password will contain only numbers and / or letters. It will not contain any special characters (!,,% etc.)
When debugging a file, remember that to trace the code, you need to use the command t
>T (trace [num]) execute num instructions and view CPU registers and flags before the instruction starts
In the debuger, you will need to use the command u, which allows viewing the assembly code instructions in the code segment. From there, you might try to figure out where the buffered string input by the user is stored and against which characters (which address) are compared.
>U (unassemble [num]) View the assembly code instructions in the code segment with offset address num
Recall to use the command d to visualize what is in memory and at what address. >D (dump [num]) view contents of data segment from address DS:num
this is A4Q2_16.exe:
00004D5A41010200020020000000FFFF0700MZA............
001064002BAC00000E001E00000001000100d.+.............
00200E0006000E0000000000000000000000................
003000000000000000000000000000000000................
004000000000000000000000000000000000................
005000000000000000000000000000000000................
006000000000000000000000000000000000................
007000000000000000000000000000000000................
008000000000000000000000000000000000................
009000000000000000000000000000000000................
00A000000000000000000000000000000000................
00B000000000000000000000000000000000................
00C000000000000000000000000000000000................
00D000000000000000000000000000000000................
00E000000000000000000000000000000000................
00F000000000000000000000000000000000................
010000000000000000000000000000000000................
011000000000000000000000000000000000................
012000000000000000000000000000000000................
013000000000000000000000000000000000.............

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Programming Questions!