I am trying to analyze a crackme file.
When I open it with
gdb, I firstly set its
SIGTRAP handler with, e.g.,
int80.SIGTRAP handler address
I caught it through
catch syscall signal in
gdb. And, there are some traps in the application, some
0x80abcde - int3
gdbinit file is set like this:
b * 0x80abcde commands 1 call (void)0x8011111(5) continue end
Is this okay for emulation or do I need to still push the calling address on the stack ?