segment_2.1:0...7f454c460... Elf64_Ehdr ;= |_segment_2.1:0...e_ident_m... db 7Fh |_segment_2.1:0...e_ident_m... ds "ELF" |_segment_2.1:0...e_ident_c... db 2h |_segment_2.1:0...e_ident_data db 1h |_segment_2.1:0...e_ident_v... db 1h |_segment_2.1:0...e_ident_pad db[9] |_segment_2.1:0...[0] db 0h |_segment_2.1:0...[1] db 0h |_segment_2.1:0...[2] db 0h |_segment_2.1:0...[3] db 0h |_segment_2.1:0...[4] db 0h |_segment_2.1:0...[5] db 0h |_segment_2.1:0...[6] db 0h |_segment_2.1:0...[7] db 0h |_segment_2.1:0...[8] db 0h |_segment_2.1:0...e_type dw 2h |_segment_2.1:0...e_machine dw 3Eh |_segment_2.1:0...e_version ddw 1h |_segment_2.1:0...e_entry dq .text:entry |_segment_2.1:0...e_phoff dq Elf64_Phdr_ARRAY_00400040 |_segment_2.1:0...e_shoff dq _elfSectionHeaders:Elf64_Shdr_ARRAY__... |_segment_2.1:0...e_flags ddw 0h |_segment_2.1:0...e_ehsize dw 40h |_segment_2.1:0...e_phentsize dw 38h |_segment_2.1:0...e_phnum dw 9h |_segment_2.1:0...e_shentsize dw 40h |_segment_2.1:0...e_shnum dw 1Ch |_segment_2.1:0...e_shstrndx dw 1Bh Elf64_Phdr_ARRAY_00400040: ;XREF[2,0]: 00400020,00400050 segment_2.1:0...060000000... Elf64_Ph... ;PT_PHDR - Program header table |_segment_2.1:0...[0] Elf64_Phdr |_segment_2.1:0...p_type Elf_Prog...PT_PHDR |_segment_2.1:0...p_flags ddw 5h |_segment_2.1:0...p_offset dq 40h |_segment_2.1:0...p_vaddr dq Elf64_Phdr_ARRAY_00400040 |_segment_2.1:0...p_paddr dq 400040h |_segment_2.1:0...p_filesz dq 1F8h |_segment_2.1:0...p_memsz dq 1F8h |_segment_2.1:0...p_align dq 8h |_segment_2.1:0...[1] Elf64_Phdr |_segment_2.1:0...p_type Elf_Prog...PT_INTERP |_segment_2.1:0...p_flags ddw 4h |_segment_2.1:0...p_offset dq 238h |_segment_2.1:0...p_vaddr dq .interp:s_/lib64/ld-linux-x86-64.so.2... |_segment_2.1:0...p_paddr dq 400238h |_segment_2.1:0...p_filesz dq 1Ch |_segment_2.1:0...p_memsz dq 1Ch |_segment_2.1:0...p_align dq 1h |_segment_2.1:0...[2] Elf64_Phdr |_segment_2.1:0...p_type Elf_Prog...PT_LOAD |_segment_2.1:0...p_flags ddw 5h |_segment_2.1:0...p_offset dq 0h |_segment_2.1:0...p_vaddr dq 400000h |_segment_2.1:0...p_paddr dq 400000h |_segment_2.1:0...p_filesz dq 2BECh |_segment_2.1:0...p_memsz dq 2BECh |_segment_2.1:0...p_align dq 200000h |_segment_2.1:0...[3] Elf64_Phdr |_segment_2.1:0...p_type Elf_Prog...PT_LOAD |_segment_2.1:0...p_flags ddw 6h |_segment_2.1:0...p_offset dq 2E10h |_segment_2.1:0...p_vaddr dq .init_array:__DT_INIT_ARRAY |_segment_2.1:0...p_paddr dq 602E10h |_segment_2.1:0...p_filesz dq 4E7h |_segment_2.1:0...p_memsz dq 6C8h |_segment_2.1:0...p_align dq 200000h |_segment_2.1:0...[4] Elf64_Phdr |_segment_2.1:0...p_type Elf_Prog...PT_DYNAMIC |_segment_2.1:0...p_flags ddw 6h |_segment_2.1:0...p_offset dq 2E28h |_segment_2.1:0...p_vaddr dq .dynamic:_DYNAMIC |_segment_2.1:0...p_paddr dq 602E28h |_segment_2.1:0...p_filesz dq 1D0h |_segment_2.1:0...p_memsz dq 1D0h |_segment_2.1:0...p_align dq 8h |_segment_2.1:0...[5] Elf64_Phdr |_segment_2.1:0...p_type Elf_Prog...PT_NOTE |_segment_2.1:0...p_flags ddw 4h |_segment_2.1:0...p_offset dq 254h |_segment_2.1:0...p_vaddr dq .note.ABI-tag:DAT_00400254 |_segment_2.1:0...p_paddr dq 400254h |_segment_2.1:0...p_filesz dq 44h |_segment_2.1:0...p_memsz dq 44h |_segment_2.1:0...p_align dq 4h |_segment_2.1:0...[6] Elf64_Phdr |_segment_2.1:0...p_type Elf_Prog...PT_GNU_EH_FRAME |_segment_2.1:0...p_flags ddw 4h |_segment_2.1:0...p_offset dq 293Ch |_segment_2.1:0...p_vaddr dq .eh_frame_hdr:eh_frame_hdr_0040293c |_segment_2.1:0...p_paddr dq 40293Ch |_segment_2.1:0...p_filesz dq 84h |_segment_2.1:0...p_memsz dq 84h |_segment_2.1:0...p_align dq 4h |_segment_2.1:0...[7] Elf64_Phdr |_segment_2.1:0...p_type Elf_Prog...PT_GNU_STACK |_segment_2.1:0...p_flags ddw 6h |_segment_2.1:0...p_offset dq 0h |_segment_2.1:0...p_vaddr dq 0h |_segment_2.1:0...p_paddr dq 0h |_segment_2.1:0...p_filesz dq 0h |_segment_2.1:0...p_memsz dq 0h |_segment_2.1:0...p_align dq 10h |_segment_2.1:0...[8] Elf64_Phdr |_segment_2.1:0...p_type Elf_Prog...PT_GNU_RELRO |_segment_2.1:0...p_flags ddw 4h |_segment_2.1:0...p_offset dq 2E10h |_segment_2.1:0...p_vaddr dq .init_array:__DT_INIT_ARRAY |_segment_2.1:0...p_paddr dq 602E10h |_segment_2.1:0...p_filesz dq 1F0h |_segment_2.1:0...p_memsz dq 1F0h |_segment_2.1:0...p_align dq 1h s_/lib64/ld-linux-x86-64.so...;XREF[2,0]: 00400088,_elfSectionHeaders::00000050 .interp:004002382f6c69623... ds "/lib64/ld-linux-x86-64.so.2" ;Initial Elf program interpreter DAT_00400254: ;XREF[2,0]: 00400168,_elfSectionHeaders::00000090 .note.ABI-tag...04 ?? 04h .note.ABI-tag...00 ?? 00h .note.ABI-tag...00 ?? 00h .note.ABI-tag...00 ?? 00h .note.ABI-tag...10 ?? 10h .note.ABI-tag...00 ?? 00h .note.ABI-tag...00 ?? 00h .note.ABI-tag...00 ?? 00h .note.ABI-tag...01 ?? 01h .note.ABI-tag...00 ?? 00h .note.ABI-tag...00 ?? 00h .note.ABI-tag...00 ?? 00h .note.ABI-tag...47 ?? 47h G .note.ABI-tag...4e ?? 4Eh N .note.ABI-tag...55 ?? 55h U .note.ABI-tag...00 ?? 00h .note.ABI-tag...00 ?? 00h .note.ABI-tag...00 ?? 00h .note.ABI-tag...00 ?? 00h .note.ABI-tag...00 ?? 00h .note.ABI-tag...02 ?? 02h .note.ABI-tag...00 ?? 00h .note.ABI-tag...00 ?? 00h .note.ABI-tag...00 ?? 00h .note.ABI-tag...06 ?? 06h .note.ABI-tag...00 ?? 00h .note.ABI-tag...00 ?? 00h .note.ABI-tag...00 ?? 00h .note.ABI-tag...20 ?? 20h .note.ABI-tag...00 ?? 00h .note.ABI-tag...00 ?? 00h .note.ABI-tag...00 ?? 00h DAT_00400274: ;XREF[1,0]: _elfSectionHeaders::000000d0 .note.gnu.bui...04 ?? 04h .note.gnu.bui...00 ?? 00h .note.gnu.bui...00 ?? 00h .note.gnu.bui...00 ?? 00h .note.gnu.bui...14 ?? 14h .note.gnu.bui...00 ?? 00h .note.gnu.bui...00 ?? 00h .note.gnu.bui...00 ?? 00h .note.gnu.bui...03 ?? 03h .note.gnu.bui...00 ?? 00h .note.gnu.bui...00 ?? 00h .note.gnu.bui...00 ?? 00h .note.gnu.bui...47 ?? 47h G .note.gnu.bui...4e ?? 4Eh N .note.gnu.bui...55 ?? 55h U .note.gnu.bui...00 ?? 00h .note.gnu.bui...96 ?? 96h .note.gnu.bui...cf ?? CFh .note.gnu.bui...f3 ?? F3h .note.gnu.bui...b0 ?? B0h .note.gnu.bui...1c ?? 1Ch .note.gnu.bui...9f ?? 9Fh .note.gnu.bui...14 ?? 14h .note.gnu.bui...6e ?? 6Eh n .note.gnu.bui...93 ?? 93h .note.gnu.bui...fb ?? FBh .note.gnu.bui...7d ?? 7Dh } .note.gnu.bui...11 ?? 11h .note.gnu.bui...79 ?? 79h y .note.gnu.bui...7d ?? 7Dh } .note.gnu.bui...04 ?? 04h .note.gnu.bui...bd ?? BDh .note.gnu.bui...48 ?? 48h H .note.gnu.bui...03 ?? 03h .note.gnu.bui...82 ?? 82h .note.gnu.bui...fd ?? FDh __DT_GNU_HASH: ;XREF[2,0]: 00602ea0,_elfSectionHeaders::00000110 .gnu.hash:004...02000000 ddw 2h ;GNU Hash Table - nbucket .gnu.hash:004...22000000 ddw 22h ;GNU Hash Table - symbase .gnu.hash:004...01000000 ddw 1h ;GNU Hash Table - bloom_size .gnu.hash:004...06000000 ddw 6h ;GNU Hash Table - bloom_shift .gnu.hash:004...000401000... dq[1] ;GNU Hash Table - bloom |_.gnu.hash:004...[0] dq C000000010400h .gnu.hash:004...220000002... ddw[2] ;GNU Hash Table - chains |_.gnu.hash:004...[0] ddw 22h |_.gnu.hash:004...[1] ddw 23h .gnu.hash:004...b3a2f7123... ddw[2] ;GNU Hash Table - chain |_.gnu.hash:004...[0] ddw 12F7A2B3h |_.gnu.hash:004...[1] ddw 12F7C433h __DT_SYMTAB: ;XREF[2,0]: 00602ec0,_elfSectionHeaders::00000150 .dynsym:004002c0000000000... Elf64_Sy... |_.dynsym:004002c0[0] Elf64_Sym |_.dynsym:004002c0st_name ddw 0h |_.dynsym:004002c4st_info db 0h |_.dynsym:004002c5st_other db 0h |_.dynsym:004002c6st_shndx dw 0h |_.dynsym:004002c8st_value dq 0h |_.dynsym:004002d0st_size dq 0h |_.dynsym:004002d8[1] Elf64_Sym |_.dynsym:004002d8st_name ddw AFh |_.dynsym:004002dcst_info db 12h |_.dynsym:004002ddst_other db 0h |_.dynsym:004002dest_shndx dw 0h |_.dynsym:004002e0st_value dq 0h |_.dynsym:004002e8st_size dq 0h |_.dynsym:004002f0[2] Elf64_Sym |_.dynsym:004002f0st_name ddw E1h |_.dynsym:004002f4st_info db 12h |_.dynsym:004002f5st_other db 0h |_.dynsym:004002f6st_shndx dw 0h |_.dynsym:004002f8st_value dq 0h |_.dynsym:00400300st_size dq 0h |_.dynsym:00400308[3] Elf64_Sym |_.dynsym:00400308st_name ddw 38h |_.dynsym:0040030cst_info db 12h |_.dynsym:0040030dst_other db 0h |_.dynsym:0040030est_shndx dw 0h |_.dynsym:00400310st_value dq 0h |_.dynsym:00400318st_size dq 0h |_.dynsym:00400320[4] Elf64_Sym |_.dynsym:00400320st_name ddw 1Fh |_.dynsym:00400324st_info db 12h |_.dynsym:00400325st_other db 0h |_.dynsym:00400326st_shndx dw 0h |_.dynsym:00400328st_value dq 0h |_.dynsym:00400330st_size dq 0h |_.dynsym:00400338[5] Elf64_Sym |_.dynsym:00400338st_name ddw Bh |_.dynsym:0040033cst_info db 12h |_.dynsym:0040033dst_other db 0h |_.dynsym:0040033est_shndx dw 0h |_.dynsym:00400340st_value dq 0h |_.dynsym:00400348st_size dq 0h |_.dynsym:00400350[6] Elf64_Sym |_.dynsym:00400350st_name ddw BCh |_.dynsym:00400354st_info db 12h |_.dynsym:00400355st_other db 0h |_.dynsym:00400356st_shndx dw 0h |_.dynsym:00400358st_value dq 0h |_.dynsym:00400360st_size dq 0h |_.dynsym:00400368[7] Elf64_Sym |_.dynsym:00400368st_name ddw DBh |_.dynsym:0040036cst_info db 12h |_.dynsym:0040036dst_other db 0h |_.dynsym:0040036est_shndx dw 0h |_.dynsym:00400370st_value dq 0h |_.dynsym:00400378st_size dq 0h |_.dynsym:00400380[8] Elf64_Sym |_.dynsym:00400380st_name ddw 40h |_.dynsym:00400384st_info db 12h |_.dynsym:00400385st_other db 0h |_.dynsym:00400386st_shndx dw 0h |_.dynsym:00400388st_value dq 0h |_.dynsym:00400390st_size dq 0h |_.dynsym:00400398[9] Elf64_Sym |_.dynsym:00400398st_name ddw 78h |_.dynsym:0040039cst_info db 12h |_.dynsym:0040039dst_other db 0h |_.dynsym:0040039est_shndx dw 0h |_.dynsym:004003a0st_value dq 0h |_.dynsym:004003a8st_size dq 0h |_.dynsym:004003b0[10] Elf64_Sym |_.dynsym:004003b0st_name ddw 57h |_.dynsym:004003b4st_info db 12h |_.dynsym:004003b5st_other db 0h |_.dynsym:004003b6st_shndx dw 0h |_.dynsym:004003b8st_value dq 0h |_.dynsym:004003c0st_size dq 0h |_.dynsym:004003c8[11] Elf64_Sym |_.dynsym:004003c8st_name ddw A8h |_.dynsym:004003ccst_info db 12h |_.dynsym:004003cdst_other db 0h |_.dynsym:004003cest_shndx dw 0h |_.dynsym:004003d0st_value dq 0h |_.dynsym:004003d8st_size dq 0h |_.dynsym:004003e0[12] Elf64_Sym |_.dynsym:004003e0st_name ddw 18h |_.dynsym:004003e4st_info db 12h |_.dynsym:004003e5st_other db 0h |_.dynsym:004003e6st_shndx dw 0h |_.dynsym:004003e8st_value dq 0h |_.dynsym:004003f0st_size dq 0h |_.dynsym:004003f8[13] Elf64_Sym |_.dynsym:004003f8st_name ddw 27h |_.dynsym:004003fcst_info db 12h |_.dynsym:004003fdst_other db 0h |_.dynsym:004003fest_shndx dw 0h |_.dynsym:00400400st_value dq 0h |_.dynsym:00400408st_size dq 0h |_.dynsym:00400410[14] Elf64_Sym |_.dynsym:00400410st_name ddw 7Eh |_.dynsym:00400414st_info db 12h |_.dynsym:00400415st_other db 0h |_.dynsym:00400416st_shndx dw 0h |_.dynsym:00400418st_value dq 0h |_.dynsym:00400420st_size dq 0h |_.dynsym:00400428[15] Elf64_Sym |_.dynsym:00400428st_name ddw 5Eh |_.dynsym:0040042cst_info db 12h |_.dynsym:0040042dst_other db 0h |_.dynsym:0040042est_shndx dw 0h |_.dynsym:00400430st_value dq 0h |_.dynsym:00400438st_size dq 0h |_.dynsym:00400440[16] Elf64_Sym |_.dynsym:00400440st_name ddw 9Dh |_.dynsym:00400444st_info db 12h |_.dynsym:00400445st_other db 0h |_.dynsym:00400446st_shndx dw 0h |_.dynsym:00400448st_value dq 0h |_.dynsym:00400450st_size dq 0h |_.dynsym:00400458[17] Elf64_Sym |_.dynsym:00400458st_name ddw 6Ch |_.dynsym:0040045cst_info db 12h |_.dynsym:0040045dst_other db 0h |_.dynsym:0040045est_shndx dw 0h |_.dynsym:00400460st_value dq 0h |_.dynsym:00400468st_size dq 0h |_.dynsym:00400470[18] Elf64_Sym |_.dynsym:00400470st_name ddw C9h |_.dynsym:00400474st_info db 12h |_.dynsym:00400475st_other db 0h |_.dynsym:00400476st_shndx dw 0h |_.dynsym:00400478st_value dq 0h |_.dynsym:00400480st_size dq 0h |_.dynsym:00400488[19] Elf64_Sym |_.dynsym:00400488st_name ddw 50h |_.dynsym:0040048cst_info db 12h |_.dynsym:0040048dst_other db 0h |_.dynsym:0040048est_shndx dw 0h |_.dynsym:00400490st_value dq 0h |_.dynsym:00400498st_size dq 0h |_.dynsym:004004a0[20] Elf64_Sym |_.dynsym:004004a0st_name ddw C2h |_.dynsym:004004a4st_info db 12h |_.dynsym:004004a5st_other db 0h |_.dynsym:004004a6st_shndx dw 0h |_.dynsym:004004a8st_value dq 0h |_.dynsym:004004b0st_size dq 0h |_.dynsym:004004b8[21] Elf64_Sym |_.dynsym:004004b8st_name ddw 47h |_.dynsym:004004bcst_info db 12h |_.dynsym:004004bdst_other db 0h |_.dynsym:004004best_shndx dw 0h |_.dynsym:004004c0st_value dq 0h |_.dynsym:004004c8st_size dq 0h |_.dynsym:004004d0[22] Elf64_Sym |_.dynsym:004004d0st_name ddw EEh |_.dynsym:004004d4st_info db 20h |_.dynsym:004004d5st_other db 0h |_.dynsym:004004d6st_shndx dw 0h |_.dynsym:004004d8st_value dq 0h |_.dynsym:004004e0st_size dq 0h |_.dynsym:004004e8[23] Elf64_Sym |_.dynsym:004004e8st_name ddw 84h |_.dynsym:004004ecst_info db 12h |_.dynsym:004004edst_other db 0h |_.dynsym:004004eest_shndx dw 0h |_.dynsym:004004f0st_value dq 0h |_.dynsym:004004f8st_size dq 0h |_.dynsym:00400500[24] Elf64_Sym |_.dynsym:00400500st_name ddw 79h |_.dynsym:00400504st_info db 12h |_.dynsym:00400505st_other db 0h |_.dynsym:00400506st_shndx dw 0h |_.dynsym:00400508st_value dq 0h |_.dynsym:00400510st_size dq 0h |_.dynsym:00400518[25] Elf64_Sym |_.dynsym:00400518st_name ddw E6h |_.dynsym:0040051cst_info db 12h |_.dynsym:0040051dst_other db 0h |_.dynsym:0040051est_shndx dw 0h |_.dynsym:00400520st_value dq 0h |_.dynsym:00400528st_size dq 0h |_.dynsym:00400530[26] Elf64_Sym |_.dynsym:00400530st_name ddw B5h |_.dynsym:00400534st_info db 12h |_.dynsym:00400535st_other db 0h |_.dynsym:00400536st_shndx dw 0h |_.dynsym:00400538st_value dq 0h |_.dynsym:00400540st_size dq 0h |_.dynsym:00400548[27] Elf64_Sym |_.dynsym:00400548st_name ddw 92h |_.dynsym:0040054cst_info db 12h |_.dynsym:0040054dst_other db 0h |_.dynsym:0040054est_shndx dw 0h |_.dynsym:00400550st_value dq 0h |_.dynsym:00400558st_size dq 0h |_.dynsym:00400560[28] Elf64_Sym |_.dynsym:00400560st_name ddw A3h |_.dynsym:00400564st_info db 12h |_.dynsym:00400565st_other db 0h |_.dynsym:00400566st_shndx dw 0h |_.dynsym:00400568st_value dq 0h |_.dynsym:00400570st_size dq 0h |_.dynsym:00400578[29] Elf64_Sym |_.dynsym:00400578st_name ddw 71h |_.dynsym:0040057cst_info db 12h |_.dynsym:0040057dst_other db 0h |_.dynsym:0040057est_shndx dw 0h |_.dynsym:00400580st_value dq 0h |_.dynsym:00400588st_size dq 0h |_.dynsym:00400590[30] Elf64_Sym |_.dynsym:00400590st_name ddw 98h |_.dynsym:00400594st_info db 12h |_.dynsym:00400595st_other db 0h |_.dynsym:00400596st_shndx dw 0h |_.dynsym:00400598st_value dq 0h |_.dynsym:004005a0st_size dq 0h |_.dynsym:004005a8[31] Elf64_Sym |_.dynsym:004005a8st_name ddw 17h |_.dynsym:004005acst_info db 12h |_.dynsym:004005adst_other db 0h |_.dynsym:004005aest_shndx dw 0h |_.dynsym:004005b0st_value dq 0h |_.dynsym:004005b8st_size dq 0h |_.dynsym:004005c0[32] Elf64_Sym |_.dynsym:004005c0st_name ddw 12h |_.dynsym:004005c4st_info db 12h |_.dynsym:004005c5st_other db 0h |_.dynsym:004005c6st_shndx dw 0h |_.dynsym:004005c8st_value dq 0h |_.dynsym:004005d0st_size dq 0h |_.dynsym:004005d8[33] Elf64_Sym |_.dynsym:004005d8st_name ddw 65h |_.dynsym:004005dcst_info db 12h |_.dynsym:004005ddst_other db 0h |_.dynsym:004005dest_shndx dw 0h |_.dynsym:004005e0st_value dq 0h |_.dynsym:004005e8st_size dq 0h |_.dynsym:004005f0[34] Elf64_Sym |_.dynsym:004005f0st_name ddw 8Bh |_.dynsym:004005f4st_info db 11h |_.dynsym:004005f5st_other db 0h |_.dynsym:004005f6st_shndx dw 19h |_.dynsym:004005f8st_value dq 603308h |_.dynsym:00400600st_size dq 8h |_.dynsym:00400608[35] Elf64_Sym |_.dynsym:00400608st_name ddw 31h |_.dynsym:0040060cst_info db 11h |_.dynsym:0040060dst_other db 0h |_.dynsym:0040060est_shndx dw 19h |_.dynsym:00400610st_value dq 603300h |_.dynsym:00400618st_size dq 4h __DT_STRTAB: ;XREF[2,0]: 00602eb0,_elfSectionHeaders::00000190 .dynstr:0040062000 ?? 00h .dynstr:004006216c6962632... ds "libc.so.6" .dynstr:0040062b737472637... ds "strcpy" .dynstr:004006326578697400 ds "exit" .dynstr:00400637737072696... ds "sprintf" .dynstr:0040063f7374726e6... ds "strncmp" .dynstr:00400647667472756... ds "ftruncate" .dynstr:004006516f7074696... ds "optind" .dynstr:004006587374726e6... ds "strncpy" .dynstr:00400660676574706... ds "getpid" .dynstr:00400667676574707... ds "getpwnam" .dynstr:0040067063616c6c6... ds "calloc" .dynstr:004006777374726c6... ds "strlen" .dynstr:0040067e6d656d736... ds "memset" .dynstr:00400685737472737... ds "strstr" .dynstr:0040068c7265616400 ds "read" .dynstr:004006916765746f7... ds "getopt" .dynstr:004006986374696d6500 ds "ctime" .dynstr:0040069e6c7365656b00 ds "lseek" .dynstr:004006a46d656d637... ds "memcpy" .dynstr:004006ab6f7074617... ds "optarg" .dynstr:004006b263686f776e00 ds "chown" .dynstr:004006b861746f6900 ds "atoi" .dynstr:004006bd636c6f736500 ds "close" .dynstr:004006c36f70656e00 ds "open" .dynstr:004006c8737472636... ds "strchr" .dynstr:004006cf7574696d6500 ds "utime" .dynstr:004006d56d6b74696... ds "mktime" .dynstr:004006dc66636e746c00 ds "fcntl" .dynstr:004006e2737472636... ds "strcmp" .dynstr:004006e95f5f6c696... ds "__libc_start_main" .dynstr:004006fb777269746500 ds "write" .dynstr:004007016672656500 ds "free" .dynstr:004007065f5f78737... ds "__xstat" .dynstr:0040070e5f5f676d6... ds "__gmon_start__" .dynstr:0040071d474c49424... ds "GLIBC_2.14" .dynstr:00400728474c49424... ds "GLIBC_2.2.5" __DT_VERSYM: ;XREF[2,0]: 00602f90,_elfSectionHeaders::000001d0 .gnu.version:...0000 dw 0h ;0 .gnu.version:...0200 dw 2h ;utime .gnu.version:...0200 dw 2h ;free .gnu.version:...0200 dw 2h ;strncpy .gnu.version:...0200 dw 2h ;strncmp .gnu.version:...0200 dw 2h ;strcpy .gnu.version:...0200 dw 2h ;fcntl .gnu.version:...0200 dw 2h ;write .gnu.version:...0200 dw 2h ;getpid .gnu.version:...0200 dw 2h ;ctime .gnu.version:...0200 dw 2h ;strlen .gnu.version:...0200 dw 2h ;strchr .gnu.version:...0200 dw 2h ;printf .gnu.version:...0200 dw 2h ;ftruncate .gnu.version:...0200 dw 2h ;lseek .gnu.version:...0200 dw 2h ;memset .gnu.version:...0200 dw 2h ;close .gnu.version:...0200 dw 2h ;read .gnu.version:...0200 dw 2h ;__libc_start_main .gnu.version:...0200 dw 2h ;calloc .gnu.version:...0200 dw 2h ;strcmp .gnu.version:...0200 dw 2h ;getpwnam .gnu.version:...0000 dw 0h ;__gmon_start__ .gnu.version:...0300 dw 3h ;memcpy .gnu.version:...0200 dw 2h ;time .gnu.version:...0200 dw 2h ;__xstat .gnu.version:...0200 dw 2h ;mktime .gnu.version:...0200 dw 2h ;chown .gnu.version:...0200 dw 2h ;open .gnu.version:...0200 dw 2h ;getopt .gnu.version:...0200 dw 2h ;atoi .gnu.version:...0200 dw 2h ;sprintf .gnu.version:...0200 dw 2h ;exit .gnu.version:...0200 dw 2h ;strstr .gnu.version:...0200 dw 2h ;optarg .gnu.version:...0200 dw 2h ;optind __DT_VERNEED: ;XREF[2,0]: 00602f70,_elfSectionHeaders::00000210 .gnu.version_...01 ?? 01h .gnu.version_...00 ?? 00h .gnu.version_...02 ?? 02h .gnu.version_...00 ?? 00h .gnu.version_...01 ?? 01h .gnu.version_...00 ?? 00h .gnu.version_...00 ?? 00h .gnu.version_...00 ?? 00h .gnu.version_...10 ?? 10h .gnu.version_...00 ?? 00h .gnu.version_...00 ?? 00h .gnu.version_...00 ?? 00h .gnu.version_...00 ?? 00h .gnu.version_...00 ?? 00h .gnu.version_...00 ?? 00h .gnu.version_...00 ?? 00h .gnu.version_...94 ?? 94h .gnu.version_...91 ?? 91h .gnu.version_...96 ?? 96h .gnu.version_...06 ?? 06h .gnu.version_...00 ?? 00h .gnu.version_...00 ?? 00h .gnu.version_...03 ?? 03h .gnu.version_...00 ?? 00h .gnu.version_...fd ?? FDh .gnu.version_...00 ?? 00h .gnu.version_...00 ?? 00h .gnu.version_...00 ?? 00h .gnu.version_...10 ?? 10h .gnu.version_...00 ?? 00h .gnu.version_...00 ?? 00h .gnu.version_...00 ?? 00h .gnu.version_...75 ?? 75h u .gnu.version_...1a ?? 1Ah .gnu.version_...69 ?? 69h i .gnu.version_...09 ?? 09h .gnu.version_...00 ?? 00h .gnu.version_...00 ?? 00h .gnu.version_...02 ?? 02h .gnu.version_...00 ?? 00h .gnu.version_...08 ?? 08h .gnu.version_...01 ?? 01h .gnu.version_...00 ?? 00h .gnu.version_...00 ?? 00h .gnu.version_...00 ?? 00h .gnu.version_...00 ?? 00h .gnu.version_...00 ?? 00h .gnu.version_...00 ?? 00h __DT_RELA: ;XREF[2,0]: 00602f40,_elfSectionHeaders::00000250 .rela.dyn:004...f82f60000... Elf64_Re... ;location to apply the relocation action |_.rela.dyn:004...[0] Elf64_Rela |_.rela.dyn:004...r_offset dq 602FF8h |_.rela.dyn:004...r_info dq 1600000006h |_.rela.dyn:004...r_addend dq 0h |_.rela.dyn:004...[1] Elf64_Rela |_.rela.dyn:004...r_offset dq 603300h |_.rela.dyn:004...r_info dq 2300000005h |_.rela.dyn:004...r_addend dq 0h |_.rela.dyn:004...[2] Elf64_Rela |_.rela.dyn:004...r_offset dq 603308h |_.rela.dyn:004...r_info dq 2200000005h |_.rela.dyn:004...r_addend dq 0h __DT_JMPREL: ;XREF[2,0]: 00602f30,_elfSectionHeaders::00000290 .rela.plt:004...183060000... Elf64_Re... ;location to apply the relocation action |_.rela.plt:004...[0] Elf64_Rela |_.rela.plt:004...r_offset dq 603018h |_.rela.plt:004...r_info dq 100000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[1] Elf64_Rela |_.rela.plt:004...r_offset dq 603020h |_.rela.plt:004...r_info dq 200000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[2] Elf64_Rela |_.rela.plt:004...r_offset dq 603028h |_.rela.plt:004...r_info dq 300000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[3] Elf64_Rela |_.rela.plt:004...r_offset dq 603030h |_.rela.plt:004...r_info dq 400000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[4] Elf64_Rela |_.rela.plt:004...r_offset dq 603038h |_.rela.plt:004...r_info dq 500000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[5] Elf64_Rela |_.rela.plt:004...r_offset dq 603040h |_.rela.plt:004...r_info dq 600000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[6] Elf64_Rela |_.rela.plt:004...r_offset dq 603048h |_.rela.plt:004...r_info dq 700000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[7] Elf64_Rela |_.rela.plt:004...r_offset dq 603050h |_.rela.plt:004...r_info dq 800000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[8] Elf64_Rela |_.rela.plt:004...r_offset dq 603058h |_.rela.plt:004...r_info dq 900000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[9] Elf64_Rela |_.rela.plt:004...r_offset dq 603060h |_.rela.plt:004...r_info dq A00000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[10] Elf64_Rela |_.rela.plt:004...r_offset dq 603068h |_.rela.plt:004...r_info dq B00000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[11] Elf64_Rela |_.rela.plt:004...r_offset dq 603070h |_.rela.plt:004...r_info dq C00000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[12] Elf64_Rela |_.rela.plt:004...r_offset dq 603078h |_.rela.plt:004...r_info dq D00000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[13] Elf64_Rela |_.rela.plt:004...r_offset dq 603080h |_.rela.plt:004...r_info dq E00000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[14] Elf64_Rela |_.rela.plt:004...r_offset dq 603088h |_.rela.plt:004...r_info dq F00000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[15] Elf64_Rela |_.rela.plt:004...r_offset dq 603090h |_.rela.plt:004...r_info dq 1000000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[16] Elf64_Rela |_.rela.plt:004...r_offset dq 603098h |_.rela.plt:004...r_info dq 1100000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[17] Elf64_Rela |_.rela.plt:004...r_offset dq 6030A0h |_.rela.plt:004...r_info dq 1200000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[18] Elf64_Rela |_.rela.plt:004...r_offset dq 6030A8h |_.rela.plt:004...r_info dq 1300000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[19] Elf64_Rela |_.rela.plt:004...r_offset dq 6030B0h |_.rela.plt:004...r_info dq 1400000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[20] Elf64_Rela |_.rela.plt:004...r_offset dq 6030B8h |_.rela.plt:004...r_info dq 1500000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[21] Elf64_Rela |_.rela.plt:004...r_offset dq 6030C0h |_.rela.plt:004...r_info dq 1600000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[22] Elf64_Rela |_.rela.plt:004...r_offset dq 6030C8h |_.rela.plt:004...r_info dq 1700000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[23] Elf64_Rela |_.rela.plt:004...r_offset dq 6030D0h |_.rela.plt:004...r_info dq 1800000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[24] Elf64_Rela |_.rela.plt:004...r_offset dq 6030D8h |_.rela.plt:004...r_info dq 1900000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[25] Elf64_Rela |_.rela.plt:004...r_offset dq 6030E0h |_.rela.plt:004...r_info dq 1A00000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[26] Elf64_Rela |_.rela.plt:004...r_offset dq 6030E8h |_.rela.plt:004...r_info dq 1B00000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[27] Elf64_Rela |_.rela.plt:004...r_offset dq 6030F0h |_.rela.plt:004...r_info dq 1C00000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[28] Elf64_Rela |_.rela.plt:004...r_offset dq 6030F8h |_.rela.plt:004...r_info dq 1D00000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[29] Elf64_Rela |_.rela.plt:004...r_offset dq 603100h |_.rela.plt:004...r_info dq 1E00000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[30] Elf64_Rela |_.rela.plt:004...r_offset dq 603108h |_.rela.plt:004...r_info dq 1F00000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[31] Elf64_Rela |_.rela.plt:004...r_offset dq 603110h |_.rela.plt:004...r_info dq 2000000007h |_.rela.plt:004...r_addend dq 0h |_.rela.plt:004...[32] Elf64_Rela |_.rela.plt:004...r_offset dq 603118h |_.rela.plt:004...r_info dq 2100000007h |_.rela.plt:004...r_addend dq 0h ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;undefined _DT_INIT() ;XREF[4,0]: Entry Point,004027fe,00602e40 ; _elfSectionHeaders::000002d0 .init:00400b10 4883ec08 SUB RSP,0x8 .init:00400b14 488b05dd2... MOV RAX=>EXTERNAL:__...,qword ptr [->__gm...;= 006040a8 ;= ?? .init:00400b1b 4885c0 TEST RAX,RAX .init:00400b1e 7405 JZ LAB_00400b25 .init:00400b20 e86b010000 CALL .plt:__gmon_start__ ;undefined __gmon_start__() LAB_00400b25: ;XREF[1,0]: 00400b1e .init:00400b25 4883c408 ADD RSP,0x8 .init:00400b29 c3 RET ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;undefined FUN_00400b30() ;XREF[36,0]: 00400b4b,00400b5b,00400b6b,00400b7b ; 00400b8b,00400b9b,00400bab,00400bbb ; 00400bcb,00400bdb,00400beb,00400bfb ; 00400c0b,00400c1b,00400c2b,00400c3b ; 00400c4b,00400c5b,00400c6b,00400c7b ; 00400c8b,00400c9b,00400cab,00400cbb ; 00400ccb,00400cdb,00400ceb,00400cfb ; 00400d0b,00400d1b,00400d2b,00400d3b ; 00400d4b,00402948,00402a10,_elfSectionHeaders::00000310 .plt:00400b30 ff35d2242000 PUSH qword ptr [.got.plt:PTR_00603008] ;= 00000000 .plt:00400b36 ff25d4242000 JMP qword ptr [.got.plt:PTR_00603010] .plt:00400b3c 0f ?? 0Fh .plt:00400b3d 1f ?? 1Fh .plt:00400b3e 40 ?? 40h @ .plt:00400b3f 00 ?? 00h ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int utime(char * __file, utimbuf * __file_times) ;__file char * RDI ;__file_times utimbuf * RSI ;XREF[1,0]: 00401e71 .plt:00400b40 ff25d2242000 JMP qword ptr [->utime] ;int utime(char * __file, utimbuf * _... .plt:00400b46 6800000000 PUSH 0x0 .plt:00400b4b e9e0ffffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;void free(void * __ptr) ;__ptr void * RDI ;XREF[2,0]: 004024c7,00402790 .plt:00400b50 ff25ca242000 JMP qword ptr [->free] ;void free(void * __ptr) .plt:00400b56 6801000000 PUSH 0x1 .plt:00400b5b e9d0ffffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;char * strncpy(char * __dest, char * __src, size_t __n) ;__dest char * RDI ;__src char * RSI ;__n size_t RDX ;XREF[2,0]: 00401ce3,00401d12 .plt:00400b60 ff25c2242000 JMP qword ptr [->strncpy] ;char * strncpy(char * __dest, char *... .plt:00400b66 6802000000 PUSH 0x2 .plt:00400b6b e9c0ffffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int strncmp(char * __s1, char * __s2, size_t __n) ;__s1 char * RDI ;__s2 char * RSI ;__n size_t RDX ;XREF[2,0]: 00402691,004026b1 .plt:00400b70 ff25ba242000 JMP qword ptr [->strncmp] ;int strncmp(char * __s1, char * __s2... .plt:00400b76 6803000000 PUSH 0x3 .plt:00400b7b e9b0ffffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;char * strcpy(char * __dest, char * __src) ;__dest char * RDI ;__src char * RSI ;XREF[1,0]: 0040231f .plt:00400b80 ff25b2242000 JMP qword ptr [->strcpy] ;char * strcpy(char * __dest, char * ... .plt:00400b86 6804000000 PUSH 0x4 .plt:00400b8b e9a0ffffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int fcntl(int __fd, int __cmd, ...) ;__fd int EDI ;__cmd int ESI ;XREF[4,0]: 00401b04,00401ca6,00402085,004025ab .plt:00400b90 ff25aa242000 JMP qword ptr [->fcntl] ;int fcntl(int __fd, int __cmd, ...) .plt:00400b96 6805000000 PUSH 0x5 .plt:00400b9b e990ffffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;ssize_t write(int __fd, void * __buf, size_t __n) ;__fd int EDI ;__buf void * RSI ;__n size_t RDX ;XREF[4,0]: 00401b5e,00401d76,004024a8,00402771 .plt:00400ba0 ff25a2242000 JMP qword ptr [->write] ;ssize_t write(int __fd, void * __buf... .plt:00400ba6 6806000000 PUSH 0x6 .plt:00400bab e980ffffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;__pid_t getpid(void) ;XREF[4,0]: 00401ae5,00401c87,00402066,0040258c .plt:00400bb0 ff259a242000 JMP qword ptr [->getpid] ;__pid_t getpid(void) .plt:00400bb6 6807000000 PUSH 0x7 .plt:00400bbb e970ffffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;char * ctime(time_t * __timer) ;__timer time_t * RDI ;XREF[1,0]: 0040230a .plt:00400bc0 ff2592242000 JMP qword ptr [->ctime] ;char * ctime(time_t * __timer) .plt:00400bc6 6808000000 PUSH 0x8 .plt:00400bcb e960ffffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;size_t strlen(char * __s) ;__s char * RDI ;XREF[2,0]: 00401cc3,00401cf2 .plt:00400bd0 ff258a242000 JMP qword ptr [->strlen] ;size_t strlen(char * __s) .plt:00400bd6 6809000000 PUSH 0x9 .plt:00400bdb e950ffffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;char * strchr(char * __s, int __c) ;__s char * RDI ;__c int ESI ;XREF[5,0]: 00401ed9,00401f10,00401f44,00401f74 ; 00401fa4 .plt:00400be0 ff2582242000 JMP qword ptr [->strchr] ;char * strchr(char * __s, int __c) .plt:00400be6 680a000000 PUSH 0xa .plt:00400beb e940ffffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int printf(char * __format, ...) ;__format char * RDI ;XREF[5,0]: 00400ed8,00401ba6,00401dbe,00402500 ; 004027c3 .plt:00400bf0 ff257a242000 JMP qword ptr [->printf] ;int printf(char * __format, ...) .plt:00400bf6 680b000000 PUSH 0xb .plt:00400bfb e930ffffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int ftruncate(int __fd, __off_t __length) ;__fd int EDI ;__length __off_t RSI ;XREF[2,0]: 004024bb,00402784 .plt:00400c00 ff2572242000 JMP qword ptr [->ftruncate] ;int ftruncate(int __fd, __off_t __le... .plt:00400c06 680c000000 PUSH 0xc .plt:00400c0b e920ffffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;__off_t lseek(int __fd, __off_t __offset, int __whence) ;__fd int EDI ;__offset __off_t RSI ;__whence int EDX ;XREF[8,0]: 00401b42,00401d5a,004020a7,004020d7 ; 0040247b,004025cd,004025fd,0040275a .plt:00400c10 ff256a242000 JMP qword ptr [->lseek] ;__off_t lseek(int __fd, __off_t __of... .plt:00400c16 680d000000 PUSH 0xd .plt:00400c1b e910ffffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;void * memset(void * __s, int __c, size_t __n) ;__s void * RDI ;__c int ESI ;__n size_t RDX ;XREF[4,0]: 00401a50,00401bf2,00401ea2,004023c5 .plt:00400c20 ff2562242000 JMP qword ptr [->memset] ;void * memset(void * __s, int __c, s... .plt:00400c26 680e000000 PUSH 0xe .plt:00400c2b e900ffffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int close(int __fd) ;__fd int EDI ;XREF[6,0]: 00401b6b,00401d83,00402103,004024d1 ; 00402629,0040279a .plt:00400c30 ff255a242000 JMP qword ptr [->close] ;int close(int __fd) .plt:00400c36 680f000000 PUSH 0xf .plt:00400c3b e9f0feffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;ssize_t read(int __fd, void * __buf, size_t __nbytes) ;__fd int EDI ;__buf void * RSI ;__nbytes size_t RDX ;XREF[2,0]: 004020ee,00402614 .plt:00400c40 ff2552242000 JMP qword ptr [->read] ;ssize_t read(int __fd, void * __buf,... .plt:00400c46 6810000000 PUSH 0x10 .plt:00400c4b e9e0feffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;undefined __libc_start_main() ;XREF[1,0]: 00400d74 .plt:00400c50 ff254a242000 JMP qword ptr [->__libc_start_main] ;undefined __libc_start_main() .plt:00400c56 6811000000 PUSH 0x11 .plt:00400c5b e9d0feffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;void * calloc(size_t __nmemb, size_t __size) ;__nmemb size_t RDI ;__size size_t RSI ;XREF[2,0]: 004020bf,004025e5 .plt:00400c60 ff2542242000 JMP qword ptr [->calloc] ;void * calloc(size_t __nmemb, size_t... .plt:00400c66 6812000000 PUSH 0x12 .plt:00400c6b e9c0feffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int strcmp(char * __s1, char * __s2) ;__s1 char * RDI ;__s2 char * RSI ;XREF[1,0]: 00401607 .plt:00400c70 ff253a242000 JMP qword ptr [->strcmp] ;int strcmp(char * __s1, char * __s2) .plt:00400c76 6813000000 PUSH 0x13 .plt:00400c7b e9b0feffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;passwd * getpwnam(char * __name) ;__name char * RDI ;XREF[3,0]: 0040195a,00401a81,00401c23 .plt:00400c80 ff2532242000 JMP qword ptr [->getpwnam] ;passwd * getpwnam(char * __name) .plt:00400c86 6814000000 PUSH 0x14 .plt:00400c8b e9a0feffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;undefined __gmon_start__() ;XREF[1,0]: 00400b20 .plt:00400c90 ff252a242000 JMP qword ptr [->__gmon_start__] ;undefined __gmon_start__() .plt:00400c96 6815000000 PUSH 0x15 .plt:00400c9b e990feffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;void * memcpy(void * __dest, void * __src, size_t __n) ;__dest void * RDI ;__src void * RSI ;__n size_t RDX ;XREF[1,0]: 00402717 .plt:00400ca0 ff2522242000 JMP qword ptr [->memcpy] ;void * memcpy(void * __dest, void * ... .plt:00400ca6 6816000000 PUSH 0x16 .plt:00400cab e980feffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;time_t time(time_t * __timer) ;__timer time_t * RDI ;XREF[1,0]: 00401097 .plt:00400cb0 ff251a242000 JMP qword ptr [->time] ;time_t time(time_t * __timer) .plt:00400cb6 6817000000 PUSH 0x17 .plt:00400cbb e970feffff JMP FUN_00400b30 ;undefined FUN_00400b30() LAB_00400cc0: ;XREF[1,0]: 0040285b .plt:00400cc0 ff2512242000 JMP qword ptr [->__xstat] ;int __xstat(int __ver, char * __file... .plt:00400cc6 6818000000 PUSH 0x18 .plt:00400ccb e960feffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;time_t mktime(tm * __tp) ;__tp tm * RDI ;XREF[1,0]: 00401fcf .plt:00400cd0 ff250a242000 JMP qword ptr [->mktime] ;time_t mktime(tm * __tp) .plt:00400cd6 6819000000 PUSH 0x19 .plt:00400cdb e950feffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int chown(char * __file, __uid_t __owner, __gid_t __group) ;__file char * RDI ;__owner __uid_t ESI ;__group __gid_t EDX ;XREF[1,0]: 00401e53 .plt:00400ce0 ff2502242000 JMP qword ptr [->chown] ;int chown(char * __file, __uid_t __o... .plt:00400ce6 681a000000 PUSH 0x1a .plt:00400ceb e940feffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int open(char * __file, int __oflag, ...) ;__file char * RDI ;__oflag int ESI ;XREF[4,0]: 00401aaa,00401c4c,0040202b,00402551 .plt:00400cf0 ff25fa232000 JMP qword ptr [->open] ;int open(char * __file, int __oflag,... .plt:00400cf6 681b000000 PUSH 0x1b .plt:00400cfb e930feffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int getopt(int ___argc, char * * ___argv, char * __shortopts) ;___argc int EDI ;___argv char * * RSI ;__shortopts char * RDX ;XREF[1,0]: 0040119f .plt:00400d00 ff25f2232000 JMP qword ptr [->getopt] ;int getopt(int ___argc, char * * ___... .plt:00400d06 681c000000 PUSH 0x1c .plt:00400d0b e920feffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int atoi(char * __nptr) ;__nptr char * RDI ;XREF[8,0]: 004010e4,004010f7,00401ec0,00401ef9 ; 00401f30,00401f60,00401f90,00401fc0 .plt:00400d10 ff25ea232000 JMP qword ptr [->atoi] ;int atoi(char * __nptr) .plt:00400d16 681d000000 PUSH 0x1d .plt:00400d1b e910feffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int sprintf(char * __s, char * __format, ...) ;__s char * RDI ;__format char * RSI ;XREF[2,0]: 00401989,00402288 .plt:00400d20 ff25e2232000 JMP qword ptr [->sprintf] ;int sprintf(char * __s, char * __for... .plt:00400d26 681e000000 PUSH 0x1e .plt:00400d2b e900feffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;void exit(int __status) ;__status int EDI ;XREF[8,0]: 00401183,00401205,004012a3,00401341 ; 004013d8,0040144d,00401536,004015b0 .plt:00400d30 ff25da232000 JMP qword ptr [->exit] ;void exit(int __status) .plt:00400d36 681f000000 PUSH 0x1f .plt:00400d3b e9f0fdffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;char * strstr(char * __haystack, char * __needle) ;__haystack char * RDI ;__needle char * RSI ;XREF[3,0]: 00402202,0040229e,00402340 .plt:00400d40 ff25d2232000 JMP qword ptr [->strstr] ;char * strstr(char * __haystack, cha... .plt:00400d46 6820000000 PUSH 0x20 .plt:00400d4b e9e0fdffff JMP FUN_00400b30 ;undefined FUN_00400b30() ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;undefined entry() ;local_10 undefined8 -10 ;XREF[1,0]: 00400d5e ;XREF[5,0]: Entry Point,00400018,00402950 ; 004029e0,_elfSectionHeaders::00000350 .text:00400d50 31ed XOR EBP,EBP .text:00400d52 4989d1 MOV R9,RDX .text:00400d55 5e POP RSI .text:00400d56 4889e2 MOV RDX,RSP .text:00400d59 4883e4f0 AND RSP,-0x10 .text:00400d5d 50 PUSH RAX .text:00400d5e 54 PUSH RSP=>local_10 .text:00400d5f 49c7c0402... MOV R8=>FUN_00402840,FUN_00402840 .text:00400d66 48c7c1d02... MOV RCX=>FUN_004027d0,FUN_004027d0 .text:00400d6d 48c7c7df0... MOV RDI=>main,main .text:00400d74 e8d7feffff CALL .plt:__libc_start_main ;undefined __libc_start_main() .text:00400d79 f4 HLT .text:00400d7a 66 ?? 66h f .text:00400d7b 0f ?? 0Fh .text:00400d7c 1f ?? 1Fh .text:00400d7d 44 ?? 44h D .text:00400d7e 00 ?? 00h .text:00400d7f 00 ?? 00h ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;undefined FUN_00400d80() ;XREF[1,0]: 00400dfd .text:00400d80 b8ff326000 MOV EAX,0x6032ff .text:00400d85 55 PUSH RBP .text:00400d86 482df8326000 SUB RAX,0x6032f8 .text:00400d8c 4883f80e CMP RAX,0xe .text:00400d90 4889e5 MOV RBP,RSP .text:00400d93 7702 JA LAB_00400d97 LAB_00400d95: ;XREF[1,0]: 00400d9f .text:00400d95 5d POP RBP .text:00400d96 c3 RET LAB_00400d97: ;XREF[1,0]: 00400d93 .text:00400d97 b800000000 MOV EAX,0x0 .text:00400d9c 4885c0 TEST RAX,RAX .text:00400d9f 74f4 JZ LAB_00400d95 .text:00400da1 5d POP RBP .text:00400da2 bff8326000 MOV EDI,0x6032f8 .text:00400da7 ffe0 JMP RAX .text:00400da9 0f ?? 0Fh .text:00400daa 1f ?? 1Fh .text:00400dab 80 ?? 80h .text:00400dac 00 ?? 00h .text:00400dad 00 ?? 00h .text:00400dae 00 ?? 00h .text:00400daf 00 ?? 00h LAB_00400db0: ;XREF[2,0]: 00400e30,00400e38 .text:00400db0 b8f8326000 MOV EAX,0x6032f8 .text:00400db5 55 PUSH RBP .text:00400db6 482df8326000 SUB RAX,0x6032f8 .text:00400dbc 48c1f803 SAR RAX,0x3 .text:00400dc0 4889e5 MOV RBP,RSP .text:00400dc3 4889c2 MOV RDX,RAX .text:00400dc6 48c1ea3f SHR RDX,0x3f .text:00400dca 4801d0 ADD RAX,RDX .text:00400dcd 48d1f8 SAR RAX,1 .text:00400dd0 7502 JNZ LAB_00400dd4 LAB_00400dd2: ;XREF[1,0]: 00400ddc .text:00400dd2 5d POP RBP .text:00400dd3 c3 RET LAB_00400dd4: ;XREF[1,0]: 00400dd0 .text:00400dd4 ba00000000 MOV EDX,0x0 .text:00400dd9 4885d2 TEST RDX,RDX .text:00400ddc 74f4 JZ LAB_00400dd2 .text:00400dde 5d POP RBP .text:00400ddf 4889c6 MOV RSI,RAX .text:00400de2 bff8326000 MOV EDI,0x6032f8 .text:00400de7 ffe2 JMP RDX .text:00400de9 0f ?? 0Fh .text:00400dea 1f ?? 1Fh .text:00400deb 80 ?? 80h .text:00400dec 00 ?? 00h .text:00400ded 00 ?? 00h .text:00400dee 00 ?? 00h .text:00400def 00 ?? 00h ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;undefined _FINI_0() ;XREF[3,0]: Entry Point,00402819,00602e18 .text:00400df0 803d19252... CMP byte ptr [.bss:DAT_00603310],0x0 .text:00400df7 7511 JNZ LAB_00400e0a .text:00400df9 55 PUSH RBP .text:00400dfa 4889e5 MOV RBP,RSP .text:00400dfd e87effffff CALL FUN_00400d80 ;undefined FUN_00400d80() .text:00400e02 5d POP RBP .text:00400e03 c60506252... MOV byte ptr [.bss:DAT_00603310],0x1 LAB_00400e0a: ;XREF[1,0]: 00400df7 .text:00400e0a f3c3 RET .text:00400e0c 0f ?? 0Fh .text:00400e0d 1f ?? 1Fh .text:00400e0e 40 ?? 40h @ .text:00400e0f 00 ?? 00h ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;undefined _INIT_0() ;XREF[3,0]: Entry Point,00402819,00602e10 .text:00400e10 48833d082... CMP qword ptr [.jcr:DAT_00602e20],0x0 .text:00400e18 741e JZ LAB_00400e38 .text:00400e1a b800000000 MOV EAX,0x0 .text:00400e1f 4885c0 TEST RAX,RAX .text:00400e22 7414 JZ LAB_00400e38 .text:00400e24 55 PUSH RBP .text:00400e25 bf202e6000 MOV EDI,.jcr:DAT_00602e20 .text:00400e2a 4889e5 MOV RBP,RSP .text:00400e2d ffd0 CALL RAX .text:00400e2f 5d POP RBP .text:00400e30 e97bffffff JMP LAB_00400db0 .text:00400e35 0f ?? 0Fh .text:00400e36 1f ?? 1Fh .text:00400e37 00 ?? 00h LAB_00400e38: ;XREF[2,0]: 00400e18,00400e22 .text:00400e38 e973ffffff JMP LAB_00400db0 ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;undefined scramble(char * p, undefined4 count) ;p char * RDI ;count undefined4 ESI ;i undefined4 -c ;XREF[5,0]: 00400e7a,00400e83,00400e90,00400ebc,00400ec0 ;local_10 undefined4 -10 ;XREF[4,0]: 00400e77,00400ea0,00400eaa,00400eb9 ;local_14 undefined4 -14 ;XREF[3,0]: 00400e50,00400e65,00400ea7 ;local_18 undefined4 -18 ;XREF[3,0]: 00400e57,00400e6e,00400eb0 ;local_1c undefined4 -1c ;XREF[3,0]: 00400e5e,00400e74,00400eb6 ;local_30 undefined8 -30 ;XREF[3,0]: 00400e41,00400e89,00400e96 ;local_34 undefined4 -34 ;XREF[4,0]: 00400e45,00400e48,00400e68,00400ec3 ;XREF[23,0]: 00400f01,00400f10,00400f1f,00400f2e ; 00400f3d,00400f4c,00400f5b,00400f6a ; 00400f79,00400f88,00400f97,00400fa6 ; 00400fb5,00400fc4,00400fd3,00400fe2 ; 00400ff1,00401000,0040100f,0040101e ; 0040102d,00402958,00402a38 .text:00400e3d 55 PUSH RBP .text:00400e3e 4889e5 MOV RBP,RSP .text:00400e41 48897dd8 MOV qword ptr [RBP + local_30+0x8],p .text:00400e45 8975d4 MOV dword ptr [RBP + local_34+0x8],count .text:00400e48 837dd400 CMP dword ptr [RBP + local_34+0x8],0x0 .text:00400e4c 7f02 JG LAB_00400e50 .text:00400e4e eb78 JMP LAB_00400ec8 LAB_00400e50: ;XREF[1,0]: 00400e4c .text:00400e50 c745f4498... MOV dword ptr [RBP + local_14+0x8],0x8249 .text:00400e57 c745f0ef3... MOV dword ptr [RBP + local_18+0x8],0x39ef .text:00400e5e c745ecc75... MOV dword ptr [RBP + local_1c+0x8],0x52c7 .text:00400e65 8b45f4 MOV EAX,dword ptr [RBP + local_14+0x8] .text:00400e68 0faf45d4 IMUL EAX,dword ptr [RBP + local_34+0x8] .text:00400e6c 89c2 MOV EDX,EAX .text:00400e6e 8b45f0 MOV EAX,dword ptr [RBP + local_18+0x8] .text:00400e71 01d0 ADD EAX,EDX .text:00400e73 99 CDQ .text:00400e74 f77dec IDIV dword ptr [RBP + local_1c+0x8] .text:00400e77 8955f8 MOV dword ptr [RBP + local_10+0x8],EDX .text:00400e7a c745fc000... MOV dword ptr [RBP + i+0x8],0x0 .text:00400e81 eb3d JMP LAB_00400ec0 LAB_00400e83: ;XREF[1,0]: 00400ec6 .text:00400e83 8b45fc MOV EAX,dword ptr [RBP + i+0x8] .text:00400e86 4863d0 MOVSXD RDX,EAX .text:00400e89 488b45d8 MOV RAX,qword ptr [RBP + local_30+0x8] .text:00400e8d 4801c2 ADD RDX,RAX .text:00400e90 8b45fc MOV EAX,dword ptr [RBP + i+0x8] .text:00400e93 4863c8 MOVSXD RCX,EAX .text:00400e96 488b45d8 MOV RAX,qword ptr [RBP + local_30+0x8] .text:00400e9a 4801c8 ADD RAX,RCX .text:00400e9d 0fb608 MOVZX ECX,byte ptr [RAX] .text:00400ea0 8b45f8 MOV EAX,dword ptr [RBP + local_10+0x8] .text:00400ea3 31c8 XOR EAX,ECX .text:00400ea5 8802 MOV byte ptr [RDX],AL .text:00400ea7 8b45f4 MOV EAX,dword ptr [RBP + local_14+0x8] .text:00400eaa 0faf45f8 IMUL EAX,dword ptr [RBP + local_10+0x8] .text:00400eae 89c2 MOV EDX,EAX .text:00400eb0 8b45f0 MOV EAX,dword ptr [RBP + local_18+0x8] .text:00400eb3 01d0 ADD EAX,EDX .text:00400eb5 99 CDQ .text:00400eb6 f77dec IDIV dword ptr [RBP + local_1c+0x8] .text:00400eb9 8955f8 MOV dword ptr [RBP + local_10+0x8],EDX .text:00400ebc 8345fc01 ADD dword ptr [RBP + i+0x8],0x1 LAB_00400ec0: ;XREF[1,0]: 00400e81 .text:00400ec0 8b45fc MOV EAX,dword ptr [RBP + i+0x8] .text:00400ec3 3b45d4 CMP EAX,dword ptr [RBP + local_34+0x8] .text:00400ec6 7cbb JL LAB_00400e83 LAB_00400ec8: ;XREF[1,0]: 00400e4e .text:00400ec8 5d POP RBP .text:00400ec9 c3 RET ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;undefined printmessage() ;XREF[12,0]: 00401179,004011db,004011fb,00401299 ; 00401337,004013ce,00401443,0040152c ; 00401563,004015a6,00402960,00402a58 .text:00400eca 55 PUSH RBP .text:00400ecb 4889e5 MOV RBP,RSP .text:00400ece bfe0326000 MOV EDI=>.data:ERROR...,.data:ERRORARGSEXIT ;= AEh .text:00400ed3 b800000000 MOV EAX,0x0 .text:00400ed8 e813fdffff CALL .plt:printf ;int printf(char * __format, ...) .text:00400edd 5d POP RBP .text:00400ede c3 RET ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;ulong main(int argc, char * * argv) ;argc int EDI ;argv char * * RSI ;numberarg undefined4 EAX ;XREF[1,0]: 004010e4 ;filename undefined8 -10 ;XREF[71,0]: 00401052,004010ca,00401250,00401257,0040126a ; 004012ee,004012f5,00401308,0040138c,00401393 ; 004013a6,004013fe,00401405,00401411,004014e2 ; 004014e9,00401501,0040155c,00401574,00401617 ; 0040162a,00401639,0040164c,0040165b,0040166e ; 0040167d,00401689,0040169b,004016aa,004016c3 ; 004016d5,004016e4,004016fd,0040170f,0040171e ; 00401737,00401749,00401758,00401771,00401783 ; 00401792,004017ab,004017bd,004017cc,004017e5 ; 004017f7,00401806,0040181f,00401831,00401840 ; 00401859,0040186b,0040187a,00401893,004018a5 ; 004018b4,004018cd,004018df,004018ee,00401907 ; 00401919,00401928,00401941,0040198e,004019a0 ; 004019b2,004019c4,004019d6,004019e8,004019fa ; 00401a0c ;retval undefined4 -14 ;XREF[39,0]: 00401276,00401314,004013b2,00401420,00401510 ; 00401583,00401636,00401658,0040167a,00401698 ; 004016b9,004016d2,004016f3,0040170c,0040172d ; 00401746,00401767,00401780,004017a1,004017ba ; 004017db,004017f4,00401815,0040182e,0040184f ; 00401868,00401889,004018a2,004018c3,004018dc ; 004018fd,00401916,00401937,00401950,004019af ; 004019d3,004019f7,00401a1b,00401a1e ;local_18 undefined4 -18 ;XREF[38,0]: 0040105a,004010d3,0040125f,004012fd,0040139b ; 0040156d,00401610,0040161f,00401641,00401663 ; 004016a3,004016bc,004016dd,004016f6,00401717 ; 00401730,00401751,0040176a,0040178b,004017a4 ; 004017c5,004017de,004017ff,00401818,00401839 ; 00401852,00401873,0040188c,004018ad,004018c6 ; 004018e7,00401900,00401921,0040193a,00401996 ; 004019ba,004019de,00401a02 ;local_1c undefined4 -1c ;XREF[4,0]: 00401061,0040113a,004011b1,004011e0 ;local_20 undefined4 -20 ;XREF[4,0]: 00401068,00401143,004011b7,0040127e ;local_24 undefined4 -24 ;XREF[4,0]: 0040106f,0040114c,004011bd,0040131c ;local_28 undefined4 -28 ;XREF[4,0]: 00401076,00401155,004011c3,004013ba ;local_2c undefined4 -2c ;XREF[4,0]: 0040107d,0040115e,004011c9,00401428 ;local_30 undefined4 -30 ;XREF[4,0]: 00401084,00401167,004011cf,00401518 ;local_34 undefined4 -34 ;XREF[4,0]: 0040108b,00401170,004011d5,0040158b ;local_40 undefined8 -40 ;XREF[30,0]: 00401032,00401227,00401266,004012c5,00401304 ; 00401363,004013a2,004013fa,0040140d,0040146f ; 004014fd,004015d2,004015fb,00401626,00401648 ; 0040166a,00401685,004016a6,004016e0,0040171a ; 00401754,0040178e,004017c8,00401802,0040183c ; 00401876,004018b0,004018ea,00401924,00401953 ;local_48 undefined8 -48 ;XREF[25,0]: 0040103a,0040124c,00401262,004012ea,00401300 ; 00401388,0040139e,00401494,004014f9,004015f7 ; 00401622,00401644,00401666,004016bf,004016f9 ; 00401733,0040176d,004017a7,004017e1,0040181b ; 00401855,0040188f,004018c9,00401903,0040193d ;local_50 undefined8 -50 ;XREF[3,0]: 00401042,004014b9,004014f5 ;local_58 undefined8 -58 ;XREF[3,0]: 0040104a,004014de,004014f1 ;opt char -5c ;XREF[3,0]: 004010a8,004011a4,004011a7 ;local_68 undefined8 -68 ;XREF[2,0]: 00401558,00401570 ;password undefined8 -70 ;XREF[3,0]: 0040195f,00401963,0040196e ;uitistgleich undefined1[40] -98 ;XREF[5,0]: 00401975,00401999,004019bd,004019e1,00401a05 ;local_9c undefined4 -9c ;XREF[9,0]: 00400eea,0040118f,004011f3,00401291,0040132f ; 004013c6,0040143b,00401524,0040159e ;local_a8 undefined8 -a8 ;XREF[16,0]: 00400ef0,00401188,0040121a,0040123f,004012b8 ; 004012dd,00401356,0040137b,004013ed,00401462 ; 00401487,004014ac,004014d1,0040154b,004015c5 ; 004015ea ;optb undefined1 HASH... ;opts undefined1 HASH... ;opbh undefined1 HASH... ;optw undefined1 HASH... ;optm undefined1 HASH... ;optl undefined1 HASH... ;opta undefined1 HASH... ;XREF[4,0]: 00400d6d,00400d6d,00402968,00402a78 .text:00400edf 55 PUSH RBP .text:00400ee0 4889e5 MOV RBP,RSP .text:00400ee3 4881eca00... SUB RSP,0xa0 .text:00400eea 89bd6cffffff MOV dword ptr [RBP + local_9c+0x8],argc .text:00400ef0 4889b560f... MOV qword ptr [RBP + local_a8+0x8],argv .text:00400ef7 be0d000000 MOV argv,0xd .text:00400efc bf30316000 MOV argc=>.data:UTMP,.data:UTMP ;= 7Eh ~ .text:00400f01 e837ffffff CALL scramble ;undefined scramble(char * p, undefin... .text:00400f06 be0d000000 MOV argv,0xd .text:00400f0b bf3e316000 MOV argc=>.data:WTMP,.data:WTMP ;= 7Eh ~ .text:00400f10 e828ffffff CALL scramble ;undefined scramble(char * p, undefin... .text:00400f15 be0d000000 MOV argv,0xd .text:00400f1a bf4c316000 MOV argc=>.data:BTMP,.data:BTMP ;= 7Eh ~ .text:00400f1f e819ffffff CALL scramble ;undefined scramble(char * p, undefin... .text:00400f24 be10000000 MOV argv,0x10 .text:00400f29 bf60316000 MOV argc=>.data:LASTLOG,.data:LASTLOG ;= 3Fh ? .text:00400f2e e80affffff CALL scramble ;undefined scramble(char * p, undefin... .text:00400f33 be11000000 MOV argv,0x11 .text:00400f38 bf80316000 MOV argc=>.data:MESSAGES,.data:MESSAGES ;= E4h .text:00400f3d e8fbfeffff CALL scramble ;undefined scramble(char * p, undefin... .text:00400f42 be0f000000 MOV argv,0xf .text:00400f47 bfa0316000 MOV argc=>.data:SECURE,.data:SECURE ;= A1h .text:00400f4c e8ecfeffff CALL scramble ;undefined scramble(char * p, undefin... .text:00400f51 be0d000000 MOV argv,0xd .text:00400f56 bfb0316000 MOV argc=>.data:WARN,.data:WARN ;= 7Eh ~ .text:00400f5b e8ddfeffff CALL scramble ;undefined scramble(char * p, undefin... .text:00400f60 be0e000000 MOV argv,0xe .text:00400f65 bfbe316000 MOV argc=>.data:DEBUG,.data:DEBUG ;= FCh .text:00400f6a e8cefeffff CALL scramble ;undefined scramble(char * p, undefin... .text:00400f6f be18000000 MOV argv,0x18 .text:00400f74 bfd0316000 MOV argc=>.data:AUDIT0,.data:AUDIT0 ;= 12h .text:00400f79 e8bffeffff CALL scramble ;undefined scramble(char * p, undefin... .text:00400f7e be1a000000 MOV argv,0x1a .text:00400f83 bff0316000 MOV argc=>.data:AUDIT1,.data:AUDIT1 ;= 55h U .text:00400f88 e8b0feffff CALL scramble ;undefined scramble(char * p, undefin... .text:00400f8d be1a000000 MOV argv,0x1a .text:00400f92 bf10326000 MOV argc=>.data:AUDIT2,.data:AUDIT2 ;= 55h U .text:00400f97 e8a1feffff CALL scramble ;undefined scramble(char * p, undefin... .text:00400f9c be11000000 MOV argv,0x11 .text:00400fa1 bf30326000 MOV argc=>.data:AUTHLOG,.data:AUTHLOG ;= E4h .text:00400fa6 e892feffff CALL scramble ;undefined scramble(char * p, undefin... .text:00400fab be1b000000 MOV argv,0x1b .text:00400fb0 bf50326000 MOV argc=>.data:HISTORY,.data:HISTORY ;= 1Ah .text:00400fb5 e883feffff CALL scramble ;undefined scramble(char * p, undefin... .text:00400fba be11000000 MOV argv,0x11 .text:00400fbf bf70326000 MOV argc=>.data:AUTHPRIV,.data:AUTHPRIV ;= E4h .text:00400fc4 e874feffff CALL scramble ;undefined scramble(char * p, undefin... .text:00400fc9 be13000000 MOV argv,0x13 .text:00400fce bf90326000 MOV argc=>.data:DEAMONLOG,.data:DEAMONLOG ;= 27h ' .text:00400fd3 e865feffff CALL scramble ;undefined scramble(char * p, undefin... .text:00400fd8 be0f000000 MOV argv,0xf .text:00400fdd bfb0326000 MOV argc=>.data:SYSLOG,.data:SYSLOG ;= A1h .text:00400fe2 e856feffff CALL scramble ;undefined scramble(char * p, undefin... .text:00400fe7 be07000000 MOV argv,0x7 .text:00400fec bfc0326000 MOV argc=>.data:ACHT...,.data:ACHTdPROZENTs ;= 44h D .text:00400ff1 e847feffff CALL scramble ;undefined scramble(char * p, undefin... .text:00400ff6 be0b000000 MOV argv,0xb .text:00400ffb bfc8326000 MOV argc=>.data:OPTOPTS,.data:OPTOPTS ;= 72h r .text:00401000 e838feffff CALL scramble ;undefined scramble(char * p, undefin... .text:00401005 be07000000 MOV argv,0x7 .text:0040100a bfd4326000 MOV argc=>.data:UIDISPROZD,.data:UIDISPROZD ;= 14h .text:0040100f e829feffff CALL scramble ;undefined scramble(char * p, undefin... .text:00401014 be11000000 MOV argv,0x11 .text:00401019 bfe0326000 MOV argc=>.data:ERRO...,.data:ERRORARGSEXIT ;= AEh .text:0040101e e81afeffff CALL scramble ;undefined scramble(char * p, undefin... .text:00401023 be04000000 MOV argv,0x4 .text:00401028 bff2326000 MOV argc=>.data:ROOT,.data:ROOT ;= 1Bh .text:0040102d e80bfeffff CALL scramble ;undefined scramble(char * p, undefin... .text:00401032 48c745c80... MOV qword ptr [RBP + local_40+0x8],0x0 .text:0040103a 48c745c00... MOV qword ptr [RBP + local_48+0x8],0x0 .text:00401042 48c745b80... MOV qword ptr [RBP + local_50+0x8],0x0 .text:0040104a 48c745b00... MOV qword ptr [RBP + local_58+0x8],0x0 .text:00401052 48c745f80... MOV qword ptr [RBP + filename+0x8],0x0 .text:0040105a c745f0000... MOV dword ptr [RBP + local_18+0x8],0x0 .text:00401061 c745ec000... MOV dword ptr [RBP + local_1c+0x8],0x0 .text:00401068 c745e8000... MOV dword ptr [RBP + local_20+0x8],0x0 .text:0040106f c745e4000... MOV dword ptr [RBP + local_24+0x8],0x0 .text:00401076 c745e0000... MOV dword ptr [RBP + local_28+0x8],0x0 .text:0040107d c745dc000... MOV dword ptr [RBP + local_2c+0x8],0x0 .text:00401084 c745d8000... MOV dword ptr [RBP + local_30+0x8],0x0 .text:0040108b c745d4000... MOV dword ptr [RBP + local_34+0x8],0x0 .text:00401092 bf00000000 MOV argc,0x0 .text:00401097 e814fcffff CALL .plt:time ;time_t time(time_t * __timer) .text:0040109c 4889052d2... MOV qword ptr [.bss:now],RAX .text:004010a3 e9e0000000 JMP LAB_00401188 LAB_004010a8: ;XREF[1,0]: 004011ab .text:004010a8 8b45ac MOV EAX,dword ptr [RBP + opt+0x8] .text:004010ab 83e861 SUB EAX,0x61 .text:004010ae 83f816 CMP EAX,0x16 .text:004010b1 0f87c2000000 JA switchD_004010c1::caseD_63 .text:004010b7 89c0 MOV EAX,EAX .text:004010b9 488b04c58... MOV RAX,qword ptr [->switchD_004010c1::ca...;= 00401170 switchD: ; FWD[10,0]: 004010c3,004010d3,0040113a,00401143 ; 0040114c,00401155,0040115e,00401167 ; 00401170,00401179 .text:004010c1 ffe0 JMP RAX caseD_66: ;XREF[2,0]: 004010c1,004028a8 .text:004010c3 488b053e2... MOV RAX,qword ptr [.bss:optarg] .text:004010ca 488945f8 MOV qword ptr [RBP + filename+0x8],RAX .text:004010ce e9b5000000 JMP LAB_00401188 caseD_74: ;XREF[2,0]: 004010c1,00402918 .text:004010d3 c745f0010... MOV dword ptr [RBP + local_18+0x8],0x1 .text:004010da 488b05272... MOV RAX,qword ptr [.bss:optarg] .text:004010e1 4889c7 MOV argc,RAX .text:004010e4 e827fcffff CALL .plt:atoi ;int atoi(char * __nptr) .text:004010e9 85c0 TEST numberarg,numberarg .text:004010eb 744b JZ LAB_00401138 .text:004010ed 488b05142... MOV numberarg,qword ptr [.bss:optarg] .text:004010f4 4889c7 MOV argc,numberarg .text:004010f7 e814fcffff CALL .plt:atoi ;int atoi(char * __nptr) .text:004010fc 4898 CDQE .text:004010fe 488905cb2... MOV qword ptr [.bss:now],numberarg .text:00401105 488b05c42... MOV numberarg,qword ptr [.bss:now] .text:0040110c 4885c0 TEST numberarg,numberarg .text:0040110f 7e27 JLE LAB_00401138 .text:00401111 488b05b82... MOV numberarg,qword ptr [.bss:now] .text:00401118 483d33080000 CMP numberarg,0x833 .text:0040111e 7f18 JG LAB_00401138 .text:00401120 488b05e12... MOV numberarg,qword ptr [.bss:optarg] .text:00401127 4889c7 MOV argc,numberarg .text:0040112a e8560d0000 CALL settime ;undefined settime() .text:0040112f 4889059a2... MOV qword ptr [.bss:now],numberarg .text:00401136 eb50 JMP LAB_00401188 LAB_00401138: ;XREF[3,0]: 004010eb,0040110f,0040111e .text:00401138 eb4e JMP LAB_00401188 caseD_68: ;XREF[2,0]: 004010c1,004028b8 .text:0040113a c745ec010... MOV dword ptr [RBP + local_1c+0x8],0x1 .text:00401141 eb45 JMP LAB_00401188 caseD_77: ;XREF[2,0]: 004010c1,00402930 .text:00401143 c745e8010... MOV dword ptr [RBP + local_20+0x8],0x1 .text:0040114a eb3c JMP LAB_00401188 caseD_62: ;XREF[2,0]: 004010c1,00402888 .text:0040114c c745e4010... MOV dword ptr [RBP + local_24+0x8],0x1 .text:00401153 eb33 JMP LAB_00401188 caseD_6c: ;XREF[2,0]: 004010c1,004028d8 .text:00401155 c745e0010... MOV dword ptr [RBP + local_28+0x8],0x1 .text:0040115c eb2a JMP LAB_00401188 caseD_6d: ;XREF[2,0]: 004010c1,004028e0 .text:0040115e c745dc010... MOV dword ptr [RBP + local_2c+0x8],0x1 .text:00401165 eb21 JMP LAB_00401188 caseD_73: ;XREF[2,0]: 004010c1,00402910 .text:00401167 c745d8010... MOV dword ptr [RBP + local_30+0x8],0x1 .text:0040116e eb18 JMP LAB_00401188 caseD_61: ;XREF[2,0]: 004010c1,00402880 .text:00401170 c745d4010... MOV dword ptr [RBP + local_34+0x8],0x1 .text:00401177 eb0f JMP LAB_00401188 caseD_64: ;XREF[16,0]: 004010b1,004010c1,00402890,00402898 caseD_65: ; 004028a0,004028b0,004028c0,004028c8 caseD_67: ; 004028d0,004028e8,004028f0,004028f8 caseD_69: ; 00402900,00402908,00402920,00402928 caseD_6a: caseD_6b: caseD_6e: caseD_6f: caseD_70: caseD_71: caseD_72: caseD_75: caseD_76: caseD_63: .text:00401179 e84cfdffff CALL printmessage ;undefined printmessage() .text:0040117e bf01000000 MOV argc,0x1 .text:00401183 e8a8fbffff CALL .plt:exit ;void exit(int __status) LAB_00401188: ;XREF[11,0]: 004010a3,004010ce,00401136,00401138 ; 00401141,0040114a,00401153,0040115c ; 00401165,0040116e,00401177 .text:00401188 488b8d60f... MOV RCX,qword ptr [RBP + local_a8+0x8] .text:0040118f 8b856cffffff MOV numberarg,dword ptr [RBP + local_9c+0x8] .text:00401195 bac8326000 MOV EDX=>.data:OPTOPTS,.data:OPTOPTS ;= 72h r .text:0040119a 4889ce MOV argv,RCX .text:0040119d 89c7 MOV argc,numberarg .text:0040119f e85cfbffff CALL .plt:getopt ;int getopt(int ___argc, char * * ___... .text:004011a4 8945ac MOV dword ptr [RBP + opt+0x8],numberarg .text:004011a7 837dacff CMP dword ptr [RBP + opt+0x8],-0x1 .text:004011ab 0f85f7feffff JNZ LAB_004010a8 .text:004011b1 837dec00 CMP dword ptr [RBP + local_1c+0x8],0x0 .text:004011b5 7529 JNZ LAB_004011e0 .text:004011b7 837de800 CMP dword ptr [RBP + local_20+0x8],0x0 .text:004011bb 7523 JNZ LAB_004011e0 .text:004011bd 837de400 CMP dword ptr [RBP + local_24+0x8],0x0 .text:004011c1 751d JNZ LAB_004011e0 .text:004011c3 837de000 CMP dword ptr [RBP + local_28+0x8],0x0 .text:004011c7 7517 JNZ LAB_004011e0 .text:004011c9 837ddc00 CMP dword ptr [RBP + local_2c+0x8],0x0 .text:004011cd 7511 JNZ LAB_004011e0 .text:004011cf 837dd800 CMP dword ptr [RBP + local_30+0x8],0x0 .text:004011d3 750b JNZ LAB_004011e0 .text:004011d5 837dd400 CMP dword ptr [RBP + local_34+0x8],0x0 .text:004011d9 7505 JNZ LAB_004011e0 .text:004011db e8eafcffff CALL printmessage ;undefined printmessage() LAB_004011e0: ;XREF[7,0]: 004011b5,004011bb,004011c1,004011c7 ; 004011cd,004011d3,004011d9 .text:004011e0 837dec00 CMP dword ptr [RBP + local_1c+0x8],0x0 .text:004011e4 0f8494000000 JZ LAB_0040127e .text:004011ea 8b0510212000 MOV numberarg,dword ptr [.bss:optind] .text:004011f0 83c001 ADD numberarg,0x1 .text:004011f3 3b856cffffff CMP numberarg,dword ptr [RBP + local_9c+0x8] .text:004011f9 7c0f JL LAB_0040120a .text:004011fb e8cafcffff CALL printmessage ;undefined printmessage() .text:00401200 bf01000000 MOV argc,0x1 .text:00401205 e826fbffff CALL .plt:exit ;void exit(int __status) LAB_0040120a: ;XREF[1,0]: 004011f9 .text:0040120a 8b05f0202000 MOV numberarg,dword ptr [.bss:optind] .text:00401210 4898 CDQE .text:00401212 488d14c50... LEA RDX,[numberarg*0x8] .text:0040121a 488b8560f... MOV numberarg,qword ptr [RBP + local_a8+0x8] .text:00401221 4801d0 ADD numberarg,RDX .text:00401224 488b00 MOV numberarg,qword ptr [numberarg] .text:00401227 488945c8 MOV qword ptr [RBP + local_40+0x8],numberarg .text:0040122b 8b05cf202000 MOV numberarg,dword ptr [.bss:optind] .text:00401231 4898 CDQE .text:00401233 4883c001 ADD numberarg,0x1 .text:00401237 488d14c50... LEA RDX,[numberarg*0x8] .text:0040123f 488b8560f... MOV numberarg,qword ptr [RBP + local_a8+0x8] .text:00401246 4801d0 ADD numberarg,RDX .text:00401249 488b00 MOV numberarg,qword ptr [numberarg] .text:0040124c 488945c0 MOV qword ptr [RBP + local_48+0x8],numberarg .text:00401250 48837df800 CMP qword ptr [RBP + filename+0x8],0x0 .text:00401255 7508 JNZ LAB_0040125f .text:00401257 48c745f83... MOV qword ptr [RBP +...,.data:UTMP ;= 7Eh ~ LAB_0040125f: ;XREF[1,0]: 00401255 .text:0040125f 8b4df0 MOV ECX,dword ptr [RBP + local_18+0x8] .text:00401262 488b55c0 MOV RDX,qword ptr [RBP + local_48+0x8] .text:00401266 488b75c8 MOV argv,qword ptr [RBP + local_40+0x8] .text:0040126a 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:0040126e 4889c7 MOV argc=>.data:UTMP,numberarg ;= 7Eh ~ .text:00401271 e894120000 CALL machmitfile ;undefined machmitfile(undefined8 fil... .text:00401276 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:00401279 e9a0070000 JMP LAB_00401a1e LAB_0040127e: ;XREF[1,0]: 004011e4 .text:0040127e 837de800 CMP dword ptr [RBP + local_20+0x8],0x0 .text:00401282 0f8494000000 JZ LAB_0040131c .text:00401288 8b0572202000 MOV numberarg,dword ptr [.bss:optind] .text:0040128e 83c001 ADD numberarg,0x1 .text:00401291 3b856cffffff CMP numberarg,dword ptr [RBP + local_9c+0x8] .text:00401297 7c0f JL LAB_004012a8 .text:00401299 e82cfcffff CALL printmessage ;undefined printmessage() .text:0040129e bf01000000 MOV argc,0x1 .text:004012a3 e888faffff CALL .plt:exit ;void exit(int __status) LAB_004012a8: ;XREF[1,0]: 00401297 .text:004012a8 8b0552202000 MOV numberarg,dword ptr [.bss:optind] .text:004012ae 4898 CDQE .text:004012b0 488d14c50... LEA RDX,[numberarg*0x8] .text:004012b8 488b8560f... MOV numberarg,qword ptr [RBP + local_a8+0x8] .text:004012bf 4801d0 ADD numberarg,RDX .text:004012c2 488b00 MOV numberarg,qword ptr [numberarg] .text:004012c5 488945c8 MOV qword ptr [RBP + local_40+0x8],numberarg .text:004012c9 8b0531202000 MOV numberarg,dword ptr [.bss:optind] .text:004012cf 4898 CDQE .text:004012d1 4883c001 ADD numberarg,0x1 .text:004012d5 488d14c50... LEA RDX,[numberarg*0x8] .text:004012dd 488b8560f... MOV numberarg,qword ptr [RBP + local_a8+0x8] .text:004012e4 4801d0 ADD numberarg,RDX .text:004012e7 488b00 MOV numberarg,qword ptr [numberarg] .text:004012ea 488945c0 MOV qword ptr [RBP + local_48+0x8],numberarg .text:004012ee 48837df800 CMP qword ptr [RBP + filename+0x8],0x0 .text:004012f3 7508 JNZ LAB_004012fd .text:004012f5 48c745f83... MOV qword ptr [RBP +...,.data:WTMP ;= 7Eh ~ LAB_004012fd: ;XREF[1,0]: 004012f3 .text:004012fd 8b4df0 MOV ECX,dword ptr [RBP + local_18+0x8] .text:00401300 488b55c0 MOV RDX,qword ptr [RBP + local_48+0x8] .text:00401304 488b75c8 MOV argv,qword ptr [RBP + local_40+0x8] .text:00401308 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:0040130c 4889c7 MOV argc=>.data:WTMP,numberarg ;= 7Eh ~ .text:0040130f e8f6110000 CALL machmitfile ;undefined machmitfile(undefined8 fil... .text:00401314 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:00401317 e902070000 JMP LAB_00401a1e LAB_0040131c: ;XREF[1,0]: 00401282 .text:0040131c 837de400 CMP dword ptr [RBP + local_24+0x8],0x0 .text:00401320 0f8494000000 JZ LAB_004013ba .text:00401326 8b05d41f2000 MOV numberarg,dword ptr [.bss:optind] .text:0040132c 83c001 ADD numberarg,0x1 .text:0040132f 3b856cffffff CMP numberarg,dword ptr [RBP + local_9c+0x8] .text:00401335 7c0f JL LAB_00401346 .text:00401337 e88efbffff CALL printmessage ;undefined printmessage() .text:0040133c bf01000000 MOV argc,0x1 .text:00401341 e8eaf9ffff CALL .plt:exit ;void exit(int __status) LAB_00401346: ;XREF[1,0]: 00401335 .text:00401346 8b05b41f2000 MOV numberarg,dword ptr [.bss:optind] .text:0040134c 4898 CDQE .text:0040134e 488d14c50... LEA RDX,[numberarg*0x8] .text:00401356 488b8560f... MOV numberarg,qword ptr [RBP + local_a8+0x8] .text:0040135d 4801d0 ADD numberarg,RDX .text:00401360 488b00 MOV numberarg,qword ptr [numberarg] .text:00401363 488945c8 MOV qword ptr [RBP + local_40+0x8],numberarg .text:00401367 8b05931f2000 MOV numberarg,dword ptr [.bss:optind] .text:0040136d 4898 CDQE .text:0040136f 4883c001 ADD numberarg,0x1 .text:00401373 488d14c50... LEA RDX,[numberarg*0x8] .text:0040137b 488b8560f... MOV numberarg,qword ptr [RBP + local_a8+0x8] .text:00401382 4801d0 ADD numberarg,RDX .text:00401385 488b00 MOV numberarg,qword ptr [numberarg] .text:00401388 488945c0 MOV qword ptr [RBP + local_48+0x8],numberarg .text:0040138c 48837df800 CMP qword ptr [RBP + filename+0x8],0x0 .text:00401391 7508 JNZ LAB_0040139b .text:00401393 48c745f84... MOV qword ptr [RBP +...,.data:BTMP ;= 7Eh ~ LAB_0040139b: ;XREF[1,0]: 00401391 .text:0040139b 8b4df0 MOV ECX,dword ptr [RBP + local_18+0x8] .text:0040139e 488b55c0 MOV RDX,qword ptr [RBP + local_48+0x8] .text:004013a2 488b75c8 MOV argv,qword ptr [RBP + local_40+0x8] .text:004013a6 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:004013aa 4889c7 MOV argc=>.data:BTMP,numberarg ;= 7Eh ~ .text:004013ad e858110000 CALL machmitfile ;undefined machmitfile(undefined8 fil... .text:004013b2 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:004013b5 e964060000 JMP LAB_00401a1e LAB_004013ba: ;XREF[1,0]: 00401320 .text:004013ba 837de000 CMP dword ptr [RBP + local_28+0x8],0x0 .text:004013be 7468 JZ LAB_00401428 .text:004013c0 8b053a1f2000 MOV numberarg,dword ptr [.bss:optind] .text:004013c6 3b856cffffff CMP numberarg,dword ptr [RBP + local_9c+0x8] .text:004013cc 7c0f JL LAB_004013dd .text:004013ce e8f7faffff CALL printmessage ;undefined printmessage() .text:004013d3 bf01000000 MOV argc,0x1 .text:004013d8 e853f9ffff CALL .plt:exit ;void exit(int __status) LAB_004013dd: ;XREF[1,0]: 004013cc .text:004013dd 8b051d1f2000 MOV numberarg,dword ptr [.bss:optind] .text:004013e3 4898 CDQE .text:004013e5 488d14c50... LEA RDX,[numberarg*0x8] .text:004013ed 488b8560f... MOV numberarg,qword ptr [RBP + local_a8+0x8] .text:004013f4 4801d0 ADD numberarg,RDX .text:004013f7 488b00 MOV numberarg,qword ptr [numberarg] .text:004013fa 488945c8 MOV qword ptr [RBP + local_40+0x8],numberarg .text:004013fe 48837df800 CMP qword ptr [RBP + filename+0x8],0x0 .text:00401403 7508 JNZ LAB_0040140d .text:00401405 48c745f86... MOV qword ptr [RBP +...,.data:LASTLOG ;= 3Fh ? LAB_0040140d: ;XREF[1,0]: 00401403 .text:0040140d 488b55c8 MOV RDX,qword ptr [RBP + local_40+0x8] .text:00401411 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:00401415 4889d6 MOV argv,RDX .text:00401418 4889c7 MOV argc=>.data:LASTLOG,numberarg ;= 3Fh ? .text:0040141b e803060000 CALL writezerosinfile ;undefined writezerosinfile(undefined... .text:00401420 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:00401423 e9f6050000 JMP LAB_00401a1e LAB_00401428: ;XREF[1,0]: 004013be .text:00401428 837ddc00 CMP dword ptr [RBP + local_2c+0x8],0x0 .text:0040142c 0f84e6000000 JZ LAB_00401518 .text:00401432 8b05c81e2000 MOV numberarg,dword ptr [.bss:optind] .text:00401438 83c003 ADD numberarg,0x3 .text:0040143b 3b856cffffff CMP numberarg,dword ptr [RBP + local_9c+0x8] .text:00401441 7c0f JL LAB_00401452 .text:00401443 e882faffff CALL printmessage ;undefined printmessage() .text:00401448 bf01000000 MOV argc,0x1 .text:0040144d e8def8ffff CALL .plt:exit ;void exit(int __status) LAB_00401452: ;XREF[1,0]: 00401441 .text:00401452 8b05a81e2000 MOV numberarg,dword ptr [.bss:optind] .text:00401458 4898 CDQE .text:0040145a 488d14c50... LEA RDX,[numberarg*0x8] .text:00401462 488b8560f... MOV numberarg,qword ptr [RBP + local_a8+0x8] .text:00401469 4801d0 ADD numberarg,RDX .text:0040146c 488b00 MOV numberarg,qword ptr [numberarg] .text:0040146f 488945c8 MOV qword ptr [RBP + local_40+0x8],numberarg .text:00401473 8b05871e2000 MOV numberarg,dword ptr [.bss:optind] .text:00401479 4898 CDQE .text:0040147b 4883c001 ADD numberarg,0x1 .text:0040147f 488d14c50... LEA RDX,[numberarg*0x8] .text:00401487 488b8560f... MOV numberarg,qword ptr [RBP + local_a8+0x8] .text:0040148e 4801d0 ADD numberarg,RDX .text:00401491 488b00 MOV numberarg,qword ptr [numberarg] .text:00401494 488945c0 MOV qword ptr [RBP + local_48+0x8],numberarg .text:00401498 8b05621e2000 MOV numberarg,dword ptr [.bss:optind] .text:0040149e 4898 CDQE .text:004014a0 4883c002 ADD numberarg,0x2 .text:004014a4 488d14c50... LEA RDX,[numberarg*0x8] .text:004014ac 488b8560f... MOV numberarg,qword ptr [RBP + local_a8+0x8] .text:004014b3 4801d0 ADD numberarg,RDX .text:004014b6 488b00 MOV numberarg,qword ptr [numberarg] .text:004014b9 488945b8 MOV qword ptr [RBP + local_50+0x8],numberarg .text:004014bd 8b053d1e2000 MOV numberarg,dword ptr [.bss:optind] .text:004014c3 4898 CDQE .text:004014c5 4883c003 ADD numberarg,0x3 .text:004014c9 488d14c50... LEA RDX,[numberarg*0x8] .text:004014d1 488b8560f... MOV numberarg,qword ptr [RBP + local_a8+0x8] .text:004014d8 4801d0 ADD numberarg,RDX .text:004014db 488b00 MOV numberarg,qword ptr [numberarg] .text:004014de 488945b0 MOV qword ptr [RBP + local_58+0x8],numberarg .text:004014e2 48837df800 CMP qword ptr [RBP + filename+0x8],0x0 .text:004014e7 7508 JNZ LAB_004014f1 .text:004014e9 48c745f86... MOV qword ptr [RBP +...,.data:LASTLOG ;= 3Fh ? LAB_004014f1: ;XREF[1,0]: 004014e7 .text:004014f1 488b7db0 MOV argc,qword ptr [RBP + local_58+0x8] .text:004014f5 488b4db8 MOV RCX,qword ptr [RBP + local_50+0x8] .text:004014f9 488b55c0 MOV RDX,qword ptr [RBP + local_48+0x8] .text:004014fd 488b75c8 MOV argv,qword ptr [RBP + local_40+0x8] .text:00401501 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:00401505 4989f8 MOV R8,argc .text:00401508 4889c7 MOV argc=>.data:LASTLOG,numberarg ;= 3Fh ? .text:0040150b e8a0060000 CALL FUN_00401bb0 ;undefined FUN_00401bb0() .text:00401510 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:00401513 e906050000 JMP LAB_00401a1e LAB_00401518: ;XREF[1,0]: 0040142c .text:00401518 837dd800 CMP dword ptr [RBP + local_30+0x8],0x0 .text:0040151c 746d JZ LAB_0040158b .text:0040151e 8b05dc1d2000 MOV numberarg,dword ptr [.bss:optind] .text:00401524 3b856cffffff CMP numberarg,dword ptr [RBP + local_9c+0x8] .text:0040152a 7c0f JL LAB_0040153b .text:0040152c e899f9ffff CALL printmessage ;undefined printmessage() .text:00401531 bf01000000 MOV argc,0x1 .text:00401536 e8f5f7ffff CALL .plt:exit ;void exit(int __status) LAB_0040153b: ;XREF[1,0]: 0040152a .text:0040153b 8b05bf1d2000 MOV numberarg,dword ptr [.bss:optind] .text:00401541 4898 CDQE .text:00401543 488d14c50... LEA RDX,[numberarg*0x8] .text:0040154b 488b8560f... MOV numberarg,qword ptr [RBP + local_a8+0x8] .text:00401552 4801d0 ADD numberarg,RDX .text:00401555 488b00 MOV numberarg,qword ptr [numberarg] .text:00401558 488945a0 MOV qword ptr [RBP + local_68+0x8],numberarg .text:0040155c 48837df800 CMP qword ptr [RBP + filename+0x8],0x0 .text:00401561 750a JNZ LAB_0040156d .text:00401563 e862f9ffff CALL printmessage ;undefined printmessage() .text:00401568 e9b1040000 JMP LAB_00401a1e LAB_0040156d: ;XREF[1,0]: 00401561 .text:0040156d 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:00401570 488b4da0 MOV RCX,qword ptr [RBP + local_68+0x8] .text:00401574 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:00401578 4889ce MOV argv,RCX .text:0040157b 4889c7 MOV argc=>.data:LASTLOG,numberarg ;= 3Fh ? .text:0040157e e8530a0000 CALL machshitmitfile ;undefined machshitmitfile() .text:00401583 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:00401586 e993040000 JMP LAB_00401a1e LAB_0040158b: ;XREF[1,0]: 0040151c .text:0040158b 837dd400 CMP dword ptr [RBP + local_34+0x8],0x0 .text:0040158f 0f8489040000 JZ LAB_00401a1e .text:00401595 8b05651d2000 MOV numberarg,dword ptr [.bss:optind] .text:0040159b 83c001 ADD numberarg,0x1 .text:0040159e 3b856cffffff CMP numberarg,dword ptr [RBP + local_9c+0x8] .text:004015a4 7c0f JL LAB_004015b5 .text:004015a6 e81ff9ffff CALL printmessage ;undefined printmessage() .text:004015ab bf01000000 MOV argc,0x1 .text:004015b0 e87bf7ffff CALL .plt:exit ;void exit(int __status) LAB_004015b5: ;XREF[1,0]: 004015a4 .text:004015b5 8b05451d2000 MOV numberarg,dword ptr [.bss:optind] .text:004015bb 4898 CDQE .text:004015bd 488d14c50... LEA RDX,[numberarg*0x8] .text:004015c5 488b8560f... MOV numberarg,qword ptr [RBP + local_a8+0x8] .text:004015cc 4801d0 ADD numberarg,RDX .text:004015cf 488b00 MOV numberarg,qword ptr [numberarg] .text:004015d2 488945c8 MOV qword ptr [RBP + local_40+0x8],numberarg .text:004015d6 8b05241d2000 MOV numberarg,dword ptr [.bss:optind] .text:004015dc 4898 CDQE .text:004015de 4883c001 ADD numberarg,0x1 .text:004015e2 488d14c50... LEA RDX,[numberarg*0x8] .text:004015ea 488b8560f... MOV numberarg,qword ptr [RBP + local_a8+0x8] .text:004015f1 4801d0 ADD numberarg,RDX .text:004015f4 488b00 MOV numberarg,qword ptr [numberarg] .text:004015f7 488945c0 MOV qword ptr [RBP + local_48+0x8],numberarg .text:004015fb 488b45c8 MOV numberarg,qword ptr [RBP + local_40+0x8] .text:004015ff bef2326000 MOV argv=>.data:ROOT,.data:ROOT ;= 1Bh .text:00401604 4889c7 MOV argc,numberarg .text:00401607 e864f6ffff CALL .plt:strcmp ;int strcmp(char * __s1, char * __s2) .text:0040160c 85c0 TEST numberarg,numberarg .text:0040160e 7507 JNZ LAB_00401617 .text:00401610 c745f0010... MOV dword ptr [RBP + local_18+0x8],0x1 LAB_00401617: ;XREF[1,0]: 0040160e .text:00401617 48c745f83... MOV qword ptr [RBP +...,.data:WTMP ;= 7Eh ~ .text:0040161f 8b4df0 MOV ECX,dword ptr [RBP + local_18+0x8] .text:00401622 488b55c0 MOV RDX,qword ptr [RBP + local_48+0x8] .text:00401626 488b75c8 MOV argv,qword ptr [RBP + local_40+0x8] .text:0040162a 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:0040162e 4889c7 MOV argc=>.data:WTMP,numberarg ;= 7Eh ~ .text:00401631 e8d40e0000 CALL machmitfile ;undefined machmitfile(undefined8 fil... .text:00401636 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:00401639 48c745f83... MOV qword ptr [RBP +...,.data:UTMP ;= 7Eh ~ .text:00401641 8b4df0 MOV ECX,dword ptr [RBP + local_18+0x8] .text:00401644 488b55c0 MOV RDX,qword ptr [RBP + local_48+0x8] .text:00401648 488b75c8 MOV argv,qword ptr [RBP + local_40+0x8] .text:0040164c 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:00401650 4889c7 MOV argc=>.data:UTMP,numberarg ;= 7Eh ~ .text:00401653 e8b20e0000 CALL machmitfile ;undefined machmitfile(undefined8 fil... .text:00401658 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:0040165b 48c745f84... MOV qword ptr [RBP +...,.data:BTMP ;= 7Eh ~ .text:00401663 8b4df0 MOV ECX,dword ptr [RBP + local_18+0x8] .text:00401666 488b55c0 MOV RDX,qword ptr [RBP + local_48+0x8] .text:0040166a 488b75c8 MOV argv,qword ptr [RBP + local_40+0x8] .text:0040166e 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:00401672 4889c7 MOV argc=>.data:BTMP,numberarg ;= 7Eh ~ .text:00401675 e8900e0000 CALL machmitfile ;undefined machmitfile(undefined8 fil... .text:0040167a 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:0040167d 48c745f86... MOV qword ptr [RBP +...,.data:LASTLOG ;= 3Fh ? .text:00401685 488b55c8 MOV RDX,qword ptr [RBP + local_40+0x8] .text:00401689 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:0040168d 4889d6 MOV argv,RDX .text:00401690 4889c7 MOV argc=>.data:LASTLOG,numberarg ;= 3Fh ? .text:00401693 e88b030000 CALL writezerosinfile ;undefined writezerosinfile(undefined... .text:00401698 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:0040169b 48c745f88... MOV qword ptr [RBP +...,.data:MESSAGES ;= E4h .text:004016a3 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:004016a6 488b4dc8 MOV RCX,qword ptr [RBP + local_40+0x8] .text:004016aa 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:004016ae 4889ce MOV argv,RCX .text:004016b1 4889c7 MOV argc=>.data:MESSAGES,numberarg ;= E4h .text:004016b4 e81d090000 CALL machshitmitfile ;undefined machshitmitfile() .text:004016b9 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:004016bc 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:004016bf 488b4dc0 MOV RCX,qword ptr [RBP + local_48+0x8] .text:004016c3 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:004016c7 4889ce MOV argv,RCX .text:004016ca 4889c7 MOV argc=>.data:MESSAGES,numberarg ;= E4h .text:004016cd e804090000 CALL machshitmitfile ;undefined machshitmitfile() .text:004016d2 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:004016d5 48c745f8a... MOV qword ptr [RBP +...,.data:SECURE ;= A1h .text:004016dd 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:004016e0 488b4dc8 MOV RCX,qword ptr [RBP + local_40+0x8] .text:004016e4 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:004016e8 4889ce MOV argv,RCX .text:004016eb 4889c7 MOV argc=>.data:SECURE,numberarg ;= A1h .text:004016ee e8e3080000 CALL machshitmitfile ;undefined machshitmitfile() .text:004016f3 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:004016f6 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:004016f9 488b4dc0 MOV RCX,qword ptr [RBP + local_48+0x8] .text:004016fd 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:00401701 4889ce MOV argv,RCX .text:00401704 4889c7 MOV argc=>.data:SECURE,numberarg ;= A1h .text:00401707 e8ca080000 CALL machshitmitfile ;undefined machshitmitfile() .text:0040170c 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:0040170f 48c745f87... MOV qword ptr [RBP +...,.data:AUTHPRIV ;= E4h .text:00401717 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:0040171a 488b4dc8 MOV RCX,qword ptr [RBP + local_40+0x8] .text:0040171e 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:00401722 4889ce MOV argv,RCX .text:00401725 4889c7 MOV argc=>.data:AUTHPRIV,numberarg ;= E4h .text:00401728 e8a9080000 CALL machshitmitfile ;undefined machshitmitfile() .text:0040172d 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:00401730 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:00401733 488b4dc0 MOV RCX,qword ptr [RBP + local_48+0x8] .text:00401737 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:0040173b 4889ce MOV argv,RCX .text:0040173e 4889c7 MOV argc=>.data:AUTHPRIV,numberarg ;= E4h .text:00401741 e890080000 CALL machshitmitfile ;undefined machshitmitfile() .text:00401746 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:00401749 48c745f89... MOV qword ptr [RBP +...,.data:DEAMONLOG ;= 27h ' .text:00401751 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:00401754 488b4dc8 MOV RCX,qword ptr [RBP + local_40+0x8] .text:00401758 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:0040175c 4889ce MOV argv,RCX .text:0040175f 4889c7 MOV argc=>.data:DEAMONLOG,numberarg ;= 27h ' .text:00401762 e86f080000 CALL machshitmitfile ;undefined machshitmitfile() .text:00401767 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:0040176a 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:0040176d 488b4dc0 MOV RCX,qword ptr [RBP + local_48+0x8] .text:00401771 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:00401775 4889ce MOV argv,RCX .text:00401778 4889c7 MOV argc=>.data:DEAMONLOG,numberarg ;= 27h ' .text:0040177b e856080000 CALL machshitmitfile ;undefined machshitmitfile() .text:00401780 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:00401783 48c745f8b... MOV qword ptr [RBP +...,.data:SYSLOG ;= A1h .text:0040178b 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:0040178e 488b4dc8 MOV RCX,qword ptr [RBP + local_40+0x8] .text:00401792 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:00401796 4889ce MOV argv,RCX .text:00401799 4889c7 MOV argc=>.data:SYSLOG,numberarg ;= A1h .text:0040179c e835080000 CALL machshitmitfile ;undefined machshitmitfile() .text:004017a1 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:004017a4 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:004017a7 488b4dc0 MOV RCX,qword ptr [RBP + local_48+0x8] .text:004017ab 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:004017af 4889ce MOV argv,RCX .text:004017b2 4889c7 MOV argc=>.data:SYSLOG,numberarg ;= A1h .text:004017b5 e81c080000 CALL machshitmitfile ;undefined machshitmitfile() .text:004017ba 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:004017bd 48c745f8b... MOV qword ptr [RBP +...,.data:WARN ;= 7Eh ~ .text:004017c5 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:004017c8 488b4dc8 MOV RCX,qword ptr [RBP + local_40+0x8] .text:004017cc 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:004017d0 4889ce MOV argv,RCX .text:004017d3 4889c7 MOV argc=>.data:WARN,numberarg ;= 7Eh ~ .text:004017d6 e8fb070000 CALL machshitmitfile ;undefined machshitmitfile() .text:004017db 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:004017de 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:004017e1 488b4dc0 MOV RCX,qword ptr [RBP + local_48+0x8] .text:004017e5 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:004017e9 4889ce MOV argv,RCX .text:004017ec 4889c7 MOV argc=>.data:WARN,numberarg ;= 7Eh ~ .text:004017ef e8e2070000 CALL machshitmitfile ;undefined machshitmitfile() .text:004017f4 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:004017f7 48c745f8b... MOV qword ptr [RBP +...,.data:DEBUG ;= FCh .text:004017ff 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:00401802 488b4dc8 MOV RCX,qword ptr [RBP + local_40+0x8] .text:00401806 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:0040180a 4889ce MOV argv,RCX .text:0040180d 4889c7 MOV argc=>.data:DEBUG,numberarg ;= FCh .text:00401810 e8c1070000 CALL machshitmitfile ;undefined machshitmitfile() .text:00401815 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:00401818 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:0040181b 488b4dc0 MOV RCX,qword ptr [RBP + local_48+0x8] .text:0040181f 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:00401823 4889ce MOV argv,RCX .text:00401826 4889c7 MOV argc=>.data:DEBUG,numberarg ;= FCh .text:00401829 e8a8070000 CALL machshitmitfile ;undefined machshitmitfile() .text:0040182e 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:00401831 48c745f8d... MOV qword ptr [RBP +...,.data:AUDIT0 ;= 12h .text:00401839 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:0040183c 488b4dc8 MOV RCX,qword ptr [RBP + local_40+0x8] .text:00401840 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:00401844 4889ce MOV argv,RCX .text:00401847 4889c7 MOV argc=>.data:AUDIT0,numberarg ;= 12h .text:0040184a e887070000 CALL machshitmitfile ;undefined machshitmitfile() .text:0040184f 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:00401852 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:00401855 488b4dc0 MOV RCX,qword ptr [RBP + local_48+0x8] .text:00401859 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:0040185d 4889ce MOV argv,RCX .text:00401860 4889c7 MOV argc=>.data:AUDIT0,numberarg ;= 12h .text:00401863 e86e070000 CALL machshitmitfile ;undefined machshitmitfile() .text:00401868 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:0040186b 48c745f8f... MOV qword ptr [RBP +...,.data:AUDIT1 ;= 55h U .text:00401873 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:00401876 488b4dc8 MOV RCX,qword ptr [RBP + local_40+0x8] .text:0040187a 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:0040187e 4889ce MOV argv,RCX .text:00401881 4889c7 MOV argc=>.data:AUDIT1,numberarg ;= 55h U .text:00401884 e84d070000 CALL machshitmitfile ;undefined machshitmitfile() .text:00401889 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:0040188c 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:0040188f 488b4dc0 MOV RCX,qword ptr [RBP + local_48+0x8] .text:00401893 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:00401897 4889ce MOV argv,RCX .text:0040189a 4889c7 MOV argc=>.data:AUDIT1,numberarg ;= 55h U .text:0040189d e834070000 CALL machshitmitfile ;undefined machshitmitfile() .text:004018a2 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:004018a5 48c745f81... MOV qword ptr [RBP +...,.data:AUDIT2 ;= 55h U .text:004018ad 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:004018b0 488b4dc8 MOV RCX,qword ptr [RBP + local_40+0x8] .text:004018b4 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:004018b8 4889ce MOV argv,RCX .text:004018bb 4889c7 MOV argc=>.data:AUDIT2,numberarg ;= 55h U .text:004018be e813070000 CALL machshitmitfile ;undefined machshitmitfile() .text:004018c3 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:004018c6 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:004018c9 488b4dc0 MOV RCX,qword ptr [RBP + local_48+0x8] .text:004018cd 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:004018d1 4889ce MOV argv,RCX .text:004018d4 4889c7 MOV argc=>.data:AUDIT2,numberarg ;= 55h U .text:004018d7 e8fa060000 CALL machshitmitfile ;undefined machshitmitfile() .text:004018dc 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:004018df 48c745f83... MOV qword ptr [RBP +...,.data:AUTHLOG ;= E4h .text:004018e7 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:004018ea 488b4dc8 MOV RCX,qword ptr [RBP + local_40+0x8] .text:004018ee 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:004018f2 4889ce MOV argv,RCX .text:004018f5 4889c7 MOV argc=>.data:AUTHLOG,numberarg ;= E4h .text:004018f8 e8d9060000 CALL machshitmitfile ;undefined machshitmitfile() .text:004018fd 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:00401900 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:00401903 488b4dc0 MOV RCX,qword ptr [RBP + local_48+0x8] .text:00401907 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:0040190b 4889ce MOV argv,RCX .text:0040190e 4889c7 MOV argc=>.data:AUTHLOG,numberarg ;= E4h .text:00401911 e8c0060000 CALL machshitmitfile ;undefined machshitmitfile() .text:00401916 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:00401919 48c745f85... MOV qword ptr [RBP +...,.data:HISTORY ;= 1Ah .text:00401921 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:00401924 488b4dc8 MOV RCX,qword ptr [RBP + local_40+0x8] .text:00401928 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:0040192c 4889ce MOV argv,RCX .text:0040192f 4889c7 MOV argc=>.data:HISTORY,numberarg ;= 1Ah .text:00401932 e89f060000 CALL machshitmitfile ;undefined machshitmitfile() .text:00401937 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:0040193a 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:0040193d 488b4dc0 MOV RCX,qword ptr [RBP + local_48+0x8] .text:00401941 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:00401945 4889ce MOV argv,RCX .text:00401948 4889c7 MOV argc=>.data:HISTORY,numberarg ;= 1Ah .text:0040194b e886060000 CALL machshitmitfile ;undefined machshitmitfile() .text:00401950 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:00401953 488b45c8 MOV numberarg,qword ptr [RBP + local_40+0x8] .text:00401957 4889c7 MOV argc,numberarg .text:0040195a e821f3ffff CALL .plt:getpwnam ;passwd * getpwnam(char * __name) .text:0040195f 48894598 MOV qword ptr [RBP + password+0x8],numberarg .text:00401963 48837d9800 CMP qword ptr [RBP + password+0x8],0x0 .text:00401968 0f84b0000000 JZ LAB_00401a1e .text:0040196e 488b4598 MOV numberarg,qword ptr [RBP + password+0x8] .text:00401972 8b5010 MOV EDX,dword ptr [numberarg + 0x10] .text:00401975 488d8570f... LEA numberarg=>uitistgleich,[RBP + -0x90] .text:0040197c bed4326000 MOV argv=>.data:UIDISPROZD,.data:UIDISPROZD ;= 14h .text:00401981 4889c7 MOV argc,numberarg .text:00401984 b800000000 MOV numberarg,0x0 .text:00401989 e892f3ffff CALL .plt:sprintf ;int sprintf(char * __s, char * __for... .text:0040198e 48c745f8a... MOV qword ptr [RBP +...,.data:SECURE ;= A1h .text:00401996 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:00401999 488d8d70f... LEA RCX=>uitistgleich,[RBP + -0x90] .text:004019a0 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:004019a4 4889ce MOV argv,RCX .text:004019a7 4889c7 MOV argc=>.data:SECURE,numberarg ;= A1h .text:004019aa e827060000 CALL machshitmitfile ;undefined machshitmitfile() .text:004019af 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:004019b2 48c745f8d... MOV qword ptr [RBP +...,.data:AUDIT0 ;= 12h .text:004019ba 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:004019bd 488d8d70f... LEA RCX=>uitistgleich,[RBP + -0x90] .text:004019c4 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:004019c8 4889ce MOV argv,RCX .text:004019cb 4889c7 MOV argc=>.data:AUDIT0,numberarg ;= 12h .text:004019ce e803060000 CALL machshitmitfile ;undefined machshitmitfile() .text:004019d3 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:004019d6 48c745f8f... MOV qword ptr [RBP +...,.data:AUDIT1 ;= 55h U .text:004019de 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:004019e1 488d8d70f... LEA RCX=>uitistgleich,[RBP + -0x90] .text:004019e8 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:004019ec 4889ce MOV argv,RCX .text:004019ef 4889c7 MOV argc=>.data:AUDIT1,numberarg ;= 55h U .text:004019f2 e8df050000 CALL machshitmitfile ;undefined machshitmitfile() .text:004019f7 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg .text:004019fa 48c745f81... MOV qword ptr [RBP +...,.data:AUDIT2 ;= 55h U .text:00401a02 8b55f0 MOV EDX,dword ptr [RBP + local_18+0x8] .text:00401a05 488d8d70f... LEA RCX=>uitistgleich,[RBP + -0x90] .text:00401a0c 488b45f8 MOV numberarg,qword ptr [RBP + filename+0x8] .text:00401a10 4889ce MOV argv,RCX .text:00401a13 4889c7 MOV argc=>.data:AUDIT2,numberarg ;= 55h U .text:00401a16 e8bb050000 CALL machshitmitfile ;undefined machshitmitfile() .text:00401a1b 8945f4 MOV dword ptr [RBP + retval+0x8],numberarg LAB_00401a1e: ;XREF[9,0]: 00401279,00401317,004013b5,00401423 ; 00401513,00401568,00401586,0040158f ; 00401968 .text:00401a1e 8b45f4 MOV numberarg,dword ptr [RBP + retval+0x8] .text:00401a21 c9 LEAVE .text:00401a22 c3 RET ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;undefined writezerosinfile(undefined8 filename, undefined8 username) ;filename undefined8 RDI ;username undefined8 RSI ;local_c undefined4 -c ;XREF[10,0]: 00401a69,00401a6c,00401b09,00401b0c,00401b47 ; 00401b63,00401b70,00401b87,00401b8a,00401bab ;passedstruct undefined8 -18 ;XREF[3,0]: 00401a86,00401a8a,00401b14 ;fh undefined4 -1c ;XREF[6,0]: 00401aaf,00401ab2,00401af0,00401b35,00401b51 ; 00401b66 ;buffer undefined1[... -148 ;XREF[2,0]: 00401a3c,00401b4a ;local_160 undefined8 -160 ;XREF[5,0]: 00401a2e,00401a55,00401a96,00401b73,00401b90 ;local_168 undefined8 -168 ;XREF[2,0]: 00401a35,00401a77 ;XREF[4,0]: 0040141b,00401693,00402970,00402a98 .text:00401a23 55 PUSH RBP .text:00401a24 4889e5 MOV RBP,RSP .text:00401a27 4881ec600... SUB RSP,0x160 .text:00401a2e 4889bda8f... MOV qword ptr [RBP + local_160+0x8],filename .text:00401a35 4889b5a0f... MOV qword ptr [RBP + local_168+0x8],username .text:00401a3c 488d85c0f... LEA RAX=>buffer,[RBP + -0x140] .text:00401a43 ba24010000 MOV EDX,0x124 .text:00401a48 be00000000 MOV username,0x0 .text:00401a4d 4889c7 MOV filename,RAX .text:00401a50 e8cbf1ffff CALL .plt:memset ;void * memset(void * __s, int __c, s... .text:00401a55 488b85a8f... MOV RAX,qword ptr [RBP + local_160+0x8] .text:00401a5c be40346000 MOV username=>.bss:D...,.bss:DAT_00603440 .text:00401a61 4889c7 MOV filename,RAX .text:00401a64 e85f030000 CALL FUN_00401dc8 ;undefined FUN_00401dc8() .text:00401a69 8945fc MOV dword ptr [RBP + local_c+0x8],EAX .text:00401a6c 837dfc00 CMP dword ptr [RBP + local_c+0x8],0x0 .text:00401a70 7905 JNS LAB_00401a77 .text:00401a72 e913010000 JMP LAB_00401b8a LAB_00401a77: ;XREF[1,0]: 00401a70 .text:00401a77 488b85a0f... MOV RAX,qword ptr [RBP + local_168+0x8] .text:00401a7e 4889c7 MOV filename,RAX .text:00401a81 e8faf1ffff CALL .plt:getpwnam ;passwd * getpwnam(char * __name) .text:00401a86 488945f0 MOV qword ptr [RBP + passedstruct+0x8],RAX .text:00401a8a 48837df000 CMP qword ptr [RBP + passedstruct+0x8],0x0 .text:00401a8f 7505 JNZ LAB_00401a96 .text:00401a91 e9f4000000 JMP LAB_00401b8a LAB_00401a96: ;XREF[1,0]: 00401a8f .text:00401a96 488b85a8f... MOV RAX,qword ptr [RBP + local_160+0x8] .text:00401a9d be02000000 MOV username,0x2 .text:00401aa2 4889c7 MOV filename,RAX .text:00401aa5 b800000000 MOV EAX,0x0 .text:00401aaa e841f2ffff CALL .plt:open ;int open(char * __file, int __oflag,... .text:00401aaf 8945ec MOV dword ptr [RBP + fh+0x8],EAX .text:00401ab2 837dec00 CMP dword ptr [RBP + fh+0x8],0x0 .text:00401ab6 7f05 JG LAB_00401abd .text:00401ab8 e9cd000000 JMP LAB_00401b8a LAB_00401abd: ;XREF[1,0]: 00401ab6 .text:00401abd 66c7055a1... MOV word ptr [.bss:DAT_00603320],0x1 .text:00401ac6 48c705571... MOV qword ptr [.bss:DAT_00603328],0x0 .text:00401ad1 66c705481... MOV word ptr [.bss:DAT_00603322],0x0 .text:00401ada 48c7054b1... MOV qword ptr [.bss:DAT_00603330],0x0 .text:00401ae5 e8c6f0ffff CALL .plt:getpid ;__pid_t getpid(void) .text:00401aea 890548182000 MOV dword ptr [.bss:DAT_00603338],EAX .text:00401af0 8b45ec MOV EAX,dword ptr [RBP + fh+0x8] .text:00401af3 ba20336000 MOV EDX=>.bss:DAT_00603320,.bss:DAT_00603320 .text:00401af8 be07000000 MOV username,0x7 .text:00401afd 89c7 MOV filename,EAX .text:00401aff b800000000 MOV EAX,0x0 .text:00401b04 e887f0ffff CALL .plt:fcntl ;int fcntl(int __fd, int __cmd, ...) .text:00401b09 8945fc MOV dword ptr [RBP + local_c+0x8],EAX .text:00401b0c 837dfcff CMP dword ptr [RBP + local_c+0x8],-0x1 .text:00401b10 7502 JNZ LAB_00401b14 .text:00401b12 eb76 JMP LAB_00401b8a LAB_00401b14: ;XREF[1,0]: 00401b10 .text:00401b14 488b45f0 MOV RAX,qword ptr [RBP + passedstruct+0x8] .text:00401b18 8b4010 MOV EAX,dword ptr [RAX + 0x10] .text:00401b1b 89c2 MOV EDX,EAX .text:00401b1d 4889d0 MOV RAX,RDX .text:00401b20 48c1e003 SHL RAX,0x3 .text:00401b24 4801d0 ADD RAX,RDX .text:00401b27 48c1e003 SHL RAX,0x3 .text:00401b2b 4801d0 ADD RAX,RDX .text:00401b2e 48c1e002 SHL RAX,0x2 .text:00401b32 4889c1 MOV RCX,RAX .text:00401b35 8b45ec MOV EAX,dword ptr [RBP + fh+0x8] .text:00401b38 ba00000000 MOV EDX,0x0 .text:00401b3d 4889ce MOV username,RCX .text:00401b40 89c7 MOV filename,EAX .text:00401b42 e8c9f0ffff CALL .plt:lseek ;__off_t lseek(int __fd, __off_t __of... .text:00401b47 8945fc MOV dword ptr [RBP + local_c+0x8],EAX .text:00401b4a 488d8dc0f... LEA RCX=>buffer,[RBP + -0x140] .text:00401b51 8b45ec MOV EAX,dword ptr [RBP + fh+0x8] .text:00401b54 ba24010000 MOV EDX,0x124 .text:00401b59 4889ce MOV username,RCX .text:00401b5c 89c7 MOV filename,EAX .text:00401b5e e83df0ffff CALL .plt:write ;ssize_t write(int __fd, void * __buf... .text:00401b63 8945fc MOV dword ptr [RBP + local_c+0x8],EAX .text:00401b66 8b45ec MOV EAX,dword ptr [RBP + fh+0x8] .text:00401b69 89c7 MOV filename,EAX .text:00401b6b e8c0f0ffff CALL .plt:close ;int close(int __fd) .text:00401b70 8945fc MOV dword ptr [RBP + local_c+0x8],EAX .text:00401b73 488b85a8f... MOV RAX,qword ptr [RBP + local_160+0x8] .text:00401b7a be40346000 MOV username=>.bss:D...,.bss:DAT_00603440 .text:00401b7f 4889c7 MOV filename,RAX .text:00401b82 e873020000 CALL FUN_00401dfa ;undefined FUN_00401dfa() .text:00401b87 8945fc MOV dword ptr [RBP + local_c+0x8],EAX LAB_00401b8a: ;XREF[4,0]: 00401a72,00401a91,00401ab8,00401b12 .text:00401b8a 8b45fc MOV EAX,dword ptr [RBP + local_c+0x8] .text:00401b8d 8d4801 LEA ECX,[RAX + 0x1] .text:00401b90 488b85a8f... MOV RAX,qword ptr [RBP + local_160+0x8] .text:00401b97 4889c2 MOV RDX,RAX .text:00401b9a 89ce MOV username,ECX .text:00401b9c bfc0326000 MOV filename=>.data:...,.data:ACHTdPROZENTs ;= 44h D .text:00401ba1 b800000000 MOV EAX,0x0 .text:00401ba6 e845f0ffff CALL .plt:printf ;int printf(char * __format, ...) .text:00401bab 8b45fc MOV EAX,dword ptr [RBP + local_c+0x8] .text:00401bae c9 LEAVE .text:00401baf c3 RET ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;undefined FUN_00401bb0() ;local_c undefined4 -c ;XREF[10,0]: 00401c0b,00401c0e,00401cab,00401cae,00401d5f ; 00401d7b,00401d88,00401d9f,00401da2,00401dc3 ;local_18 undefined8 -18 ;XREF[3,0]: 00401c28,00401c2c,00401d2c ;local_1c undefined4 -1c ;XREF[6,0]: 00401c51,00401c54,00401c92,00401d4d,00401d69 ; 00401d7e ;local_148 undefined4 -148 ;XREF[5,0]: 00401bde,00401cd2,00401d01,00401d26,00401d62 ;local_160 undefined8 -160 ;XREF[5,0]: 00401bbb,00401bf7,00401c38,00401d8b,00401da8 ;local_168 undefined8 -168 ;XREF[2,0]: 00401bc2,00401c19 ;local_170 undefined8 -170 ;XREF[3,0]: 00401bc9,00401ce8,00401cfa ;local_178 undefined8 -178 ;XREF[3,0]: 00401bd0,00401cb9,00401ccb ;local_180 undefined8 -180 ;XREF[2,0]: 00401bd7,00401d17 ;XREF[3,0]: 0040150b,00402978,00402ab8 .text:00401bb0 55 PUSH RBP .text:00401bb1 4889e5 MOV RBP,RSP .text:00401bb4 4881ec800... SUB RSP,0x180 .text:00401bbb 4889bda8f... MOV qword ptr [RBP + local_160+0x8],RDI .text:00401bc2 4889b5a0f... MOV qword ptr [RBP + local_168+0x8],RSI .text:00401bc9 48899598f... MOV qword ptr [RBP + local_170+0x8],RDX .text:00401bd0 48898d90f... MOV qword ptr [RBP + local_178+0x8],RCX .text:00401bd7 4c898588f... MOV qword ptr [RBP + local_180+0x8],R8 .text:00401bde 488d85c0f... LEA RAX=>local_148,[RBP + -0x140] .text:00401be5 ba24010000 MOV EDX,0x124 .text:00401bea be00000000 MOV ESI,0x0 .text:00401bef 4889c7 MOV RDI,RAX .text:00401bf2 e829f0ffff CALL .plt:memset ;void * memset(void * __s, int __c, s... .text:00401bf7 488b85a8f... MOV RAX,qword ptr [RBP + local_160+0x8] .text:00401bfe be40346000 MOV ESI=>.bss:DAT_00603440,.bss:DAT_00603440 .text:00401c03 4889c7 MOV RDI,RAX .text:00401c06 e8bd010000 CALL FUN_00401dc8 ;undefined FUN_00401dc8() .text:00401c0b 8945fc MOV dword ptr [RBP + local_c+0x8],EAX .text:00401c0e 837dfc00 CMP dword ptr [RBP + local_c+0x8],0x0 .text:00401c12 7905 JNS LAB_00401c19 .text:00401c14 e989010000 JMP LAB_00401da2 LAB_00401c19: ;XREF[1,0]: 00401c12 .text:00401c19 488b85a0f... MOV RAX,qword ptr [RBP + local_168+0x8] .text:00401c20 4889c7 MOV RDI,RAX .text:00401c23 e858f0ffff CALL .plt:getpwnam ;passwd * getpwnam(char * __name) .text:00401c28 488945f0 MOV qword ptr [RBP + local_18+0x8],RAX .text:00401c2c 48837df000 CMP qword ptr [RBP + local_18+0x8],0x0 .text:00401c31 7505 JNZ LAB_00401c38 .text:00401c33 e96a010000 JMP LAB_00401da2 LAB_00401c38: ;XREF[1,0]: 00401c31 .text:00401c38 488b85a8f... MOV RAX,qword ptr [RBP + local_160+0x8] .text:00401c3f be02000000 MOV ESI,0x2 .text:00401c44 4889c7 MOV RDI,RAX .text:00401c47 b800000000 MOV EAX,0x0 .text:00401c4c e89ff0ffff CALL .plt:open ;int open(char * __file, int __oflag,... .text:00401c51 8945ec MOV dword ptr [RBP + local_1c+0x8],EAX .text:00401c54 837dec00 CMP dword ptr [RBP + local_1c+0x8],0x0 .text:00401c58 7f05 JG LAB_00401c5f .text:00401c5a e943010000 JMP LAB_00401da2 LAB_00401c5f: ;XREF[1,0]: 00401c58 .text:00401c5f 66c705d81... MOV word ptr [.bss:DAT_00603340],0x1 .text:00401c68 48c705d51... MOV qword ptr [.bss:DAT_00603348],0x0 .text:00401c73 66c705c61... MOV word ptr [.bss:DAT_00603342],0x0 .text:00401c7c 48c705c91... MOV qword ptr [.bss:DAT_00603350],0x0 .text:00401c87 e824efffff CALL .plt:getpid ;__pid_t getpid(void) .text:00401c8c 8905c6162000 MOV dword ptr [.bss:DAT_00603358],EAX .text:00401c92 8b45ec MOV EAX,dword ptr [RBP + local_1c+0x8] .text:00401c95 ba40336000 MOV EDX=>.bss:DAT_00603340,.bss:DAT_00603340 .text:00401c9a be07000000 MOV ESI,0x7 .text:00401c9f 89c7 MOV EDI,EAX .text:00401ca1 b800000000 MOV EAX,0x0 .text:00401ca6 e8e5eeffff CALL .plt:fcntl ;int fcntl(int __fd, int __cmd, ...) .text:00401cab 8945fc MOV dword ptr [RBP + local_c+0x8],EAX .text:00401cae 837dfcff CMP dword ptr [RBP + local_c+0x8],-0x1 .text:00401cb2 7505 JNZ LAB_00401cb9 .text:00401cb4 e9e9000000 JMP LAB_00401da2 LAB_00401cb9: ;XREF[1,0]: 00401cb2 .text:00401cb9 488b8590f... MOV RAX,qword ptr [RBP + local_178+0x8] .text:00401cc0 4889c7 MOV RDI,RAX .text:00401cc3 e808efffff CALL .plt:strlen ;size_t strlen(char * __s) .text:00401cc8 4889c2 MOV RDX,RAX .text:00401ccb 488b8590f... MOV RAX,qword ptr [RBP + local_178+0x8] .text:00401cd2 488d8dc0f... LEA RCX=>local_148,[RBP + -0x140] .text:00401cd9 4883c104 ADD RCX,0x4 .text:00401cdd 4889c6 MOV RSI,RAX .text:00401ce0 4889cf MOV RDI,RCX .text:00401ce3 e878eeffff CALL .plt:strncpy ;char * strncpy(char * __dest, char *... .text:00401ce8 488b8598f... MOV RAX,qword ptr [RBP + local_170+0x8] .text:00401cef 4889c7 MOV RDI,RAX .text:00401cf2 e8d9eeffff CALL .plt:strlen ;size_t strlen(char * __s) .text:00401cf7 4889c2 MOV RDX,RAX .text:00401cfa 488b8598f... MOV RAX,qword ptr [RBP + local_170+0x8] .text:00401d01 488d8dc0f... LEA RCX=>local_148,[RBP + -0x140] .text:00401d08 4883c124 ADD RCX,0x24 .text:00401d0c 4889c6 MOV RSI,RAX .text:00401d0f 4889cf MOV RDI,RCX .text:00401d12 e849eeffff CALL .plt:strncpy ;char * strncpy(char * __dest, char *... .text:00401d17 488b8588f... MOV RAX,qword ptr [RBP + local_180+0x8] .text:00401d1e 4889c7 MOV RDI,RAX .text:00401d21 e85f010000 CALL settime ;undefined settime() .text:00401d26 8985c0feffff MOV dword ptr [RBP + local_148+0x8],EAX .text:00401d2c 488b45f0 MOV RAX,qword ptr [RBP + local_18+0x8] .text:00401d30 8b4010 MOV EAX,dword ptr [RAX + 0x10] .text:00401d33 89c2 MOV EDX,EAX .text:00401d35 4889d0 MOV RAX,RDX .text:00401d38 48c1e003 SHL RAX,0x3 .text:00401d3c 4801d0 ADD RAX,RDX .text:00401d3f 48c1e003 SHL RAX,0x3 .text:00401d43 4801d0 ADD RAX,RDX .text:00401d46 48c1e002 SHL RAX,0x2 .text:00401d4a 4889c1 MOV RCX,RAX .text:00401d4d 8b45ec MOV EAX,dword ptr [RBP + local_1c+0x8] .text:00401d50 ba00000000 MOV EDX,0x0 .text:00401d55 4889ce MOV RSI,RCX .text:00401d58 89c7 MOV EDI,EAX .text:00401d5a e8b1eeffff CALL .plt:lseek ;__off_t lseek(int __fd, __off_t __of... .text:00401d5f 8945fc MOV dword ptr [RBP + local_c+0x8],EAX .text:00401d62 488d8dc0f... LEA RCX=>local_148,[RBP + -0x140] .text:00401d69 8b45ec MOV EAX,dword ptr [RBP + local_1c+0x8] .text:00401d6c ba24010000 MOV EDX,0x124 .text:00401d71 4889ce MOV RSI,RCX .text:00401d74 89c7 MOV EDI,EAX .text:00401d76 e825eeffff CALL .plt:write ;ssize_t write(int __fd, void * __buf... .text:00401d7b 8945fc MOV dword ptr [RBP + local_c+0x8],EAX .text:00401d7e 8b45ec MOV EAX,dword ptr [RBP + local_1c+0x8] .text:00401d81 89c7 MOV EDI,EAX .text:00401d83 e8a8eeffff CALL .plt:close ;int close(int __fd) .text:00401d88 8945fc MOV dword ptr [RBP + local_c+0x8],EAX .text:00401d8b 488b85a8f... MOV RAX,qword ptr [RBP + local_160+0x8] .text:00401d92 be40346000 MOV ESI=>.bss:DAT_00603440,.bss:DAT_00603440 .text:00401d97 4889c7 MOV RDI,RAX .text:00401d9a e85b000000 CALL FUN_00401dfa ;undefined FUN_00401dfa() .text:00401d9f 8945fc MOV dword ptr [RBP + local_c+0x8],EAX LAB_00401da2: ;XREF[4,0]: 00401c14,00401c33,00401c5a,00401cb4 .text:00401da2 8b45fc MOV EAX,dword ptr [RBP + local_c+0x8] .text:00401da5 8d4801 LEA ECX,[RAX + 0x1] .text:00401da8 488b85a8f... MOV RAX,qword ptr [RBP + local_160+0x8] .text:00401daf 4889c2 MOV RDX,RAX .text:00401db2 89ce MOV ESI,ECX .text:00401db4 bfc0326000 MOV EDI=>.data:ACHTd...,.data:ACHTdPROZENTs ;= 44h D .text:00401db9 b800000000 MOV EAX,0x0 .text:00401dbe e82deeffff CALL .plt:printf ;int printf(char * __format, ...) .text:00401dc3 8b45fc MOV EAX,dword ptr [RBP + local_c+0x8] .text:00401dc6 c9 LEAVE .text:00401dc7 c3 RET ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;undefined FUN_00401dc8() ;local_c undefined4 -c ;XREF[3,0]: 00401deb,00401dee,00401df5 ;local_20 undefined8 -20 ;XREF[2,0]: 00401dd0,00401ddc ;local_28 undefined8 -28 ;XREF[2,0]: 00401dd4,00401dd8 ;XREF[6,0]: 00401a64,00401c06,00402004,0040252d ; 00402980,00402ad8 .text:00401dc8 55 PUSH RBP .text:00401dc9 4889e5 MOV RBP,RSP .text:00401dcc 4883ec20 SUB RSP,0x20 .text:00401dd0 48897de8 MOV qword ptr [RBP + local_20+0x8],RDI .text:00401dd4 488975e0 MOV qword ptr [RBP + local_28+0x8],RSI .text:00401dd8 488b55e0 MOV RDX,qword ptr [RBP + local_28+0x8] .text:00401ddc 488b45e8 MOV RAX,qword ptr [RBP + local_20+0x8] .text:00401de0 4889d6 MOV RSI,RDX .text:00401de3 4889c7 MOV RDI,RAX .text:00401de6 e8650a0000 CALL FUN_00402850 ;undefined FUN_00402850() .text:00401deb 8945fc MOV dword ptr [RBP + local_c+0x8],EAX .text:00401dee 837dfc00 CMP dword ptr [RBP + local_c+0x8],0x0 .text:00401df2 7901 JNS LAB_00401df5 .text:00401df4 90 NOP LAB_00401df5: ;XREF[1,0]: 00401df2 .text:00401df5 8b45fc MOV EAX,dword ptr [RBP + local_c+0x8] .text:00401df8 c9 LEAVE .text:00401df9 c3 RET ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;undefined FUN_00401dfa() ;local_c undefined4 -c ;XREF[5,0]: 00401e58,00401e5b,00401e76,00401e79,00401e80 ;local_10 undefined4 -10 ;XREF[3,0]: 00401e0a,00401e37,00401e47 ;local_14 undefined4 -14 ;XREF[3,0]: 00401e11,00401e41,00401e44 ;local_20 undefined8 -20 ;XREF[1,0]: 00401e2c ;local_28 undefined8 -28 ;XREF[2,0]: 00401e20,00401e63 ;local_30 undefined8 -30 ;XREF[3,0]: 00401e02,00401e4a,00401e67 ;local_38 undefined8 -38 ;XREF[5,0]: 00401e06,00401e18,00401e24,00401e30,00401e3a ;XREF[6,0]: 00401b82,00401d9a,004024e5,004027ab ; 00402988,00402af8 .text:00401dfa 55 PUSH RBP .text:00401dfb 4889e5 MOV RBP,RSP .text:00401dfe 4883ec30 SUB RSP,0x30 .text:00401e02 48897dd8 MOV qword ptr [RBP + local_30+0x8],RDI .text:00401e06 488975d0 MOV qword ptr [RBP + local_38+0x8],RSI .text:00401e0a c745f8000... MOV dword ptr [RBP + local_10+0x8],0x0 .text:00401e11 c745f4000... MOV dword ptr [RBP + local_14+0x8],0x0 .text:00401e18 488b45d0 MOV RAX,qword ptr [RBP + local_38+0x8] .text:00401e1c 488b4048 MOV RAX,qword ptr [RAX + 0x48] .text:00401e20 488945e0 MOV qword ptr [RBP + local_28+0x8],RAX .text:00401e24 488b45d0 MOV RAX,qword ptr [RBP + local_38+0x8] .text:00401e28 488b4058 MOV RAX,qword ptr [RAX + 0x58] .text:00401e2c 488945e8 MOV qword ptr [RBP + local_20+0x8],RAX .text:00401e30 488b45d0 MOV RAX,qword ptr [RBP + local_38+0x8] .text:00401e34 8b401c MOV EAX,dword ptr [RAX + 0x1c] .text:00401e37 8945f8 MOV dword ptr [RBP + local_10+0x8],EAX .text:00401e3a 488b45d0 MOV RAX,qword ptr [RBP + local_38+0x8] .text:00401e3e 8b4020 MOV EAX,dword ptr [RAX + 0x20] .text:00401e41 8945f4 MOV dword ptr [RBP + local_14+0x8],EAX .text:00401e44 8b55f4 MOV EDX,dword ptr [RBP + local_14+0x8] .text:00401e47 8b4df8 MOV ECX,dword ptr [RBP + local_10+0x8] .text:00401e4a 488b45d8 MOV RAX,qword ptr [RBP + local_30+0x8] .text:00401e4e 89ce MOV ESI,ECX .text:00401e50 4889c7 MOV RDI,RAX .text:00401e53 e888eeffff CALL .plt:chown ;int chown(char * __file, __uid_t __o... .text:00401e58 8945fc MOV dword ptr [RBP + local_c+0x8],EAX .text:00401e5b 837dfc00 CMP dword ptr [RBP + local_c+0x8],0x0 .text:00401e5f 7902 JNS LAB_00401e63 .text:00401e61 eb1d JMP LAB_00401e80 LAB_00401e63: ;XREF[1,0]: 00401e5f .text:00401e63 488d55e0 LEA RDX=>local_28,[RBP + -0x20] .text:00401e67 488b45d8 MOV RAX,qword ptr [RBP + local_30+0x8] .text:00401e6b 4889d6 MOV RSI,RDX .text:00401e6e 4889c7 MOV RDI,RAX .text:00401e71 e8caecffff CALL .plt:utime ;int utime(char * __file, utimbuf * _... .text:00401e76 8945fc MOV dword ptr [RBP + local_c+0x8],EAX .text:00401e79 837dfc00 CMP dword ptr [RBP + local_c+0x8],0x0 .text:00401e7d 7901 JNS LAB_00401e80 .text:00401e7f 90 NOP LAB_00401e80: ;XREF[2,0]: 00401e61,00401e7d .text:00401e80 8b45fc MOV EAX,dword ptr [RBP + local_c+0x8] .text:00401e83 c9 LEAVE .text:00401e84 c3 RET ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;undefined settime() ;local_28 undefined4 -28 ;XREF[1,0]: 00401ea7 ;local_34 undefined4 -34 ;XREF[1,0]: 00401eca ;local_38 undefined4 -38 ;XREF[1,0]: 00401f01 ;local_3c undefined4 -3c ;XREF[1,0]: 00401f35 ;local_40 undefined4 -40 ;XREF[1,0]: 00401f65 ;local_44 undefined4 -44 ;XREF[1,0]: 00401f95 ;local_48 undefined4 -48 ;XREF[3,0]: 00401e91,00401fc5,00401fc8 ;local_50 undefined8 -50 ;XREF[28,0]: 00401e8d,00401eae,00401eb9,00401ecd,00401ede ; 00401ee2,00401eed,00401ef2,00401f04,00401f15 ; 00401f19,00401f24,00401f29,00401f38,00401f49 ; 00401f4d,00401f54,00401f59,00401f68,00401f79 ; 00401f7d,00401f84,00401f89,00401f98,00401fa9 ; 00401fad,00401fb4,00401fb9 ;XREF[4,0]: 0040112a,00401d21,00402990,00402b18 .text:00401e85 55 PUSH RBP .text:00401e86 4889e5 MOV RBP,RSP .text:00401e89 4883ec50 SUB RSP,0x50 .text:00401e8d 48897db8 MOV qword ptr [RBP + local_50+0x8],RDI .text:00401e91 488d45c0 LEA RAX=>local_48,[RBP + -0x40] .text:00401e95 ba38000000 MOV EDX,0x38 .text:00401e9a be00000000 MOV ESI,0x0 .text:00401e9f 4889c7 MOV RDI,RAX .text:00401ea2 e879edffff CALL .plt:memset ;void * memset(void * __s, int __c, s... .text:00401ea7 c745e0010... MOV dword ptr [RBP + local_28+0x8],0x1 .text:00401eae 48837db800 CMP qword ptr [RBP + local_50+0x8],0x0 .text:00401eb3 0f840f010000 JZ LAB_00401fc8 .text:00401eb9 488b45b8 MOV RAX,qword ptr [RBP + local_50+0x8] .text:00401ebd 4889c7 MOV RDI,RAX .text:00401ec0 e84beeffff CALL .plt:atoi ;int atoi(char * __nptr) .text:00401ec5 2d6c070000 SUB EAX,0x76c .text:00401eca 8945d4 MOV dword ptr [RBP + local_34+0x8],EAX .text:00401ecd 488b45b8 MOV RAX,qword ptr [RBP + local_50+0x8] .text:00401ed1 be2d000000 MOV ESI,0x2d .text:00401ed6 4889c7 MOV RDI,RAX .text:00401ed9 e802edffff CALL .plt:strchr ;char * strchr(char * __s, int __c) .text:00401ede 488945b8 MOV qword ptr [RBP + local_50+0x8],RAX .text:00401ee2 48837db800 CMP qword ptr [RBP + local_50+0x8],0x0 .text:00401ee7 0f84db000000 JZ LAB_00401fc8 .text:00401eed 488345b801 ADD qword ptr [RBP + local_50+0x8],0x1 .text:00401ef2 488b45b8 MOV RAX,qword ptr [RBP + local_50+0x8] .text:00401ef6 4889c7 MOV RDI,RAX .text:00401ef9 e812eeffff CALL .plt:atoi ;int atoi(char * __nptr) .text:00401efe 83e801 SUB EAX,0x1 .text:00401f01 8945d0 MOV dword ptr [RBP + local_38+0x8],EAX .text:00401f04 488b45b8 MOV RAX,qword ptr [RBP + local_50+0x8] .text:00401f08 be2d000000 MOV ESI,0x2d .text:00401f0d 4889c7 MOV RDI,RAX .text:00401f10 e8cbecffff CALL .plt:strchr ;char * strchr(char * __s, int __c) .text:00401f15 488945b8 MOV qword ptr [RBP + local_50+0x8],RAX .text:00401f19 48837db800 CMP qword ptr [RBP + local_50+0x8],0x0 .text:00401f1e 0f84a4000000 JZ LAB_00401fc8 .text:00401f24 488345b801 ADD qword ptr [RBP + local_50+0x8],0x1 .text:00401f29 488b45b8 MOV RAX,qword ptr [RBP + local_50+0x8] .text:00401f2d 4889c7 MOV RDI,RAX .text:00401f30 e8dbedffff CALL .plt:atoi ;int atoi(char * __nptr) .text:00401f35 8945cc MOV dword ptr [RBP + local_3c+0x8],EAX .text:00401f38 488b45b8 MOV RAX,qword ptr [RBP + local_50+0x8] .text:00401f3c be2d000000 MOV ESI,0x2d .text:00401f41 4889c7 MOV RDI,RAX .text:00401f44 e897ecffff CALL .plt:strchr ;char * strchr(char * __s, int __c) .text:00401f49 488945b8 MOV qword ptr [RBP + local_50+0x8],RAX .text:00401f4d 48837db800 CMP qword ptr [RBP + local_50+0x8],0x0 .text:00401f52 7474 JZ LAB_00401fc8 .text:00401f54 488345b801 ADD qword ptr [RBP + local_50+0x8],0x1 .text:00401f59 488b45b8 MOV RAX,qword ptr [RBP + local_50+0x8] .text:00401f5d 4889c7 MOV RDI,RAX .text:00401f60 e8abedffff CALL .plt:atoi ;int atoi(char * __nptr) .text:00401f65 8945c8 MOV dword ptr [RBP + local_40+0x8],EAX .text:00401f68 488b45b8 MOV RAX,qword ptr [RBP + local_50+0x8] .text:00401f6c be3a000000 MOV ESI,0x3a .text:00401f71 4889c7 MOV RDI,RAX .text:00401f74 e867ecffff CALL .plt:strchr ;char * strchr(char * __s, int __c) .text:00401f79 488945b8 MOV qword ptr [RBP + local_50+0x8],RAX .text:00401f7d 48837db800 CMP qword ptr [RBP + local_50+0x8],0x0 .text:00401f82 7444 JZ LAB_00401fc8 .text:00401f84 488345b801 ADD qword ptr [RBP + local_50+0x8],0x1 .text:00401f89 488b45b8 MOV RAX,qword ptr [RBP + local_50+0x8] .text:00401f8d 4889c7 MOV RDI,RAX .text:00401f90 e87bedffff CALL .plt:atoi ;int atoi(char * __nptr) .text:00401f95 8945c4 MOV dword ptr [RBP + local_44+0x8],EAX .text:00401f98 488b45b8 MOV RAX,qword ptr [RBP + local_50+0x8] .text:00401f9c be3a000000 MOV ESI,0x3a .text:00401fa1 4889c7 MOV RDI,RAX .text:00401fa4 e837ecffff CALL .plt:strchr ;char * strchr(char * __s, int __c) .text:00401fa9 488945b8 MOV qword ptr [RBP + local_50+0x8],RAX .text:00401fad 48837db800 CMP qword ptr [RBP + local_50+0x8],0x0 .text:00401fb2 7414 JZ LAB_00401fc8 .text:00401fb4 488345b801 ADD qword ptr [RBP + local_50+0x8],0x1 .text:00401fb9 488b45b8 MOV RAX,qword ptr [RBP + local_50+0x8] .text:00401fbd 4889c7 MOV RDI,RAX .text:00401fc0 e84bedffff CALL .plt:atoi ;int atoi(char * __nptr) .text:00401fc5 8945c0 MOV dword ptr [RBP + local_48+0x8],EAX LAB_00401fc8: ;XREF[6,0]: 00401eb3,00401ee7,00401f1e,00401f52 ; 00401f82,00401fb2 .text:00401fc8 488d45c0 LEA RAX=>local_48,[RBP + -0x40] .text:00401fcc 4889c7 MOV RDI,RAX .text:00401fcf e8fcecffff CALL .plt:mktime ;time_t mktime(tm * __tp) .text:00401fd4 c9 LEAVE .text:00401fd5 c3 RET ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;undefined machshitmitfile() ;readfromfh undefined8 RAX ;XREF[1,0]: 004020ee ;local_c undefined4 -c ;XREF[19,0]: 0040211b,00402124,00402145,00402163,00402169 ; 0040216d,00402237,0040226c,004022b7,004022bb ; 004022cf,004022e2,00402359,0040235d,00402404 ; 00402409,0040242a,00402440,00402444 ;local_10 undefined4 -10 ;XREF[5,0]: 00402009,0040200c,0040208a,0040208d,00402505 ;local_14 undefined4 -14 ;XREF[7,0]: 0040210d,0040215d,00402166,00402185,0040218e ; 0040245d,00402462 ;local_18 undefined4 -18 ;XREF[7,0]: 00402114,00402138,00402157,00402175,0040218b ; 004023f5,00402447 ;local_20 undefined8 -20 ;XREF[9,0]: 00402195,004021b3,004021f8,00402294,00402336 ; 00402393,004023a8,004023b9,004023e1 ;local_24 undefined4 -24 ;XREF[4,0]: 00402199,004021e3,004023cc,004023e5 ;local_28 undefined4 -28 ;XREF[8,0]: 004021a0,0040238d,004023a1,004023ef,004023f8 ; 004023fb,00402401,00402454 ;local_2c undefined4 -2c ;XREF[3,0]: 004021a7,00402389,004024f1 ;local_38 undefined8 -38 ;XREF[9,0]: 004021b7,004021bd,004021c2,004021cd,004021d8 ; 004021ea,004023a4,004023d2,004023d9 ;local_3c undefined4 -3c ;XREF[5,0]: 00402219,004022ae,004022c5,00402350,00402376 ;local_40 undefined4 -40 ;XREF[3,0]: 0040236a,0040237c,00402383 ;local_44 undefined4 -44 ;XREF[6,0]: 004023fe,0040241d,0040243c,0040244c,00402483 ; 004024ad ;local_48 undefined4 -48 ;XREF[6,0]: 00402457,0040245a,00402465,00402468,00402480 ; 00402493 ;fh undefined4 -4c ;XREF[11,0]: 00402030,00402033,00402071,00402098,004020c8 ; 004020e6,004020fe,0040246e,004024a0,004024b3 ; 004024cc ;local_50 undefined4 -50 ;XREF[6,0]: 004020ac,004020af,004020dc,004020f9,00402170 ; 0040244f ;local_58 undefined8 -58 ;XREF[13,0]: 004020c4,004020e2,0040212a,0040213e,0040214b ; 0040217b,00402191,00402397,0040240f,00402423 ; 00402430,00402499,004024c0 ;local_5c undefined4 -5c ;XREF[2,0]: 004020f3,004020f6 ;local_68 undefined8 -68 ;XREF[2,0]: 00402207,0040220b ;local_6c undefined4 -6c ;XREF[3,0]: 00402216,00402220,00402367 ;local_78 undefined8 -78 ;XREF[2,0]: 004022a3,004022a7 ;local_80 undefined8 -80 ;XREF[2,0]: 00402345,00402349 ;local_84 undefined4 -84 ;XREF[2,0]: 0040248a,0040248d ;local_90 undefined8 -90 ;XREF[2,0]: 004022f9,00402300 ;local_108 undefined1 -108 ;XREF[1,0]: 00402324 ;local_114 undefined1 -114 ;XREF[1,0]: 00402332 ;local_118 undefined1 -118 ;XREF[2,0]: 00402312,0040232b ;local_198 undefined1 -198 ;XREF[2,0]: 00402274,0040228d ;local_1a0 undefined8 -1a0 ;XREF[5,0]: 00401fe1,00401ff5,00402017,004024d6,004024ea ;local_1a8 undefined8 -1a8 ;XREF[2,0]: 00401fe8,004021f1 ;local_1ac undefined4 -1ac ;XREF[3,0]: 00401fef,0040222a,0040236d ;XREF[31,0]: 0040157e,004016b4,004016cd,004016ee ; 00401707,00401728,00401741,00401762 ; 0040177b,0040179c,004017b5,004017d6 ; 004017ef,00401810,00401829,0040184a ; 00401863,00401884,0040189d,004018be ; 004018d7,004018f8,00401911,00401932 ; 0040194b,004019aa,004019ce,004019f2 ; 00401a16,00402998,00402b38 .text:00401fd6 55 PUSH RBP .text:00401fd7 4889e5 MOV RBP,RSP .text:00401fda 4881ecb00... SUB RSP,0x1b0 .text:00401fe1 4889bd68f... MOV qword ptr [RBP + local_1a0+0x8],RDI .text:00401fe8 4889b560f... MOV qword ptr [RBP + local_1a8+0x8],RSI .text:00401fef 89955cfeffff MOV dword ptr [RBP + local_1ac+0x8],EDX .text:00401ff5 488b8568f... MOV RAX,qword ptr [RBP + local_1a0+0x8] .text:00401ffc be40346000 MOV ESI=>.bss:DAT_00603440,.bss:DAT_00603440 .text:00402001 4889c7 MOV RDI,RAX .text:00402004 e8bffdffff CALL FUN_00401dc8 ;undefined FUN_00401dc8() .text:00402009 8945f8 MOV dword ptr [RBP + local_10+0x8],EAX .text:0040200c 837df800 CMP dword ptr [RBP + local_10+0x8],0x0 .text:00402010 7905 JNS LAB_00402017 .text:00402012 e9d3040000 JMP LAB_004024ea LAB_00402017: ;XREF[1,0]: 00402010 .text:00402017 488b8568f... MOV RAX,qword ptr [RBP + local_1a0+0x8] .text:0040201e be02000000 MOV ESI,0x2 .text:00402023 4889c7 MOV RDI,RAX .text:00402026 b800000000 MOV EAX,0x0 .text:0040202b e8c0ecffff CALL .plt:open ;int open(char * __file, int __oflag,... .text:00402030 8945bc MOV dword ptr [RBP + fh+0x8],EAX .text:00402033 837dbc00 CMP dword ptr [RBP + fh+0x8],0x0 .text:00402037 7f05 JG LAB_0040203e .text:00402039 e9ac040000 JMP LAB_004024ea LAB_0040203e: ;XREF[1,0]: 00402037 .text:0040203e 66c705191... MOV word ptr [.bss:DAT_00603360],0x1 .text:00402047 48c705161... MOV qword ptr [.bss:DAT_00603368],0x0 .text:00402052 66c705071... MOV word ptr [.bss:DAT_00603362],0x0 .text:0040205b 48c7050a1... MOV qword ptr [.bss:DAT_00603370],0x0 .text:00402066 e845ebffff CALL .plt:getpid ;__pid_t getpid(void) .text:0040206b 890507132000 MOV dword ptr [.bss:pid],EAX .text:00402071 8b45bc MOV EAX,dword ptr [RBP + fh+0x8] .text:00402074 ba60336000 MOV EDX=>.bss:DAT_00603360,.bss:DAT_00603360 .text:00402079 be07000000 MOV ESI,0x7 .text:0040207e 89c7 MOV EDI,EAX .text:00402080 b800000000 MOV EAX,0x0 .text:00402085 e806ebffff CALL .plt:fcntl ;int fcntl(int __fd, int __cmd, ...) .text:0040208a 8945f8 MOV dword ptr [RBP + local_10+0x8],EAX .text:0040208d 837df8ff CMP dword ptr [RBP + local_10+0x8],-0x1 .text:00402091 7505 JNZ LAB_00402098 .text:00402093 e952040000 JMP LAB_004024ea LAB_00402098: ;XREF[1,0]: 00402091 .text:00402098 8b45bc MOV EAX,dword ptr [RBP + fh+0x8] .text:0040209b ba02000000 MOV EDX,0x2 .text:004020a0 be00000000 MOV ESI,0x0 .text:004020a5 89c7 MOV EDI,EAX .text:004020a7 e864ebffff CALL .plt:lseek ;__off_t lseek(int __fd, __off_t __of... .text:004020ac 8945b8 MOV dword ptr [RBP + local_50+0x8],EAX .text:004020af 8b45b8 MOV EAX,dword ptr [RBP + local_50+0x8] .text:004020b2 83c001 ADD EAX,0x1 .text:004020b5 4898 CDQE .text:004020b7 be01000000 MOV ESI,0x1 .text:004020bc 4889c7 MOV RDI,RAX .text:004020bf e89cebffff CALL .plt:calloc ;void * calloc(size_t __nmemb, size_t... .text:004020c4 488945b0 MOV qword ptr [RBP + local_58+0x8],RAX .text:004020c8 8b45bc MOV EAX,dword ptr [RBP + fh+0x8] .text:004020cb ba00000000 MOV EDX,0x0 .text:004020d0 be00000000 MOV ESI,0x0 .text:004020d5 89c7 MOV EDI,EAX .text:004020d7 e834ebffff CALL .plt:lseek ;__off_t lseek(int __fd, __off_t __of... .text:004020dc 8b45b8 MOV EAX,dword ptr [RBP + local_50+0x8] .text:004020df 4863d0 MOVSXD RDX,EAX .text:004020e2 488b4db0 MOV RCX,qword ptr [RBP + local_58+0x8] .text:004020e6 8b45bc MOV EAX,dword ptr [RBP + fh+0x8] .text:004020e9 4889ce MOV RSI,RCX .text:004020ec 89c7 MOV EDI,EAX .text:004020ee e84debffff CALL .plt:read ;ssize_t read(int __fd, void * __buf,... .text:004020f3 8945ac MOV dword ptr [RBP +...,readfromfh .text:004020f6 8b45ac MOV readfromfh,dword ptr [RBP + local_5c+... .text:004020f9 3b45b8 CMP readfromfh,dword ptr [RBP + local_50+... .text:004020fc 740f JZ LAB_0040210d .text:004020fe 8b45bc MOV readfromfh,dword ptr [RBP + fh+0x8] .text:00402101 89c7 MOV EDI,readfromfh .text:00402103 e828ebffff CALL .plt:close ;int close(int __fd) .text:00402108 e9dd030000 JMP LAB_004024ea LAB_0040210d: ;XREF[1,0]: 004020fc .text:0040210d c745f4fff... MOV dword ptr [RBP +...,0xffffffff .text:00402114 c745f0000... MOV dword ptr [RBP + local_18+0x8],0x0 .text:0040211b c745fc000... MOV dword ptr [RBP + local_c+0x8],0x0 .text:00402122 eb49 JMP LAB_0040216d LAB_00402124: ;XREF[1,0]: 00402173 .text:00402124 8b45fc MOV readfromfh,dword ptr [RBP + local_c+0x8] .text:00402127 4863d0 MOVSXD RDX,readfromfh .text:0040212a 488b45b0 MOV readfromfh,qword ptr [RBP + local_58+... .text:0040212e 4801d0 ADD readfromfh,RDX .text:00402131 0fb600 MOVZX readfromfh,byte ptr [readfromfh] .text:00402134 84c0 TEST readfromfh,readfromfh .text:00402136 7425 JZ LAB_0040215d .text:00402138 8b45f0 MOV readfromfh,dword ptr [RBP + local_18+... .text:0040213b 4863d0 MOVSXD RDX,readfromfh .text:0040213e 488b45b0 MOV readfromfh,qword ptr [RBP + local_58+... .text:00402142 4801c2 ADD RDX,readfromfh .text:00402145 8b45fc MOV readfromfh,dword ptr [RBP + local_c+0x8] .text:00402148 4863c8 MOVSXD RCX,readfromfh .text:0040214b 488b45b0 MOV readfromfh,qword ptr [RBP + local_58+... .text:0040214f 4801c8 ADD readfromfh,RCX .text:00402152 0fb600 MOVZX readfromfh,byte ptr [readfromfh] .text:00402155 8802 MOV byte ptr [RDX],readfromfh .text:00402157 8345f001 ADD dword ptr [RBP + local_18+0x8],0x1 .text:0040215b eb0c JMP LAB_00402169 LAB_0040215d: ;XREF[1,0]: 00402136 .text:0040215d 837df4ff CMP dword ptr [RBP + local_14+0x8],-0x1 .text:00402161 7506 JNZ LAB_00402169 .text:00402163 8b45fc MOV readfromfh,dword ptr [RBP + local_c+0x8] .text:00402166 8945f4 MOV dword ptr [RBP +...,readfromfh LAB_00402169: ;XREF[2,0]: 0040215b,00402161 .text:00402169 8345fc01 ADD dword ptr [RBP + local_c+0x8],0x1 LAB_0040216d: ;XREF[1,0]: 00402122 .text:0040216d 8b45fc MOV readfromfh,dword ptr [RBP + local_c+0x8] .text:00402170 3b45b8 CMP readfromfh,dword ptr [RBP + local_50+... .text:00402173 7caf JL LAB_00402124 .text:00402175 8b45f0 MOV readfromfh,dword ptr [RBP + local_18+... .text:00402178 4863d0 MOVSXD RDX,readfromfh .text:0040217b 488b45b0 MOV readfromfh,qword ptr [RBP + local_58+... .text:0040217f 4801d0 ADD readfromfh,RDX .text:00402182 c60000 MOV byte ptr [readfromfh],0x0 .text:00402185 837df4ff CMP dword ptr [RBP + local_14+0x8],-0x1 .text:00402189 7506 JNZ LAB_00402191 .text:0040218b 8b45f0 MOV readfromfh,dword ptr [RBP + local_18+... .text:0040218e 8945f4 MOV dword ptr [RBP +...,readfromfh LAB_00402191: ;XREF[1,0]: 00402189 .text:00402191 488b45b0 MOV readfromfh,qword ptr [RBP + local_58+... .text:00402195 488945e8 MOV qword ptr [RBP +...,readfromfh .text:00402199 c745e4000... MOV dword ptr [RBP + local_24+0x8],0x0 .text:004021a0 c745e0fff... MOV dword ptr [RBP +...,0xffffffff .text:004021a7 c745dc000... MOV dword ptr [RBP + local_2c+0x8],0x0 .text:004021ae e932020000 JMP LAB_004023e5 LAB_004021b3: ;XREF[1,0]: 004023e9 .text:004021b3 488b45e8 MOV readfromfh,qword ptr [RBP + local_20+... .text:004021b7 488945d0 MOV qword ptr [RBP +...,readfromfh .text:004021bb eb05 JMP LAB_004021c2 LAB_004021bd: ;XREF[1,0]: 004021d6 .text:004021bd 488345d001 ADD qword ptr [RBP + local_38+0x8],0x1 LAB_004021c2: ;XREF[1,0]: 004021bb .text:004021c2 488b45d0 MOV readfromfh,qword ptr [RBP + local_38+... .text:004021c6 0fb600 MOVZX readfromfh,byte ptr [readfromfh] .text:004021c9 3c0a CMP readfromfh,0xa .text:004021cb 740b JZ LAB_004021d8 .text:004021cd 488b45d0 MOV readfromfh,qword ptr [RBP + local_38+... .text:004021d1 0fb600 MOVZX readfromfh,byte ptr [readfromfh] .text:004021d4 84c0 TEST readfromfh,readfromfh .text:004021d6 75e5 JNZ LAB_004021bd LAB_004021d8: ;XREF[1,0]: 004021cb .text:004021d8 488b45d0 MOV readfromfh,qword ptr [RBP + local_38+... .text:004021dc 0fb600 MOVZX readfromfh,byte ptr [readfromfh] .text:004021df 84c0 TEST readfromfh,readfromfh .text:004021e1 7507 JNZ LAB_004021ea .text:004021e3 c745e4010... MOV dword ptr [RBP + local_24+0x8],0x1 LAB_004021ea: ;XREF[1,0]: 004021e1 .text:004021ea 488b45d0 MOV readfromfh,qword ptr [RBP + local_38+... .text:004021ee c60000 MOV byte ptr [readfromfh],0x0 .text:004021f1 488b9560f... MOV RDX,qword ptr [RBP + local_1a8+0x8] .text:004021f8 488b45e8 MOV readfromfh,qword ptr [RBP + local_20+... .text:004021fc 4889d6 MOV RSI,RDX .text:004021ff 4889c7 MOV RDI,readfromfh .text:00402202 e839ebffff CALL .plt:strstr ;char * strstr(char * __haystack, cha... .text:00402207 488945a0 MOV qword ptr [RBP +...,readfromfh .text:0040220b 48837da000 CMP qword ptr [RBP + local_68+0x8],0x0 .text:00402210 0f95c0 SETNZ readfromfh .text:00402213 0fb6c0 MOVZX readfromfh,readfromfh .text:00402216 89459c MOV dword ptr [RBP +...,readfromfh .text:00402219 c745cc000... MOV dword ptr [RBP + local_3c+0x8],0x0 .text:00402220 837d9c00 CMP dword ptr [RBP + local_6c+0x8],0x0 .text:00402224 0f843d010000 JZ LAB_00402367 .text:0040222a 83bd5cfef... CMP dword ptr [RBP + local_1ac+0x8],0x0 .text:00402231 0f8430010000 JZ LAB_00402367 .text:00402237 c745fc000... MOV dword ptr [RBP + local_c+0x8],0x0 .text:0040223e eb7b JMP LAB_004022bb LAB_00402240: ;XREF[1,0]: 004022bf .text:00402240 488b0d891... MOV RCX,qword ptr [.bss:now] .text:00402247 48ba0bd7a... MOV RDX,-0x5c28f5c28f5c28f5 .text:00402251 4889c8 MOV readfromfh,RCX .text:00402254 48f7ea IMUL RDX .text:00402257 488d040a LEA readfromfh,[RDX + RCX*0x1] .text:0040225b 48c1f806 SAR readfromfh,0x6 .text:0040225f 4889c2 MOV RDX,readfromfh .text:00402262 4889c8 MOV readfromfh,RCX .text:00402265 48c1f83f SAR readfromfh,0x3f .text:00402269 4829c2 SUB RDX,readfromfh .text:0040226c 8b45fc MOV readfromfh,dword ptr [RBP + local_c+0x8] .text:0040226f 4898 CDQE .text:00402271 4829c2 SUB RDX,readfromfh .text:00402274 488d8570f... LEA readfromfh=>local_198,[RBP + -0x190] .text:0040227b be38294000 MOV ESI=>.rodata:DAT...,.rodata:DAT_00402938;= 25h % .text:00402280 4889c7 MOV RDI,readfromfh .text:00402283 b800000000 MOV readfromfh,0x0 .text:00402288 e893eaffff CALL .plt:sprintf ;int sprintf(char * __s, char * __for... .text:0040228d 488d9570f... LEA RDX=>local_198,[RBP + -0x190] .text:00402294 488b45e8 MOV readfromfh,qword ptr [RBP + local_20+... .text:00402298 4889d6 MOV RSI,RDX .text:0040229b 4889c7 MOV RDI,readfromfh .text:0040229e e89deaffff CALL .plt:strstr ;char * strstr(char * __haystack, cha... .text:004022a3 48894590 MOV qword ptr [RBP +...,readfromfh .text:004022a7 48837d9000 CMP qword ptr [RBP + local_78+0x8],0x0 .text:004022ac 7409 JZ LAB_004022b7 .text:004022ae c745cc010... MOV dword ptr [RBP + local_3c+0x8],0x1 .text:004022b5 eb0e JMP LAB_004022c5 LAB_004022b7: ;XREF[1,0]: 004022ac .text:004022b7 8345fc01 ADD dword ptr [RBP + local_c+0x8],0x1 LAB_004022bb: ;XREF[1,0]: 0040223e .text:004022bb 837dfc02 CMP dword ptr [RBP + local_c+0x8],0x2 .text:004022bf 0f8e7bffffff JLE LAB_00402240 LAB_004022c5: ;XREF[1,0]: 004022b5 .text:004022c5 837dcc00 CMP dword ptr [RBP + local_3c+0x8],0x0 .text:004022c9 0f8598000000 JNZ LAB_00402367 .text:004022cf c745fc000... MOV dword ptr [RBP + local_c+0x8],0x0 .text:004022d6 e982000000 JMP LAB_0040235d LAB_004022db: ;XREF[1,0]: 00402361 .text:004022db 488b15ee1... MOV RDX,qword ptr [.bss:now] .text:004022e2 8b45fc MOV readfromfh,dword ptr [RBP + local_c+0x8] .text:004022e5 c1e002 SHL readfromfh,0x2 .text:004022e8 89c1 MOV ECX,readfromfh .text:004022ea c1e104 SHL ECX,0x4 .text:004022ed 29c1 SUB ECX,readfromfh .text:004022ef 89c8 MOV readfromfh,ECX .text:004022f1 4898 CDQE .text:004022f3 4829c2 SUB RDX,readfromfh .text:004022f6 4889d0 MOV readfromfh,RDX .text:004022f9 48898578f... MOV qword ptr [RBP +...,readfromfh .text:00402300 488d8578f... LEA readfromfh=>local_90,[RBP + -0x88] .text:00402307 4889c7 MOV RDI,readfromfh .text:0040230a e8b1e8ffff CALL .plt:ctime ;char * ctime(time_t * __timer) .text:0040230f 4889c2 MOV RDX,readfromfh .text:00402312 488d85f0f... LEA readfromfh=>local_118,[RBP + -0x110] .text:00402319 4889d6 MOV RSI,RDX .text:0040231c 4889c7 MOV RDI,readfromfh .text:0040231f e85ce8ffff CALL .plt:strcpy ;char * strcpy(char * __dest, char * ... .text:00402324 c68500fff... MOV byte ptr [RBP + local_108+0x8],0x0 .text:0040232b 488d85f0f... LEA readfromfh=>local_118,[RBP + -0x110] .text:00402332 488d5004 LEA RDX=>local_114,[readfromfh + 0x4] .text:00402336 488b45e8 MOV readfromfh,qword ptr [RBP + local_20+... .text:0040233a 4889d6 MOV RSI,RDX .text:0040233d 4889c7 MOV RDI,readfromfh .text:00402340 e8fbe9ffff CALL .plt:strstr ;char * strstr(char * __haystack, cha... .text:00402345 48894588 MOV qword ptr [RBP +...,readfromfh .text:00402349 48837d8800 CMP qword ptr [RBP + local_80+0x8],0x0 .text:0040234e 7409 JZ LAB_00402359 .text:00402350 c745cc010... MOV dword ptr [RBP + local_3c+0x8],0x1 .text:00402357 eb0e JMP LAB_00402367 LAB_00402359: ;XREF[1,0]: 0040234e .text:00402359 8345fc01 ADD dword ptr [RBP + local_c+0x8],0x1 LAB_0040235d: ;XREF[1,0]: 004022d6 .text:0040235d 837dfc04 CMP dword ptr [RBP + local_c+0x8],0x4 .text:00402361 0f8e74ffffff JLE LAB_004022db LAB_00402367: ;XREF[4,0]: 00402224,00402231,004022c9,00402357 .text:00402367 8b459c MOV readfromfh,dword ptr [RBP + local_6c+... .text:0040236a 8945c8 MOV dword ptr [RBP +...,readfromfh .text:0040236d 83bd5cfef... CMP dword ptr [RBP + local_1ac+0x8],0x0 .text:00402374 740d JZ LAB_00402383 .text:00402376 837dcc00 CMP dword ptr [RBP + local_3c+0x8],0x0 .text:0040237a 7507 JNZ LAB_00402383 .text:0040237c c745c8000... MOV dword ptr [RBP + local_40+0x8],0x0 LAB_00402383: ;XREF[2,0]: 00402374,0040237a .text:00402383 837dc800 CMP dword ptr [RBP + local_40+0x8],0x0 .text:00402387 7443 JZ LAB_004023cc .text:00402389 8345dc01 ADD dword ptr [RBP + local_2c+0x8],0x1 .text:0040238d 837de0ff CMP dword ptr [RBP + local_28+0x8],-0x1 .text:00402391 7511 JNZ LAB_004023a4 .text:00402393 488b55e8 MOV RDX,qword ptr [RBP + local_20+0x8] .text:00402397 488b45b0 MOV readfromfh,qword ptr [RBP + local_58+... .text:0040239b 4829c2 SUB RDX,readfromfh .text:0040239e 4889d0 MOV readfromfh,RDX .text:004023a1 8945e0 MOV dword ptr [RBP +...,readfromfh LAB_004023a4: ;XREF[1,0]: 00402391 .text:004023a4 488b55d0 MOV RDX,qword ptr [RBP + local_38+0x8] .text:004023a8 488b45e8 MOV readfromfh,qword ptr [RBP + local_20+... .text:004023ac 4829c2 SUB RDX,readfromfh .text:004023af 4889d0 MOV readfromfh,RDX .text:004023b2 4883c001 ADD readfromfh,0x1 .text:004023b6 4889c2 MOV RDX,readfromfh .text:004023b9 488b45e8 MOV readfromfh,qword ptr [RBP + local_20+... .text:004023bd be00000000 MOV ESI,0x0 .text:004023c2 4889c7 MOV RDI,readfromfh .text:004023c5 e856e8ffff CALL .plt:memset ;void * memset(void * __s, int __c, s... .text:004023ca eb0d JMP LAB_004023d9 LAB_004023cc: ;XREF[1,0]: 00402387 .text:004023cc 837de400 CMP dword ptr [RBP + local_24+0x8],0x0 .text:004023d0 7507 JNZ LAB_004023d9 .text:004023d2 488b45d0 MOV readfromfh,qword ptr [RBP + local_38+... .text:004023d6 c6000a MOV byte ptr [readfromfh],0xa LAB_004023d9: ;XREF[2,0]: 004023ca,004023d0 .text:004023d9 488b45d0 MOV readfromfh,qword ptr [RBP + local_38+... .text:004023dd 4883c001 ADD readfromfh,0x1 .text:004023e1 488945e8 MOV qword ptr [RBP +...,readfromfh LAB_004023e5: ;XREF[1,0]: 004021ae .text:004023e5 837de401 CMP dword ptr [RBP + local_24+0x8],0x1 .text:004023e9 0f85c4fdffff JNZ LAB_004021b3 .text:004023ef 837de0ff CMP dword ptr [RBP + local_28+0x8],-0x1 .text:004023f3 7506 JNZ LAB_004023fb .text:004023f5 8b45f0 MOV readfromfh,dword ptr [RBP + local_18+... .text:004023f8 8945e0 MOV dword ptr [RBP +...,readfromfh LAB_004023fb: ;XREF[1,0]: 004023f3 .text:004023fb 8b45e0 MOV readfromfh,dword ptr [RBP + local_28+... .text:004023fe 8945c4 MOV dword ptr [RBP +...,readfromfh .text:00402401 8b45e0 MOV readfromfh,dword ptr [RBP + local_28+... .text:00402404 8945fc MOV dword ptr [RBP + local_c+0x8],readfromfh .text:00402407 eb3b JMP LAB_00402444 LAB_00402409: ;XREF[1,0]: 0040244a .text:00402409 8b45fc MOV readfromfh,dword ptr [RBP + local_c+0x8] .text:0040240c 4863d0 MOVSXD RDX,readfromfh .text:0040240f 488b45b0 MOV readfromfh,qword ptr [RBP + local_58+... .text:00402413 4801d0 ADD readfromfh,RDX .text:00402416 0fb600 MOVZX readfromfh,byte ptr [readfromfh] .text:00402419 84c0 TEST readfromfh,readfromfh .text:0040241b 7423 JZ LAB_00402440 .text:0040241d 8b45c4 MOV readfromfh,dword ptr [RBP + local_44+... .text:00402420 4863d0 MOVSXD RDX,readfromfh .text:00402423 488b45b0 MOV readfromfh,qword ptr [RBP + local_58+... .text:00402427 4801c2 ADD RDX,readfromfh .text:0040242a 8b45fc MOV readfromfh,dword ptr [RBP + local_c+0x8] .text:0040242d 4863c8 MOVSXD RCX,readfromfh .text:00402430 488b45b0 MOV readfromfh,qword ptr [RBP + local_58+... .text:00402434 4801c8 ADD readfromfh,RCX .text:00402437 0fb600 MOVZX readfromfh,byte ptr [readfromfh] .text:0040243a 8802 MOV byte ptr [RDX],readfromfh .text:0040243c 8345c401 ADD dword ptr [RBP + local_44+0x8],0x1 LAB_00402440: ;XREF[1,0]: 0040241b .text:00402440 8345fc01 ADD dword ptr [RBP + local_c+0x8],0x1 LAB_00402444: ;XREF[1,0]: 00402407 .text:00402444 8b45fc MOV readfromfh,dword ptr [RBP + local_c+0x8] .text:00402447 3b45f0 CMP readfromfh,dword ptr [RBP + local_18+... .text:0040244a 7cbd JL LAB_00402409 .text:0040244c 8b45c4 MOV readfromfh,dword ptr [RBP + local_44+... .text:0040244f 3b45b8 CMP readfromfh,dword ptr [RBP + local_50+... .text:00402452 746c JZ LAB_004024c0 .text:00402454 8b45e0 MOV readfromfh,dword ptr [RBP + local_28+... .text:00402457 8945c0 MOV dword ptr [RBP +...,readfromfh .text:0040245a 8b45c0 MOV readfromfh,dword ptr [RBP + local_48+... .text:0040245d 3b45f4 CMP readfromfh,dword ptr [RBP + local_14+... .text:00402460 7e06 JLE LAB_00402468 .text:00402462 8b45f4 MOV readfromfh,dword ptr [RBP + local_14+... .text:00402465 8945c0 MOV dword ptr [RBP +...,readfromfh LAB_00402468: ;XREF[1,0]: 00402460 .text:00402468 8b45c0 MOV readfromfh,dword ptr [RBP + local_48+... .text:0040246b 4863c8 MOVSXD RCX,readfromfh .text:0040246e 8b45bc MOV readfromfh,dword ptr [RBP + fh+0x8] .text:00402471 ba00000000 MOV EDX,0x0 .text:00402476 4889ce MOV RSI,RCX .text:00402479 89c7 MOV EDI,readfromfh .text:0040247b e890e7ffff CALL .plt:lseek ;__off_t lseek(int __fd, __off_t __of... .text:00402480 8b45c0 MOV readfromfh,dword ptr [RBP + local_48+... .text:00402483 8b55c4 MOV EDX,dword ptr [RBP + local_44+0x8] .text:00402486 29c2 SUB EDX,readfromfh .text:00402488 89d0 MOV readfromfh,EDX .text:0040248a 894584 MOV dword ptr [RBP +...,readfromfh .text:0040248d 8b4584 MOV readfromfh,dword ptr [RBP + local_84+... .text:00402490 4863d0 MOVSXD RDX,readfromfh .text:00402493 8b45c0 MOV readfromfh,dword ptr [RBP + local_48+... .text:00402496 4863c8 MOVSXD RCX,readfromfh .text:00402499 488b45b0 MOV readfromfh,qword ptr [RBP + local_58+... .text:0040249d 4801c1 ADD RCX,readfromfh .text:004024a0 8b45bc MOV readfromfh,dword ptr [RBP + fh+0x8] .text:004024a3 4889ce MOV RSI,RCX .text:004024a6 89c7 MOV EDI,readfromfh .text:004024a8 e8f3e6ffff CALL .plt:write ;ssize_t write(int __fd, void * __buf... .text:004024ad 8b45c4 MOV readfromfh,dword ptr [RBP + local_44+... .text:004024b0 4863d0 MOVSXD RDX,readfromfh .text:004024b3 8b45bc MOV readfromfh,dword ptr [RBP + fh+0x8] .text:004024b6 4889d6 MOV RSI,RDX .text:004024b9 89c7 MOV EDI,readfromfh .text:004024bb e840e7ffff CALL .plt:ftruncate ;int ftruncate(int __fd, __off_t __le... LAB_004024c0: ;XREF[1,0]: 00402452 .text:004024c0 488b45b0 MOV readfromfh,qword ptr [RBP + local_58+... .text:004024c4 4889c7 MOV RDI,readfromfh .text:004024c7 e884e6ffff CALL .plt:free ;void free(void * __ptr) .text:004024cc 8b45bc MOV readfromfh,dword ptr [RBP + fh+0x8] .text:004024cf 89c7 MOV EDI,readfromfh .text:004024d1 e85ae7ffff CALL .plt:close ;int close(int __fd) .text:004024d6 488b8568f... MOV readfromfh,qword ptr [RBP + local_1a0... .text:004024dd be40346000 MOV ESI=>.bss:DAT_00603440,.bss:DAT_00603440 .text:004024e2 4889c7 MOV RDI,readfromfh .text:004024e5 e810f9ffff CALL FUN_00401dfa ;undefined FUN_00401dfa() LAB_004024ea: ;XREF[4,0]: 00402012,00402039,00402093,00402108 .text:004024ea 488b9568f... MOV RDX,qword ptr [RBP + local_1a0+0x8] .text:004024f1 8b45dc MOV readfromfh,dword ptr [RBP + local_2c+... .text:004024f4 89c6 MOV ESI,readfromfh .text:004024f6 bfc0326000 MOV EDI=>.data:ACHTd...,.data:ACHTdPROZENTs ;= 44h D .text:004024fb b800000000 MOV readfromfh,0x0 .text:00402500 e8ebe6ffff CALL .plt:printf ;int printf(char * __format, ...) .text:00402505 8b45f8 MOV readfromfh,dword ptr [RBP + local_10+... .text:00402508 c9 LEAVE .text:00402509 c3 RET ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;undefined machmitfile(undefined8 filename, undefined8 param_2, undefined8 param_3, undefined4 param_4) ;filename undefined8 RDI ;param_2 undefined8 RSI ;param_3 undefined8 RDX ;param_4 undefined4 ECX ;flength undefined8 RAX ;XREF[1,0]: 00402614 ;local_c undefined4 -c ;XREF[5,0]: 00402532,00402535,004025b0,004025b3,004027c8 ;c undefined8 -18 ;XREF[5,0]: 00402637,00402660,00402704,00402724,0040272c ;bufpointer undefined8 -20 ;XREF[4,0]: 0040263f,00402708,0040271c,0040273a ;local_24 undefined4 -24 ;XREF[3,0]: 00402654,004026fe,004027b4 ;local_28 undefined4 -28 ;XREF[11,0]: 00402556,00402559,00402597,004025be,004025ee ; 0040260c,00402624,0040274b,00402769,0040277c ; 00402795 ;local_2c undefined4 -2c ;XREF[4,0]: 004025d2,004025d5,00402602,0040261f ;local_38 undefined8 -38 ;XREF[8,0]: 004025ea,00402608,00402633,0040263b,00402649 ; 0040273e,00402765,00402789 ;local_3c undefined4 -3c ;XREF[3,0]: 00402619,0040261c,00402643 ;local_48 undefined8 -48 ;XREF[2,0]: 00402650,00402730 ;local_50 undefined8 -50 ;XREF[6,0]: 00402664,00402668,0040267a,0040269a,004026c6 ; 004026e5 ;local_54 undefined4 -54 ;XREF[3,0]: 00402748,0040275f,00402776 ;local_60 undefined8 -60 ;XREF[5,0]: 00402512,00402521,00402540,0040279f,004027b0 ;local_68 undefined8 -68 ;XREF[2,0]: 00402516,004026a2 ;local_70 undefined8 -70 ;XREF[2,0]: 0040251a,00402682 ;local_74 undefined4 -74 ;XREF[3,0]: 0040251e,004026ba,004026c0 ;XREF[8,0]: 00401271,0040130f,004013ad,00401631 ; 00401653,00401675,004029a0,00402b58 .text:0040250a 55 PUSH RBP .text:0040250b 4889e5 MOV RBP,RSP .text:0040250e 4883ec70 SUB RSP,0x70 .text:00402512 48897da8 MOV qword ptr [RBP + local_60+0x8],filename .text:00402516 488975a0 MOV qword ptr [RBP + local_68+0x8],param_2 .text:0040251a 48895598 MOV qword ptr [RBP + local_70+0x8],param_3 .text:0040251e 894d94 MOV dword ptr [RBP + local_74+0x8],param_4 .text:00402521 488b45a8 MOV RAX,qword ptr [RBP + local_60+0x8] .text:00402525 be40346000 MOV param_2=>.bss:DA...,.bss:DAT_00603440 .text:0040252a 4889c7 MOV filename,RAX .text:0040252d e896f8ffff CALL FUN_00401dc8 ;undefined FUN_00401dc8() .text:00402532 8945fc MOV dword ptr [RBP + local_c+0x8],EAX .text:00402535 837dfc00 CMP dword ptr [RBP + local_c+0x8],0x0 .text:00402539 7905 JNS LAB_00402540 .text:0040253b e970020000 JMP LAB_004027b0 LAB_00402540: ;XREF[1,0]: 00402539 .text:00402540 488b45a8 MOV RAX,qword ptr [RBP + local_60+0x8] .text:00402544 be02000000 MOV param_2,0x2 .text:00402549 4889c7 MOV filename,RAX .text:0040254c b800000000 MOV EAX,0x0 .text:00402551 e89ae7ffff CALL .plt:open ;int open(char * __file, int __oflag,... .text:00402556 8945e0 MOV dword ptr [RBP + local_28+0x8],EAX .text:00402559 837de000 CMP dword ptr [RBP + local_28+0x8],0x0 .text:0040255d 7f05 JG LAB_00402564 .text:0040255f e94c020000 JMP LAB_004027b0 LAB_00402564: ;XREF[1,0]: 0040255d .text:00402564 66c705130... MOV word ptr [.bss:DAT_00603380],0x1 .text:0040256d 48c705100... MOV qword ptr [.bss:DAT_00603388],0x0 .text:00402578 66c705010... MOV word ptr [.bss:DAT_00603382],0x0 .text:00402581 48c705040... MOV qword ptr [.bss:DAT_00603390],0x0 .text:0040258c e81fe6ffff CALL .plt:getpid ;__pid_t getpid(void) .text:00402591 8905010e2000 MOV dword ptr [.bss:DAT_00603398],EAX .text:00402597 8b45e0 MOV EAX,dword ptr [RBP + local_28+0x8] .text:0040259a ba80336000 MOV param_3=>.bss:DA...,.bss:DAT_00603380 .text:0040259f be07000000 MOV param_2,0x7 .text:004025a4 89c7 MOV filename,EAX .text:004025a6 b800000000 MOV EAX,0x0 .text:004025ab e8e0e5ffff CALL .plt:fcntl ;int fcntl(int __fd, int __cmd, ...) .text:004025b0 8945fc MOV dword ptr [RBP + local_c+0x8],EAX .text:004025b3 837dfcff CMP dword ptr [RBP + local_c+0x8],-0x1 .text:004025b7 7505 JNZ LAB_004025be .text:004025b9 e9f2010000 JMP LAB_004027b0 LAB_004025be: ;XREF[1,0]: 004025b7 .text:004025be 8b45e0 MOV EAX,dword ptr [RBP + local_28+0x8] .text:004025c1 ba02000000 MOV param_3,0x2 .text:004025c6 be00000000 MOV param_2,0x0 .text:004025cb 89c7 MOV filename,EAX .text:004025cd e83ee6ffff CALL .plt:lseek ;__off_t lseek(int __fd, __off_t __of... .text:004025d2 8945dc MOV dword ptr [RBP + local_2c+0x8],EAX .text:004025d5 8b45dc MOV EAX,dword ptr [RBP + local_2c+0x8] .text:004025d8 83c001 ADD EAX,0x1 .text:004025db 4898 CDQE .text:004025dd be01000000 MOV param_2,0x1 .text:004025e2 4889c7 MOV filename,RAX .text:004025e5 e876e6ffff CALL .plt:calloc ;void * calloc(size_t __nmemb, size_t... .text:004025ea 488945d0 MOV qword ptr [RBP + local_38+0x8],RAX .text:004025ee 8b45e0 MOV EAX,dword ptr [RBP + local_28+0x8] .text:004025f1 ba00000000 MOV param_3,0x0 .text:004025f6 be00000000 MOV param_2,0x0 .text:004025fb 89c7 MOV filename,EAX .text:004025fd e80ee6ffff CALL .plt:lseek ;__off_t lseek(int __fd, __off_t __of... .text:00402602 8b45dc MOV EAX,dword ptr [RBP + local_2c+0x8] .text:00402605 4863d0 MOVSXD param_3,EAX .text:00402608 488b4dd0 MOV param_4,qword ptr [RBP + local_38+0x8] .text:0040260c 8b45e0 MOV EAX,dword ptr [RBP + local_28+0x8] .text:0040260f 4889ce MOV param_2,param_4 .text:00402612 89c7 MOV filename,EAX .text:00402614 e827e6ffff CALL .plt:read ;ssize_t read(int __fd, void * __buf,... .text:00402619 8945cc MOV dword ptr [RBP + local_3c+0x8],flength .text:0040261c 8b45cc MOV flength,dword ptr [RBP + local_3c+0x8] .text:0040261f 3b45dc CMP flength,dword ptr [RBP + local_2c+0x8] .text:00402622 740f JZ LAB_00402633 .text:00402624 8b45e0 MOV flength,dword ptr [RBP + local_28+0x8] .text:00402627 89c7 MOV filename,flength .text:00402629 e802e6ffff CALL .plt:close ;int close(int __fd) .text:0040262e e97d010000 JMP LAB_004027b0 LAB_00402633: ;XREF[1,0]: 00402622 .text:00402633 488b45d0 MOV flength,qword ptr [RBP + local_38+0x8] .text:00402637 488945f0 MOV qword ptr [RBP + c+0x8],flength .text:0040263b 488b45d0 MOV flength,qword ptr [RBP + local_38+0x8] .text:0040263f 488945e8 MOV qword ptr [RBP + bufpointer+0x8],flength .text:00402643 8b45cc MOV flength,dword ptr [RBP + local_3c+0x8] .text:00402646 4863d0 MOVSXD param_3,flength .text:00402649 488b45d0 MOV flength,qword ptr [RBP + local_38+0x8] .text:0040264d 4801d0 ADD flength,param_3 .text:00402650 488945c0 MOV qword ptr [RBP + local_48+0x8],flength .text:00402654 c745e4000... MOV dword ptr [RBP + local_24+0x8],0x0 .text:0040265b e9cc000000 JMP LAB_0040272c LAB_00402660: ;XREF[1,0]: 00402734 .text:00402660 488b45f0 MOV flength,qword ptr [RBP + c+0x8] .text:00402664 488945b8 MOV qword ptr [RBP + local_50+0x8],flength .text:00402668 488b45b8 MOV flength,qword ptr [RBP + local_50+0x8] .text:0040266c 8b8054010000 MOV flength,dword ptr [flength + 0x154] .text:00402672 85c0 TEST flength,flength .text:00402674 0f8484000000 JZ LAB_004026fe .text:0040267a 488b45b8 MOV flength,qword ptr [RBP + local_50+0x8] .text:0040267e 488d484c LEA param_4,[flength + 0x4c] .text:00402682 488b4598 MOV flength,qword ptr [RBP + local_70+0x8] .text:00402686 ba00010000 MOV param_3,0x100 .text:0040268b 4889c6 MOV param_2,flength .text:0040268e 4889cf MOV filename,param_4 .text:00402691 e8dae4ffff CALL .plt:strncmp ;int strncmp(char * __s1, char * __s2... .text:00402696 85c0 TEST flength,flength .text:00402698 756a JNZ LAB_00402704 .text:0040269a 488b45b8 MOV flength,qword ptr [RBP + local_50+0x8] .text:0040269e 488d482c LEA param_4,[flength + 0x2c] .text:004026a2 488b45a0 MOV flength,qword ptr [RBP + local_68+0x8] .text:004026a6 ba20000000 MOV param_3,0x20 .text:004026ab 4889c6 MOV param_2,flength .text:004026ae 4889cf MOV filename,param_4 .text:004026b1 e8bae4ffff CALL .plt:strncmp ;int strncmp(char * __s1, char * __s2... .text:004026b6 85c0 TEST flength,flength .text:004026b8 754a JNZ LAB_00402704 .text:004026ba 837d9400 CMP dword ptr [RBP + local_74+0x8],0x0 .text:004026be 743e JZ LAB_004026fe .text:004026c0 837d9400 CMP dword ptr [RBP + local_74+0x8],0x0 .text:004026c4 743e JZ LAB_00402704 .text:004026c6 488b45b8 MOV flength,qword ptr [RBP + local_50+0x8] .text:004026ca 8b8054010000 MOV flength,dword ptr [flength + 0x154] .text:004026d0 4898 CDQE .text:004026d2 488b15f70... MOV param_3,qword ptr [.bss:now] .text:004026d9 4881ea2c0... SUB param_3,0x12c .text:004026e0 4839d0 CMP flength,param_3 .text:004026e3 7c1f JL LAB_00402704 .text:004026e5 488b45b8 MOV flength,qword ptr [RBP + local_50+0x8] .text:004026e9 8b8054010000 MOV flength,dword ptr [flength + 0x154] .text:004026ef 4863d0 MOVSXD param_3,flength .text:004026f2 488b05d70... MOV flength,qword ptr [.bss:now] .text:004026f9 4839c2 CMP param_3,flength .text:004026fc 7f06 JG LAB_00402704 LAB_004026fe: ;XREF[2,0]: 00402674,004026be .text:004026fe 8345e401 ADD dword ptr [RBP + local_24+0x8],0x1 .text:00402702 eb20 JMP LAB_00402724 LAB_00402704: ;XREF[5,0]: 00402698,004026b8,004026c4,004026e3 ; 004026fc .text:00402704 488b4df0 MOV param_4,qword ptr [RBP + c+0x8] .text:00402708 488b45e8 MOV flength,qword ptr [RBP + bufpointer+0x8] .text:0040270c ba80010000 MOV param_3,0x180 .text:00402711 4889ce MOV param_2,param_4 .text:00402714 4889c7 MOV filename,flength .text:00402717 e884e5ffff CALL .plt:memcpy ;void * memcpy(void * __dest, void * ... .text:0040271c 488145e88... ADD qword ptr [RBP + bufpointer+0x8],0x180 LAB_00402724: ;XREF[1,0]: 00402702 .text:00402724 488145f08... ADD qword ptr [RBP + c+0x8],0x180 LAB_0040272c: ;XREF[1,0]: 0040265b .text:0040272c 488b45f0 MOV flength,qword ptr [RBP + c+0x8] .text:00402730 483b45c0 CMP flength,qword ptr [RBP + local_48+0x8] .text:00402734 0f8226ffffff JC LAB_00402660 .text:0040273a 488b55e8 MOV param_3,qword ptr [RBP + bufpointer+0x8] .text:0040273e 488b45d0 MOV flength,qword ptr [RBP + local_38+0x8] .text:00402742 4829c2 SUB param_3,flength .text:00402745 4889d0 MOV flength,param_3 .text:00402748 8945b4 MOV dword ptr [RBP + local_54+0x8],flength .text:0040274b 8b45e0 MOV flength,dword ptr [RBP + local_28+0x8] .text:0040274e ba00000000 MOV param_3,0x0 .text:00402753 be00000000 MOV param_2,0x0 .text:00402758 89c7 MOV filename,flength .text:0040275a e8b1e4ffff CALL .plt:lseek ;__off_t lseek(int __fd, __off_t __of... .text:0040275f 8b45b4 MOV flength,dword ptr [RBP + local_54+0x8] .text:00402762 4863d0 MOVSXD param_3,flength .text:00402765 488b4dd0 MOV param_4,qword ptr [RBP + local_38+0x8] .text:00402769 8b45e0 MOV flength,dword ptr [RBP + local_28+0x8] .text:0040276c 4889ce MOV param_2,param_4 .text:0040276f 89c7 MOV filename,flength .text:00402771 e82ae4ffff CALL .plt:write ;ssize_t write(int __fd, void * __buf... .text:00402776 8b45b4 MOV flength,dword ptr [RBP + local_54+0x8] .text:00402779 4863d0 MOVSXD param_3,flength .text:0040277c 8b45e0 MOV flength,dword ptr [RBP + local_28+0x8] .text:0040277f 4889d6 MOV param_2,param_3 .text:00402782 89c7 MOV filename,flength .text:00402784 e877e4ffff CALL .plt:ftruncate ;int ftruncate(int __fd, __off_t __le... .text:00402789 488b45d0 MOV flength,qword ptr [RBP + local_38+0x8] .text:0040278d 4889c7 MOV filename,flength .text:00402790 e8bbe3ffff CALL .plt:free ;void free(void * __ptr) .text:00402795 8b45e0 MOV flength,dword ptr [RBP + local_28+0x8] .text:00402798 89c7 MOV filename,flength .text:0040279a e891e4ffff CALL .plt:close ;int close(int __fd) .text:0040279f 488b45a8 MOV flength,qword ptr [RBP + local_60+0x8] .text:004027a3 be40346000 MOV param_2=>.bss:DA...,.bss:DAT_00603440 .text:004027a8 4889c7 MOV filename,flength .text:004027ab e84af6ffff CALL FUN_00401dfa ;undefined FUN_00401dfa() LAB_004027b0: ;XREF[4,0]: 0040253b,0040255f,004025b9,0040262e .text:004027b0 488b55a8 MOV param_3,qword ptr [RBP + local_60+0x8] .text:004027b4 8b45e4 MOV flength,dword ptr [RBP + local_24+0x8] .text:004027b7 89c6 MOV param_2,flength .text:004027b9 bfc0326000 MOV filename=>.data:...,.data:ACHTdPROZENTs ;= 44h D .text:004027be b800000000 MOV flength,0x0 .text:004027c3 e828e4ffff CALL .plt:printf ;int printf(char * __format, ...) .text:004027c8 8b45fc MOV flength,dword ptr [RBP + local_c+0x8] .text:004027cb c9 LEAVE .text:004027cc c3 RET .text:004027cd 0f ?? 0Fh .text:004027ce 1f ?? 1Fh .text:004027cf 00 ?? 00h ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;undefined FUN_004027d0() ;XREF[4,0]: 00400d66,00400d66,004029a8,00402b78 .text:004027d0 4157 PUSH R15 .text:004027d2 4189ff MOV R15D,EDI .text:004027d5 4156 PUSH R14 .text:004027d7 4989f6 MOV R14,RSI .text:004027da 4155 PUSH R13 .text:004027dc 4989d5 MOV R13,RDX .text:004027df 4154 PUSH R12 .text:004027e1 4c8d25280... LEA R12,[.init_array:__DT_INIT_ARRAY] ;= 400E10h .text:004027e8 55 PUSH RBP .text:004027e9 488d2d280... LEA RBP,[.fini_array:__DT_FINI_ARRAY] ;= 400DF0h .text:004027f0 53 PUSH RBX .text:004027f1 4c29e5 SUB RBP,R12 .text:004027f4 31db XOR EBX,EBX .text:004027f6 48c1fd03 SAR RBP,0x3 .text:004027fa 4883ec08 SUB RSP,0x8 .text:004027fe e80de3ffff CALL .init:_DT_INIT ;undefined _DT_INIT() .text:00402803 4885ed TEST RBP,RBP .text:00402806 741e JZ LAB_00402826 .text:00402808 0f1f84000... NOP dword ptr [RAX + RAX*0x1] LAB_00402810: ;XREF[1,0]: 00402824 .text:00402810 4c89ea MOV RDX,R13 .text:00402813 4c89f6 MOV RSI,R14 .text:00402816 4489ff MOV EDI,R15D ; FWD[4,0]: 00400df0,00400e10,00602e10,00602e18 .text:00402819 41ff14dc CALL qword ptr [R12 + RBX*0x8]=>->_INIT_0 ;= 400E10h ;undefined _FINI_0() ;= 400DF0h ;undefined _INIT_0() .text:0040281d 4883c301 ADD RBX,0x1 .text:00402821 4839eb CMP RBX,RBP .text:00402824 75ea JNZ LAB_00402810 LAB_00402826: ;XREF[1,0]: 00402806 .text:00402826 4883c408 ADD RSP,0x8 .text:0040282a 5b POP RBX .text:0040282b 5d POP RBP .text:0040282c 415c POP R12 .text:0040282e 415d POP R13 .text:00402830 415e POP R14 .text:00402832 415f POP R15 .text:00402834 c3 RET .text:00402835 90 ?? 90h .text:00402836 66 ?? 66h f .text:00402837 2e ?? 2Eh . .text:00402838 0f ?? 0Fh .text:00402839 1f ?? 1Fh .text:0040283a 84 ?? 84h .text:0040283b 00 ?? 00h .text:0040283c 00 ?? 00h .text:0040283d 00 ?? 00h .text:0040283e 00 ?? 00h .text:0040283f 00 ?? 00h ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;undefined FUN_00402840() ;XREF[4,0]: 00400d5f,00400d5f,004029b0,00402bc0 .text:00402840 f3c3 RET .text:00402842 66 ?? 66h f .text:00402843 2e ?? 2Eh . .text:00402844 0f ?? 0Fh .text:00402845 1f ?? 1Fh .text:00402846 84 ?? 84h .text:00402847 00 ?? 00h .text:00402848 00 ?? 00h .text:00402849 00 ?? 00h .text:0040284a 00 ?? 00h .text:0040284b 00 ?? 00h .text:0040284c 0f ?? 0Fh .text:0040284d 1f ?? 1Fh .text:0040284e 40 ?? 40h @ .text:0040284f 00 ?? 00h ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;undefined FUN_00402850() ;XREF[3,0]: 00401de6,004029b8,00402bd8 .text:00402850 4889f2 MOV RDX,RSI .text:00402853 4889fe MOV RSI,RDI .text:00402856 bf01000000 MOV EDI,0x1 .text:0040285b e960e4ffff JMP .plt:LAB_00400cc0 ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;undefined _DT_FINI() ;XREF[3,0]: Entry Point,00602e50,_elfSectionHeaders::00000390 .fini:00402860 4883ec08 SUB RSP,0x8 .fini:00402864 4883c408 ADD RSP,0x8 .fini:00402868 c3 RET DAT_00402870: ;XREF[1,0]: _elfSectionHeaders::000003d0 .rodata:0040287001 ?? 01h .rodata:0040287100 ?? 00h .rodata:0040287202 ?? 02h .rodata:0040287300 ?? 00h .rodata:0040287400 ?? 00h .rodata:0040287500 ?? 00h .rodata:0040287600 ?? 00h .rodata:0040287700 ?? 00h .rodata:0040287800 ?? 00h .rodata:0040287900 ?? 00h .rodata:0040287a00 ?? 00h .rodata:0040287b00 ?? 00h .rodata:0040287c00 ?? 00h .rodata:0040287d00 ?? 00h .rodata:0040287e00 ?? 00h .rodata:0040287f00 ?? 00h switchdataD_00402880: ;XREF[1,0]: 004010b9 .rodata:00402880701140000... addr .text:switchD_004010c1::caseD_61 .rodata:004028884c1140000... addr .text:switchD_004010c1::caseD_62 .rodata:00402890791140000... addr .text:switchD_004010c1::caseD_63 .rodata:00402898791140000... addr .text:switchD_004010c1::caseD_63 .rodata:004028a0791140000... addr .text:switchD_004010c1::caseD_63 .rodata:004028a8c31040000... addr .text:switchD_004010c1::caseD_66 .rodata:004028b0791140000... addr .text:switchD_004010c1::caseD_63 .rodata:004028b83a1140000... addr .text:switchD_004010c1::caseD_68 .rodata:004028c0791140000... addr .text:switchD_004010c1::caseD_63 .rodata:004028c8791140000... addr .text:switchD_004010c1::caseD_63 .rodata:004028d0791140000... addr .text:switchD_004010c1::caseD_63 .rodata:004028d8551140000... addr .text:switchD_004010c1::caseD_6c .rodata:004028e05e1140000... addr .text:switchD_004010c1::caseD_6d .rodata:004028e8791140000... addr .text:switchD_004010c1::caseD_63 .rodata:004028f0791140000... addr .text:switchD_004010c1::caseD_63 .rodata:004028f8791140000... addr .text:switchD_004010c1::caseD_63 .rodata:00402900791140000... addr .text:switchD_004010c1::caseD_63 .rodata:00402908791140000... addr .text:switchD_004010c1::caseD_63 .rodata:00402910671140000... addr .text:switchD_004010c1::caseD_73 .rodata:00402918d31040000... addr .text:switchD_004010c1::caseD_74 .rodata:00402920791140000... addr .text:switchD_004010c1::caseD_63 .rodata:00402928791140000... addr .text:switchD_004010c1::caseD_63 .rodata:00402930431140000... addr .text:switchD_004010c1::caseD_77 DAT_00402938: ;XREF[2,0]: 0040227b,0040227b .rodata:0040293825 ?? 25h % .rodata:004029396c ?? 6Ch l .rodata:0040293a64 ?? 64h d .rodata:0040293b00 ?? 00h ;************************************************************************************************ ;* Exception Handler Frame Header * ;************************************************************************************************ eh_frame_hdr_0040293c: ;XREF[2,0]: 004001a0,_elfSectionHeaders::00000410 .eh_frame_hdr...011b033b eh_frame... ;Exception Handler Frame Header Version |_.eh_frame_hdr...eh_frame_... db 1h |_.eh_frame_hdr...eh_frame_... dwfenc DW_EH_PE_sdata4 | DW_EH_PE_pcrel |_.eh_frame_hdr...eh_frame_... dwfenc DW_EH_PE_udata4 | DW_EH_PE_absptr |_.eh_frame_hdr...eh_frame_... dwfenc DW_EH_PE_sdata4 | DW_EH_PE_datarel .eh_frame_hdr...80000000 ddw .eh_frame:cie_004029c0 ;Encoded eh_frame_ptr .eh_frame_hdr...0f000000 ddw Fh ;Encoded FDE count ;************************************************************************************************ ;* Frame Description Entry Table * ;************************************************************************************************ .eh_frame_hdr...f4e1ffffc... fde_tabl... ;Initial Location |_.eh_frame_hdr...initial_loc ddw .plt:FUN_00400b30 |_.eh_frame_hdr...data_loc ddw .eh_frame:fde_00402a08 .eh_frame_hdr...14e4ffff9... fde_tabl... ;Initial Location |_.eh_frame_hdr...initial_loc ddw .text:entry |_.eh_frame_hdr...data_loc ddw .eh_frame:fde_004029d8 .eh_frame_hdr...01e5fffff... fde_tabl... ;Initial Location |_.eh_frame_hdr...initial_loc ddw .text:scramble |_.eh_frame_hdr...data_loc ddw .eh_frame:fde_00402a30 .eh_frame_hdr...8ee5ffff1... fde_tabl... ;Initial Location |_.eh_frame_hdr...initial_loc ddw .text:printmessage |_.eh_frame_hdr...data_loc ddw .eh_frame:fde_00402a50 .eh_frame_hdr...a3e5ffff3... fde_tabl... ;Initial Location |_.eh_frame_hdr...initial_loc ddw .text:main |_.eh_frame_hdr...data_loc ddw .eh_frame:fde_00402a70 .eh_frame_hdr...e7f0ffff5... fde_tabl... ;Initial Location |_.eh_frame_hdr...initial_loc ddw .text:writezerosinfile |_.eh_frame_hdr...data_loc ddw .eh_frame:fde_00402a90 .eh_frame_hdr...74f2ffff7... fde_tabl... ;Initial Location |_.eh_frame_hdr...initial_loc ddw .text:FUN_00401bb0 |_.eh_frame_hdr...data_loc ddw .eh_frame:fde_00402ab0 .eh_frame_hdr...8cf4ffff9... fde_tabl... ;Initial Location |_.eh_frame_hdr...initial_loc ddw .text:FUN_00401dc8 |_.eh_frame_hdr...data_loc ddw .eh_frame:fde_00402ad0 .eh_frame_hdr...bef4ffffb... fde_tabl... ;Initial Location |_.eh_frame_hdr...initial_loc ddw .text:FUN_00401dfa |_.eh_frame_hdr...data_loc ddw .eh_frame:fde_00402af0 .eh_frame_hdr...49f5ffffd... fde_tabl... ;Initial Location |_.eh_frame_hdr...initial_loc ddw .text:settime |_.eh_frame_hdr...data_loc ddw .eh_frame:fde_00402b10 .eh_frame_hdr...9af6fffff... fde_tabl... ;Initial Location |_.eh_frame_hdr...initial_loc ddw .text:machshitmitfile |_.eh_frame_hdr...data_loc ddw .eh_frame:fde_00402b30 .eh_frame_hdr...cefbffff1... fde_tabl... ;Initial Location |_.eh_frame_hdr...initial_loc ddw .text:machmitfile |_.eh_frame_hdr...data_loc ddw .eh_frame:fde_00402b50 .eh_frame_hdr...94feffff3... fde_tabl... ;Initial Location |_.eh_frame_hdr...initial_loc ddw .text:FUN_004027d0 |_.eh_frame_hdr...data_loc ddw .eh_frame:fde_00402b70 .eh_frame_hdr...04ffffff7... fde_tabl... ;Initial Location |_.eh_frame_hdr...initial_loc ddw .text:FUN_00402840 |_.eh_frame_hdr...data_loc ddw .eh_frame:fde_00402bb8 .eh_frame_hdr...14ffffff9... fde_tabl... ;Initial Location |_.eh_frame_hdr...initial_loc ddw .text:FUN_00402850 |_.eh_frame_hdr...data_loc ddw .eh_frame:fde_00402bd0 ;************************************************************************************************ ;* Common Information Entry * ;************************************************************************************************ cie_004029c0: ;XREF[3,0]: 00402940,004029dc,_elfSectionHeaders::00000450 .eh_frame:004...14000000 ddw 14h ;(CIE) Length .eh_frame:004...00000000 ddw 0h ;(CIE) ID .eh_frame:004...01 db 1h ;(CIE) Version .eh_frame:004...7a5200 ds "zR" ;(CIE) Augmentation String .eh_frame:004...01 uleb128 1h ;(CIE) Code Alignment .eh_frame:004...78 sleb128 -8h ;(CIE) Data Alignment .eh_frame:004...10 db 10h ;(CIE) Return Address Register Column .eh_frame:004...01 uleb128 1h ;(CIE) Augmentation Data Length .eh_frame:004...1b dwfenc DW_EH_PE_sdata4 | DW_EH_PE_pcrel ;(CIE Augmentation Data) FDE Encoding .eh_frame:004...0c0708900... db[7] ;(CIE) Initial Instructions |_.eh_frame:004...[0] db Ch |_.eh_frame:004...[1] db 7h |_.eh_frame:004...[2] db 8h |_.eh_frame:004...[3] db 90h |_.eh_frame:004...[4] db 1h |_.eh_frame:004...[5] db 7h |_.eh_frame:004...[6] db 10h ;************************************************************************************************ ;* Frame Descriptor Entry * ;************************************************************************************************ fde_004029d8: ;XREF[1,0]: 00402954 .eh_frame:004...14000000 ddw 14h ;(FDE) Length .eh_frame:004...1c000000 ddw cie_004029c0 ;(FDE) CIE Reference Pointer .eh_frame:004...70e3ffff ddw .text:entry ;(FDE) PcBegin .eh_frame:004...2a0000000... dq 2Ah ;(FDE) PcRange .eh_frame:004...00 uleb128 0h ;(FDE) Augmentation Data Length .eh_frame:004...000000 db[3] ;(FDE) Call Frame Instructions |_.eh_frame:004...[0] db 0h |_.eh_frame:004...[1] db 0h |_.eh_frame:004...[2] db 0h ;************************************************************************************************ ;* Common Information Entry * ;************************************************************************************************ cie_004029f0: ;XREF[14,0]: 00402a0c,00402a34,00402a54,00402a74 ; 00402a94,00402ab4,00402ad4,00402af4 ; 00402b14,00402b34,00402b54,00402b74 ; 00402bbc,00402bd4 .eh_frame:004...14000000 ddw 14h ;(CIE) Length .eh_frame:004...00000000 ddw 0h ;(CIE) ID .eh_frame:004...01 db 1h ;(CIE) Version .eh_frame:004...7a5200 ds "zR" ;(CIE) Augmentation String .eh_frame:004...01 uleb128 1h ;(CIE) Code Alignment .eh_frame:004...78 sleb128 -8h ;(CIE) Data Alignment .eh_frame:004...10 db 10h ;(CIE) Return Address Register Column .eh_frame:004...01 uleb128 1h ;(CIE) Augmentation Data Length .eh_frame:004...1b dwfenc DW_EH_PE_sdata4 | DW_EH_PE_pcrel ;(CIE Augmentation Data) FDE Encoding .eh_frame:004...0c0708900... db[7] ;(CIE) Initial Instructions |_.eh_frame:004...[0] db Ch |_.eh_frame:004...[1] db 7h |_.eh_frame:004...[2] db 8h |_.eh_frame:004...[3] db 90h |_.eh_frame:004...[4] db 1h |_.eh_frame:004...[5] db 0h |_.eh_frame:004...[6] db 0h ;************************************************************************************************ ;* Frame Descriptor Entry * ;************************************************************************************************ fde_00402a08: ;XREF[1,0]: 0040294c .eh_frame:004...24000000 ddw 24h ;(FDE) Length .eh_frame:004...1c000000 ddw cie_004029f0 ;(FDE) CIE Reference Pointer .eh_frame:004...20e1ffff ddw .plt:FUN_00400b30 ;(FDE) PcBegin .eh_frame:004...20020000 ddw 220h ;(FDE) PcRange .eh_frame:004...00 uleb128 0h ;(FDE) Augmentation Data Length .eh_frame:004...0e10460e1... db[23] ;(FDE) Call Frame Instructions |_.eh_frame:004...[0] db Eh |_.eh_frame:004...[1] db 10h |_.eh_frame:004...[2] db 46h |_.eh_frame:004...[3] db Eh |_.eh_frame:004...[4] db 18h |_.eh_frame:004...[5] db 4Ah |_.eh_frame:004...[6] db Fh |_.eh_frame:004...[7] db Bh |_.eh_frame:004...[8] db 77h |_.eh_frame:004...[9] db 8h |_.eh_frame:004...[10] db 80h |_.eh_frame:004...[11] db 0h |_.eh_frame:004...[12] db 3Fh |_.eh_frame:004...[13] db 1Ah |_.eh_frame:004...[14] db 3Bh |_.eh_frame:004...[15] db 2Ah |_.eh_frame:004...[16] db 33h |_.eh_frame:004...[17] db 24h |_.eh_frame:004...[18] db 22h |_.eh_frame:004...[19] db 0h |_.eh_frame:004...[20] db 0h |_.eh_frame:004...[21] db 0h |_.eh_frame:004...[22] db 0h ;************************************************************************************************ ;* Frame Descriptor Entry * ;************************************************************************************************ fde_00402a30: ;XREF[1,0]: 0040295c .eh_frame:004...1c000000 ddw 1Ch ;(FDE) Length .eh_frame:004...44000000 ddw cie_004029f0 ;(FDE) CIE Reference Pointer .eh_frame:004...05e4ffff ddw .text:scramble ;(FDE) PcBegin .eh_frame:004...8d000000 ddw 8Dh ;(FDE) PcRange .eh_frame:004...00 uleb128 0h ;(FDE) Augmentation Data Length .eh_frame:004...410e10860... db[15] ;(FDE) Call Frame Instructions |_.eh_frame:004...[0] db 41h |_.eh_frame:004...[1] db Eh |_.eh_frame:004...[2] db 10h |_.eh_frame:004...[3] db 86h |_.eh_frame:004...[4] db 2h |_.eh_frame:004...[5] db 43h |_.eh_frame:004...[6] db Dh |_.eh_frame:004...[7] db 6h |_.eh_frame:004...[8] db 2h |_.eh_frame:004...[9] db 88h |_.eh_frame:004...[10] db Ch |_.eh_frame:004...[11] db 7h |_.eh_frame:004...[12] db 8h |_.eh_frame:004...[13] db 0h |_.eh_frame:004...[14] db 0h ;************************************************************************************************ ;* Frame Descriptor Entry * ;************************************************************************************************ fde_00402a50: ;XREF[1,0]: 00402964 .eh_frame:004...1c000000 ddw 1Ch ;(FDE) Length .eh_frame:004...64000000 ddw cie_004029f0 ;(FDE) CIE Reference Pointer .eh_frame:004...72e4ffff ddw .text:printmessage ;(FDE) PcBegin .eh_frame:004...15000000 ddw 15h ;(FDE) PcRange .eh_frame:004...00 uleb128 0h ;(FDE) Augmentation Data Length .eh_frame:004...410e10860... db[15] ;(FDE) Call Frame Instructions |_.eh_frame:004...[0] db 41h |_.eh_frame:004...[1] db Eh |_.eh_frame:004...[2] db 10h |_.eh_frame:004...[3] db 86h |_.eh_frame:004...[4] db 2h |_.eh_frame:004...[5] db 43h |_.eh_frame:004...[6] db Dh |_.eh_frame:004...[7] db 6h |_.eh_frame:004...[8] db 50h |_.eh_frame:004...[9] db Ch |_.eh_frame:004...[10] db 7h |_.eh_frame:004...[11] db 8h |_.eh_frame:004...[12] db 0h |_.eh_frame:004...[13] db 0h |_.eh_frame:004...[14] db 0h ;************************************************************************************************ ;* Frame Descriptor Entry * ;************************************************************************************************ fde_00402a70: ;XREF[1,0]: 0040296c .eh_frame:004...1c000000 ddw 1Ch ;(FDE) Length .eh_frame:004...84000000 ddw cie_004029f0 ;(FDE) CIE Reference Pointer .eh_frame:004...67e4ffff ddw .text:main ;(FDE) PcBegin .eh_frame:004...440b0000 ddw B44h ;(FDE) PcRange .eh_frame:004...00 uleb128 0h ;(FDE) Augmentation Data Length .eh_frame:004...410e10860... db[15] ;(FDE) Call Frame Instructions |_.eh_frame:004...[0] db 41h |_.eh_frame:004...[1] db Eh |_.eh_frame:004...[2] db 10h |_.eh_frame:004...[3] db 86h |_.eh_frame:004...[4] db 2h |_.eh_frame:004...[5] db 43h |_.eh_frame:004...[6] db Dh |_.eh_frame:004...[7] db 6h |_.eh_frame:004...[8] db 3h |_.eh_frame:004...[9] db 3Fh |_.eh_frame:004...[10] db Bh |_.eh_frame:004...[11] db Ch |_.eh_frame:004...[12] db 7h |_.eh_frame:004...[13] db 8h |_.eh_frame:004...[14] db 0h ;************************************************************************************************ ;* Frame Descriptor Entry * ;************************************************************************************************ fde_00402a90: ;XREF[1,0]: 00402974 .eh_frame:004...1c000000 ddw 1Ch ;(FDE) Length .eh_frame:004...a4000000 ddw cie_004029f0 ;(FDE) CIE Reference Pointer .eh_frame:004...8befffff ddw .text:writezerosinfile ;(FDE) PcBegin .eh_frame:004...8d010000 ddw 18Dh ;(FDE) PcRange .eh_frame:004...00 uleb128 0h ;(FDE) Augmentation Data Length .eh_frame:004...410e10860... db[15] ;(FDE) Call Frame Instructions |_.eh_frame:004...[0] db 41h |_.eh_frame:004...[1] db Eh |_.eh_frame:004...[2] db 10h |_.eh_frame:004...[3] db 86h |_.eh_frame:004...[4] db 2h |_.eh_frame:004...[5] db 43h |_.eh_frame:004...[6] db Dh |_.eh_frame:004...[7] db 6h |_.eh_frame:004...[8] db 3h |_.eh_frame:004...[9] db 88h |_.eh_frame:004...[10] db 1h |_.eh_frame:004...[11] db Ch |_.eh_frame:004...[12] db 7h |_.eh_frame:004...[13] db 8h |_.eh_frame:004...[14] db 0h ;************************************************************************************************ ;* Frame Descriptor Entry * ;************************************************************************************************ fde_00402ab0: ;XREF[1,0]: 0040297c .eh_frame:004...1c000000 ddw 1Ch ;(FDE) Length .eh_frame:004...c4000000 ddw cie_004029f0 ;(FDE) CIE Reference Pointer .eh_frame:004...f8f0ffff ddw .text:FUN_00401bb0 ;(FDE) PcBegin .eh_frame:004...18020000 ddw 218h ;(FDE) PcRange .eh_frame:004...00 uleb128 0h ;(FDE) Augmentation Data Length .eh_frame:004...410e10860... db[15] ;(FDE) Call Frame Instructions |_.eh_frame:004...[0] db 41h |_.eh_frame:004...[1] db Eh |_.eh_frame:004...[2] db 10h |_.eh_frame:004...[3] db 86h |_.eh_frame:004...[4] db 2h |_.eh_frame:004...[5] db 43h |_.eh_frame:004...[6] db Dh |_.eh_frame:004...[7] db 6h |_.eh_frame:004...[8] db 3h |_.eh_frame:004...[9] db 13h |_.eh_frame:004...[10] db 2h |_.eh_frame:004...[11] db Ch |_.eh_frame:004...[12] db 7h |_.eh_frame:004...[13] db 8h |_.eh_frame:004...[14] db 0h ;************************************************************************************************ ;* Frame Descriptor Entry * ;************************************************************************************************ fde_00402ad0: ;XREF[1,0]: 00402984 .eh_frame:004...1c000000 ddw 1Ch ;(FDE) Length .eh_frame:004...e4000000 ddw cie_004029f0 ;(FDE) CIE Reference Pointer .eh_frame:004...f0f2ffff ddw .text:FUN_00401dc8 ;(FDE) PcBegin .eh_frame:004...32000000 ddw 32h ;(FDE) PcRange .eh_frame:004...00 uleb128 0h ;(FDE) Augmentation Data Length .eh_frame:004...410e10860... db[15] ;(FDE) Call Frame Instructions |_.eh_frame:004...[0] db 41h |_.eh_frame:004...[1] db Eh |_.eh_frame:004...[2] db 10h |_.eh_frame:004...[3] db 86h |_.eh_frame:004...[4] db 2h |_.eh_frame:004...[5] db 43h |_.eh_frame:004...[6] db Dh |_.eh_frame:004...[7] db 6h |_.eh_frame:004...[8] db 6Dh |_.eh_frame:004...[9] db Ch |_.eh_frame:004...[10] db 7h |_.eh_frame:004...[11] db 8h |_.eh_frame:004...[12] db 0h |_.eh_frame:004...[13] db 0h |_.eh_frame:004...[14] db 0h ;************************************************************************************************ ;* Frame Descriptor Entry * ;************************************************************************************************ fde_00402af0: ;XREF[1,0]: 0040298c .eh_frame:004...1c000000 ddw 1Ch ;(FDE) Length .eh_frame:004...04010000 ddw cie_004029f0 ;(FDE) CIE Reference Pointer .eh_frame:004...02f3ffff ddw .text:FUN_00401dfa ;(FDE) PcBegin .eh_frame:004...8b000000 ddw 8Bh ;(FDE) PcRange .eh_frame:004...00 uleb128 0h ;(FDE) Augmentation Data Length .eh_frame:004...410e10860... db[15] ;(FDE) Call Frame Instructions |_.eh_frame:004...[0] db 41h |_.eh_frame:004...[1] db Eh |_.eh_frame:004...[2] db 10h |_.eh_frame:004...[3] db 86h |_.eh_frame:004...[4] db 2h |_.eh_frame:004...[5] db 43h |_.eh_frame:004...[6] db Dh |_.eh_frame:004...[7] db 6h |_.eh_frame:004...[8] db 2h |_.eh_frame:004...[9] db 86h |_.eh_frame:004...[10] db Ch |_.eh_frame:004...[11] db 7h |_.eh_frame:004...[12] db 8h |_.eh_frame:004...[13] db 0h |_.eh_frame:004...[14] db 0h ;************************************************************************************************ ;* Frame Descriptor Entry * ;************************************************************************************************ fde_00402b10: ;XREF[1,0]: 00402994 .eh_frame:004...1c000000 ddw 1Ch ;(FDE) Length .eh_frame:004...24010000 ddw cie_004029f0 ;(FDE) CIE Reference Pointer .eh_frame:004...6df3ffff ddw .text:settime ;(FDE) PcBegin .eh_frame:004...51010000 ddw 151h ;(FDE) PcRange .eh_frame:004...00 uleb128 0h ;(FDE) Augmentation Data Length .eh_frame:004...410e10860... db[15] ;(FDE) Call Frame Instructions |_.eh_frame:004...[0] db 41h |_.eh_frame:004...[1] db Eh |_.eh_frame:004...[2] db 10h |_.eh_frame:004...[3] db 86h |_.eh_frame:004...[4] db 2h |_.eh_frame:004...[5] db 43h |_.eh_frame:004...[6] db Dh |_.eh_frame:004...[7] db 6h |_.eh_frame:004...[8] db 3h |_.eh_frame:004...[9] db 4Ch |_.eh_frame:004...[10] db 1h |_.eh_frame:004...[11] db Ch |_.eh_frame:004...[12] db 7h |_.eh_frame:004...[13] db 8h |_.eh_frame:004...[14] db 0h ;************************************************************************************************ ;* Frame Descriptor Entry * ;************************************************************************************************ fde_00402b30: ;XREF[1,0]: 0040299c .eh_frame:004...1c000000 ddw 1Ch ;(FDE) Length .eh_frame:004...44010000 ddw cie_004029f0 ;(FDE) CIE Reference Pointer .eh_frame:004...9ef4ffff ddw .text:machshitmitfile ;(FDE) PcBegin .eh_frame:004...34050000 ddw 534h ;(FDE) PcRange .eh_frame:004...00 uleb128 0h ;(FDE) Augmentation Data Length .eh_frame:004...410e10860... db[15] ;(FDE) Call Frame Instructions |_.eh_frame:004...[0] db 41h |_.eh_frame:004...[1] db Eh |_.eh_frame:004...[2] db 10h |_.eh_frame:004...[3] db 86h |_.eh_frame:004...[4] db 2h |_.eh_frame:004...[5] db 43h |_.eh_frame:004...[6] db Dh |_.eh_frame:004...[7] db 6h |_.eh_frame:004...[8] db 3h |_.eh_frame:004...[9] db 2Fh |_.eh_frame:004...[10] db 5h |_.eh_frame:004...[11] db Ch |_.eh_frame:004...[12] db 7h |_.eh_frame:004...[13] db 8h |_.eh_frame:004...[14] db 0h ;************************************************************************************************ ;* Frame Descriptor Entry * ;************************************************************************************************ fde_00402b50: ;XREF[1,0]: 004029a4 .eh_frame:004...1c000000 ddw 1Ch ;(FDE) Length .eh_frame:004...64010000 ddw cie_004029f0 ;(FDE) CIE Reference Pointer .eh_frame:004...b2f9ffff ddw .text:machmitfile ;(FDE) PcBegin .eh_frame:004...c3020000 ddw 2C3h ;(FDE) PcRange .eh_frame:004...00 uleb128 0h ;(FDE) Augmentation Data Length .eh_frame:004...410e10860... db[15] ;(FDE) Call Frame Instructions |_.eh_frame:004...[0] db 41h |_.eh_frame:004...[1] db Eh |_.eh_frame:004...[2] db 10h |_.eh_frame:004...[3] db 86h |_.eh_frame:004...[4] db 2h |_.eh_frame:004...[5] db 43h |_.eh_frame:004...[6] db Dh |_.eh_frame:004...[7] db 6h |_.eh_frame:004...[8] db 3h |_.eh_frame:004...[9] db BEh |_.eh_frame:004...[10] db 2h |_.eh_frame:004...[11] db Ch |_.eh_frame:004...[12] db 7h |_.eh_frame:004...[13] db 8h |_.eh_frame:004...[14] db 0h ;************************************************************************************************ ;* Frame Descriptor Entry * ;************************************************************************************************ fde_00402b70: ;XREF[1,0]: 004029ac .eh_frame:004...44000000 ddw 44h ;(FDE) Length .eh_frame:004...84010000 ddw cie_004029f0 ;(FDE) CIE Reference Pointer .eh_frame:004...58fcffff ddw .text:FUN_004027d0 ;(FDE) PcBegin .eh_frame:004...65000000 ddw 65h ;(FDE) PcRange .eh_frame:004...00 uleb128 0h ;(FDE) Augmentation Data Length .eh_frame:004...420e108f0... db[55] ;(FDE) Call Frame Instructions |_.eh_frame:004...[0] db 42h |_.eh_frame:004...[1] db Eh |_.eh_frame:004...[2] db 10h |_.eh_frame:004...[3] db 8Fh |_.eh_frame:004...[4] db 2h |_.eh_frame:004...[5] db 45h |_.eh_frame:004...[6] db Eh |_.eh_frame:004...[7] db 18h |_.eh_frame:004...[8] db 8Eh |_.eh_frame:004...[9] db 3h |_.eh_frame:004...[10] db 45h |_.eh_frame:004...[11] db Eh |_.eh_frame:004...[12] db 20h |_.eh_frame:004...[13] db 8Dh |_.eh_frame:004...[14] db 4h |_.eh_frame:004...[15] db 45h |_.eh_frame:004...[16] db Eh |_.eh_frame:004...[17] db 28h |_.eh_frame:004...[18] db 8Ch |_.eh_frame:004...[19] db 5h |_.eh_frame:004...[20] db 48h |_.eh_frame:004...[21] db Eh |_.eh_frame:004...[22] db 30h |_.eh_frame:004...[23] db 86h |_.eh_frame:004...[24] db 6h |_.eh_frame:004...[25] db 48h |_.eh_frame:004...[26] db Eh |_.eh_frame:004...[27] db 38h |_.eh_frame:004...[28] db 83h |_.eh_frame:004...[29] db 7h |_.eh_frame:004...[30] db 4Dh |_.eh_frame:004...[31] db Eh |_.eh_frame:004...[32] db 40h |_.eh_frame:004...[33] db 6Ch |_.eh_frame:004...[34] db Eh |_.eh_frame:004...[35] db 38h |_.eh_frame:004...[36] db 41h |_.eh_frame:004...[37] db Eh |_.eh_frame:004...[38] db 30h |_.eh_frame:004...[39] db 41h |_.eh_frame:004...[40] db Eh |_.eh_frame:004...[41] db 28h |_.eh_frame:004...[42] db 42h |_.eh_frame:004...[43] db Eh |_.eh_frame:004...[44] db 20h |_.eh_frame:004...[45] db 42h |_.eh_frame:004...[46] db Eh |_.eh_frame:004...[47] db 18h |_.eh_frame:004...[48] db 42h |_.eh_frame:004...[49] db Eh |_.eh_frame:004...[50] db 10h |_.eh_frame:004...[51] db 42h |_.eh_frame:004...[52] db Eh |_.eh_frame:004...[53] db 8h |_.eh_frame:004...[54] db 0h ;************************************************************************************************ ;* Frame Descriptor Entry * ;************************************************************************************************ fde_00402bb8: ;XREF[1,0]: 004029b4 .eh_frame:004...14000000 ddw 14h ;(FDE) Length .eh_frame:004...cc010000 ddw cie_004029f0 ;(FDE) CIE Reference Pointer .eh_frame:004...80fcffff ddw .text:FUN_00402840 ;(FDE) PcBegin .eh_frame:004...020000000... dq 2h ;(FDE) PcRange .eh_frame:004...00 uleb128 0h ;(FDE) Augmentation Data Length .eh_frame:004...000000 db[3] ;(FDE) Call Frame Instructions |_.eh_frame:004...[0] db 0h |_.eh_frame:004...[1] db 0h |_.eh_frame:004...[2] db 0h ;************************************************************************************************ ;* Frame Descriptor Entry * ;************************************************************************************************ fde_00402bd0: ;XREF[1,0]: 004029bc .eh_frame:004...14000000 ddw 14h ;(FDE) Length .eh_frame:004...e4010000 ddw cie_004029f0 ;(FDE) CIE Reference Pointer .eh_frame:004...78fcffff ddw .text:FUN_00402850 ;(FDE) PcBegin .eh_frame:004...100000000... dq 10h ;(FDE) PcRange .eh_frame:004...00 uleb128 0h ;(FDE) Augmentation Data Length .eh_frame:004...000000 db[3] ;(FDE) Call Frame Instructions |_.eh_frame:004...[0] db 0h |_.eh_frame:004...[1] db 0h |_.eh_frame:004...[2] db 0h ;************************************************************************************************ ;* END OF FRAME * ;************************************************************************************************ .eh_frame:004...00000000 ddw 0h ;End of Frame __DT_INIT_ARRAY: ;XREF[6,0]: 004000f8,00400210,004027e1,00402819 ; 00602e60,_elfSectionHeaders::00000490 .init_array:0...100e40000... dq .text:_INIT_0 __DT_FINI_ARRAY: ;XREF[4,0]: 004027e9,00402819,00602e80,_elfSectionHeaders::000004d0 .fini_array:0...f00d40000... dq .text:_FINI_0 DAT_00602e20: ;XREF[3,0]: 00400e10,00400e25,_elfSectionHeaders::00000510 .jcr:00602e20 00 ?? 00h .jcr:00602e21 00 ?? 00h .jcr:00602e22 00 ?? 00h .jcr:00602e23 00 ?? 00h .jcr:00602e24 00 ?? 00h .jcr:00602e25 00 ?? 00h .jcr:00602e26 00 ?? 00h .jcr:00602e27 00 ?? 00h _DYNAMIC: ;XREF[3,0]: 00400130,00603000,_elfSectionHeaders::00000550 .dynamic:0060...010000000... Elf64_Dy... ;DT_NEEDED - Name of needed library |_.dynamic:0060...[0] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_NEEDED |_.dynamic:0060...d_val dq 1h |_.dynamic:0060...[1] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_INIT |_.dynamic:0060...d_val dq .init:_DT_INIT |_.dynamic:0060...[2] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_FINI |_.dynamic:0060...d_val dq .fini:_DT_FINI |_.dynamic:0060...[3] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_INIT_ARRAY |_.dynamic:0060...d_val dq .init_array:__DT_INIT_ARRAY |_.dynamic:0060...[4] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_INIT_ARRAYSZ |_.dynamic:0060...d_val dq 8h |_.dynamic:0060...[5] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_FINI_ARRAY |_.dynamic:0060...d_val dq .fini_array:__DT_FINI_ARRAY |_.dynamic:0060...[6] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_FINI_ARRAYSZ |_.dynamic:0060...d_val dq 8h |_.dynamic:0060...[7] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_GNU_HASH |_.dynamic:0060...d_val dq .gnu.hash:__DT_GNU_HASH |_.dynamic:0060...[8] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_STRTAB |_.dynamic:0060...d_val dq .dynstr:__DT_STRTAB |_.dynamic:0060...[9] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_SYMTAB |_.dynamic:0060...d_val dq .dynsym:__DT_SYMTAB |_.dynamic:0060...[10] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_STRSZ |_.dynamic:0060...d_val dq 114h |_.dynamic:0060...[11] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_SYMENT |_.dynamic:0060...d_val dq 18h |_.dynamic:0060...[12] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_DEBUG |_.dynamic:0060...d_val dq 0h |_.dynamic:0060...[13] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_PLTGOT |_.dynamic:0060...d_val dq .got.plt:__DT_PLTGOT |_.dynamic:0060...[14] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_PLTRELSZ |_.dynamic:0060...d_val dq 318h |_.dynamic:0060...[15] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_PLTREL |_.dynamic:0060...d_val dq 7h |_.dynamic:0060...[16] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_JMPREL |_.dynamic:0060...d_val dq .rela.plt:__DT_JMPREL |_.dynamic:0060...[17] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_RELA |_.dynamic:0060...d_val dq .rela.dyn:__DT_RELA |_.dynamic:0060...[18] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_RELASZ |_.dynamic:0060...d_val dq 48h |_.dynamic:0060...[19] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_RELAENT |_.dynamic:0060...d_val dq 18h |_.dynamic:0060...[20] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_VERNEED |_.dynamic:0060...d_val dq .gnu.version_r:__DT_VERNEED |_.dynamic:0060...[21] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_VERNEEDNUM |_.dynamic:0060...d_val dq 1h |_.dynamic:0060...[22] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_VERSYM |_.dynamic:0060...d_val dq .gnu.version:__DT_VERSYM |_.dynamic:0060...[23] Elf64_Dyn |_.dynamic:0060...d_tag Elf64_Dy...DT_NULL |_.dynamic:0060...d_val dq 0h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h .dynamic:0060...00 ?? 00h PTR___gmon_start___00602ff8: ;XREF[2,0]: 00400b14,_elfSectionHeaders::00000590 .got:00602ff8 a84060000... addr EXTERNAL:__gmon_start__ ;= ?? __DT_PLTGOT: ;XREF[2,0]: 00602f00,_elfSectionHeaders::000005d0 .got.plt:0060...282e60000... addr .dynamic:_DYNAMIC ;= PTR_00603008: ;XREF[1,0]: 00400b30 .got.plt:0060...000000000... addr 00000000 PTR_00603010: ;XREF[1,0]: 00400b36 .got.plt:0060...000000000... addr 00000000 PTR_utime_00603018: ;XREF[1,0]: 00400b40 .got.plt:0060...004060000... addr EXTERNAL:utime ;= ?? PTR_free_00603020: ;XREF[1,0]: 00400b50 .got.plt:0060...084060000... addr EXTERNAL:free ;= ?? PTR_strncpy_00603028: ;XREF[1,0]: 00400b60 .got.plt:0060...104060000... addr EXTERNAL:strncpy ;= ?? PTR_strncmp_00603030: ;XREF[1,0]: 00400b70 .got.plt:0060...184060000... addr EXTERNAL:strncmp ;= ?? PTR_strcpy_00603038: ;XREF[1,0]: 00400b80 .got.plt:0060...204060000... addr EXTERNAL:strcpy ;= ?? PTR_fcntl_00603040: ;XREF[1,0]: 00400b90 .got.plt:0060...284060000... addr EXTERNAL:fcntl ;= ?? PTR_write_00603048: ;XREF[1,0]: 00400ba0 .got.plt:0060...304060000... addr EXTERNAL:write ;= ?? PTR_getpid_00603050: ;XREF[1,0]: 00400bb0 .got.plt:0060...384060000... addr EXTERNAL:getpid ;= ?? PTR_ctime_00603058: ;XREF[1,0]: 00400bc0 .got.plt:0060...404060000... addr EXTERNAL:ctime ;= ?? PTR_strlen_00603060: ;XREF[1,0]: 00400bd0 .got.plt:0060...484060000... addr EXTERNAL:strlen ;= ?? PTR_strchr_00603068: ;XREF[1,0]: 00400be0 .got.plt:0060...504060000... addr EXTERNAL:strchr ;= ?? PTR_printf_00603070: ;XREF[1,0]: 00400bf0 .got.plt:0060...584060000... addr EXTERNAL:printf ;= ?? PTR_ftruncate_00603078: ;XREF[1,0]: 00400c00 .got.plt:0060...604060000... addr EXTERNAL:ftruncate ;= ?? PTR_lseek_00603080: ;XREF[1,0]: 00400c10 .got.plt:0060...684060000... addr EXTERNAL:lseek ;= ?? PTR_memset_00603088: ;XREF[1,0]: 00400c20 .got.plt:0060...704060000... addr EXTERNAL:memset ;= ?? PTR_close_00603090: ;XREF[1,0]: 00400c30 .got.plt:0060...784060000... addr EXTERNAL:close ;= ?? PTR_read_00603098: ;XREF[1,0]: 00400c40 .got.plt:0060...804060000... addr EXTERNAL:read ;= ?? PTR___libc_start_main_00603...;XREF[1,0]: 00400c50 .got.plt:0060...884060000... addr EXTERNAL:__libc_start_main ;= ?? PTR_calloc_006030a8: ;XREF[1,0]: 00400c60 .got.plt:0060...904060000... addr EXTERNAL:calloc ;= ?? PTR_strcmp_006030b0: ;XREF[1,0]: 00400c70 .got.plt:0060...984060000... addr EXTERNAL:strcmp ;= ?? PTR_getpwnam_006030b8: ;XREF[1,0]: 00400c80 .got.plt:0060...a04060000... addr EXTERNAL:getpwnam ;= ?? PTR___gmon_start___006030c0: ;XREF[1,0]: 00400c90 .got.plt:0060...a84060000... addr EXTERNAL:__gmon_start__ ;= ?? PTR_memcpy_006030c8: ;XREF[1,0]: 00400ca0 .got.plt:0060...b04060000... addr EXTERNAL:memcpy ;= ?? PTR_time_006030d0: ;XREF[1,0]: 00400cb0 .got.plt:0060...b84060000... addr EXTERNAL:time ;= ?? PTR___xstat_006030d8: ;XREF[1,0]: 00400cc0 .got.plt:0060...c04060000... addr EXTERNAL:__xstat ;= ?? PTR_mktime_006030e0: ;XREF[1,0]: 00400cd0 .got.plt:0060...c84060000... addr EXTERNAL:mktime ;= ?? PTR_chown_006030e8: ;XREF[1,0]: 00400ce0 .got.plt:0060...d04060000... addr EXTERNAL:chown ;= ?? PTR_open_006030f0: ;XREF[1,0]: 00400cf0 .got.plt:0060...d84060000... addr EXTERNAL:open ;= ?? PTR_getopt_006030f8: ;XREF[1,0]: 00400d00 .got.plt:0060...e04060000... addr EXTERNAL:getopt ;= ?? PTR_atoi_00603100: ;XREF[1,0]: 00400d10 .got.plt:0060...e84060000... addr EXTERNAL:atoi ;= ?? PTR_sprintf_00603108: ;XREF[1,0]: 00400d20 .got.plt:0060...f04060000... addr EXTERNAL:sprintf ;= ?? PTR_exit_00603110: ;XREF[1,0]: 00400d30 .got.plt:0060...f84060000... addr EXTERNAL:exit ;= ?? PTR_strstr_00603118: ;XREF[1,0]: 00400d40 .got.plt:0060...004160000... addr EXTERNAL:strstr ;= ?? DAT_00603120: ;XREF[1,0]: _elfSectionHeaders::00000610 .data:00603120 00 ?? 00h .data:00603121 00 ?? 00h .data:00603122 00 ?? 00h .data:00603123 00 ?? 00h .data:00603124 00 ?? 00h .data:00603125 00 ?? 00h .data:00603126 00 ?? 00h .data:00603127 00 ?? 00h .data:00603128 00 ?? 00h .data:00603129 00 ?? 00h .data:0060312a 00 ?? 00h .data:0060312b 00 ?? 00h .data:0060312c 00 ?? 00h .data:0060312d 00 ?? 00h .data:0060312e 00 ?? 00h .data:0060312f 00 ?? 00h UTMP: ;XREF[6,0]: 00400efc,00400efc,00401257,0040126e ; 00401639,00401650 .data:00603130 7e ?? 7Eh ~ .data:00603131 b8 ?? B8h .data:00603132 29 ?? 29h ) .data:00603133 a7 ?? A7h .data:00603134 58 ?? 58h X .data:00603135 88 ?? 88h .data:00603136 f4 ?? F4h .data:00603137 66 ?? 66h f .data:00603138 61 ?? 61h a .data:00603139 e5 ?? E5h .data:0060313a d5 ?? D5h .data:0060313b 10 ?? 10h .data:0060313c 2e ?? 2Eh . .data:0060313d 00 ?? 00h WTMP: ;XREF[6,0]: 00400f0b,00400f0b,004012f5,0040130c ; 00401617,0040162e .data:0060313e 7e ?? 7Eh ~ .data:0060313f b8 ?? B8h .data:00603140 29 ?? 29h ) .data:00603141 a7 ?? A7h .data:00603142 58 ?? 58h X .data:00603143 96 ?? 96h .data:00603144 ee ?? EEh .data:00603145 6f ?? 6Fh o .data:00603146 61 ?? 61h a .data:00603147 e7 ?? E7h .data:00603148 d5 ?? D5h .data:00603149 10 ?? 10h .data:0060314a 2e ?? 2Eh . .data:0060314b 00 ?? 00h BTMP: ;XREF[6,0]: 00400f1a,00400f1a,00401393,004013aa ; 0040165b,00401672 .data:0060314c 7e ?? 7Eh ~ .data:0060314d b8 ?? B8h .data:0060314e 29 ?? 29h ) .data:0060314f a7 ?? A7h .data:00603150 58 ?? 58h X .data:00603151 96 ?? 96h .data:00603152 ee ?? EEh .data:00603153 6f ?? 6Fh o .data:00603154 61 ?? 61h a .data:00603155 f2 ?? F2h .data:00603156 d5 ?? D5h .data:00603157 10 ?? 10h .data:00603158 2e ?? 2Eh . .data:00603159 00 ?? 00h .data:0060315a 00 ?? 00h .data:0060315b 00 ?? 00h .data:0060315c 00 ?? 00h .data:0060315d 00 ?? 00h .data:0060315e 00 ?? 00h .data:0060315f 00 ?? 00h LASTLOG: ;XREF[9,0]: 00400f29,00400f29,00401405,00401418 ; 004014e9,00401508,0040157b,0040167d ; 00401690 .data:00603160 3f ?? 3Fh ? .data:00603161 30 ?? 30h 0 .data:00603162 41 ?? 41h A .data:00603163 47 ?? 47h G .data:00603164 39 ?? 39h 9 .data:00603165 76 ?? 76h v .data:00603166 75 ?? 75h u .data:00603167 be ?? BEh .data:00603168 21 ?? 21h ! .data:00603169 c8 ?? C8h .data:0060316a 0e ?? 0Eh .data:0060316b 07 ?? 07h .data:0060316c 3c ?? 3Ch < .data:0060316d 54 ?? 54h T .data:0060316e df ?? DFh .data:0060316f 09 ?? 09h .data:00603170 00 ?? 00h .data:00603171 00 ?? 00h .data:00603172 00 ?? 00h .data:00603173 00 ?? 00h .data:00603174 00 ?? 00h .data:00603175 00 ?? 00h .data:00603176 00 ?? 00h .data:00603177 00 ?? 00h .data:00603178 00 ?? 00h .data:00603179 00 ?? 00h .data:0060317a 00 ?? 00h .data:0060317b 00 ?? 00h .data:0060317c 00 ?? 00h .data:0060317d 00 ?? 00h .data:0060317e 00 ?? 00h .data:0060317f 00 ?? 00h MESSAGES: ;XREF[5,0]: 00400f38,00400f38,0040169b,004016b1 ; 004016ca .data:00603180 e4 ?? E4h .data:00603181 18 ?? 18h .data:00603182 1a ?? 1Ah .data:00603183 09 ?? 09h .data:00603184 71 ?? 71h q .data:00603185 38 ?? 38h 8 .data:00603186 0f ?? 0Fh .data:00603187 fd ?? FDh .data:00603188 61 ?? 61h a .data:00603189 6d ?? 6Dh m .data:0060318a 6c ?? 6Ch l .data:0060318b 02 ?? 02h .data:0060318c bc ?? BCh .data:0060318d d7 ?? D7h .data:0060318e f6 ?? F6h .data:0060318f a2 ?? A2h .data:00603190 da ?? DAh .data:00603191 00 ?? 00h .data:00603192 00 ?? 00h .data:00603193 00 ?? 00h .data:00603194 00 ?? 00h .data:00603195 00 ?? 00h .data:00603196 00 ?? 00h .data:00603197 00 ?? 00h .data:00603198 00 ?? 00h .data:00603199 00 ?? 00h .data:0060319a 00 ?? 00h .data:0060319b 00 ?? 00h .data:0060319c 00 ?? 00h .data:0060319d 00 ?? 00h .data:0060319e 00 ?? 00h .data:0060319f 00 ?? 00h SECURE: ;XREF[7,0]: 00400f47,00400f47,004016d5,004016eb ; 00401704,0040198e,004019a7 .data:006031a0 a1 ?? A1h .data:006031a1 68 ?? 68h h .data:006031a2 9f ?? 9Fh .data:006031a3 5a ?? 5Ah Z .data:006031a4 28 ?? 28h ( .data:006031a5 cb ?? CBh .data:006031a6 62 ?? 62h b .data:006031a7 36 ?? 36h 6 .data:006031a8 e1 ?? E1h .data:006031a9 3b ?? 3Bh ; .data:006031aa b0 ?? B0h .data:006031ab 14 ?? 14h .data:006031ac 8f ?? 8Fh .data:006031ad f3 ?? F3h .data:006031ae 6d ?? 6Dh m .data:006031af 00 ?? 00h WARN: ;XREF[5,0]: 00400f56,00400f56,004017bd,004017d3 ; 004017ec .data:006031b0 7e ?? 7Eh ~ .data:006031b1 b8 ?? B8h .data:006031b2 29 ?? 29h ) .data:006031b3 a7 ?? A7h .data:006031b4 58 ?? 58h X .data:006031b5 96 ?? 96h .data:006031b6 ee ?? EEh .data:006031b7 6f ?? 6Fh o .data:006031b8 61 ?? 61h a .data:006031b9 e7 ?? E7h .data:006031ba c0 ?? C0h .data:006031bb 0f ?? 0Fh .data:006031bc 30 ?? 30h 0 .data:006031bd 00 ?? 00h DEBUG: ;XREF[5,0]: 00400f65,00400f65,004017f7,0040180d ; 00401826 .data:006031be fc ?? FCh .data:006031bf 80 ?? 80h .data:006031c0 c2 ?? C2h .data:006031c1 90 ?? 90h .data:006031c2 90 ?? 90h .data:006031c3 01 ?? 01h .data:006031c4 a8 ?? A8h .data:006031c5 f7 ?? F7h .data:006031c6 a1 ?? A1h .data:006031c7 88 ?? 88h .data:006031c8 5e ?? 5Eh ^ .data:006031c9 18 ?? 18h .data:006031ca d9 ?? D9h .data:006031cb ad ?? ADh .data:006031cc 00 ?? 00h .data:006031cd 00 ?? 00h .data:006031ce 00 ?? 00h .data:006031cf 00 ?? 00h AUDIT0: ;XREF[7,0]: 00400f74,00400f74,00401831,00401847 ; 00401860,004019b2,004019cb .data:006031d0 12 ?? 12h .data:006031d1 f0 ?? F0h .data:006031d2 2c ?? 2Ch , .data:006031d3 f3 ?? F3h .data:006031d4 32 ?? 32h 2 .data:006031d5 a2 ?? A2h .data:006031d6 25 ?? 25h % .data:006031d7 9a ?? 9Ah .data:006031d8 68 ?? 68h h .data:006031d9 dc ?? DCh .data:006031da 4a ?? 4Ah J .data:006031db f1 ?? F1h .data:006031dc 0a ?? 0Ah .data:006031dd c3 ?? C3h .data:006031de b4 ?? B4h .data:006031df 57 ?? 57h W .data:006031e0 e8 ?? E8h .data:006031e1 33 ?? 33h 3 .data:006031e2 59 ?? 59h Y .data:006031e3 75 ?? 75h u .data:006031e4 67 ?? 67h g .data:006031e5 c8 ?? C8h ;? -> 00402bc8 .data:006031e6 2b ?? 2Bh + .data:006031e7 40 ?? 40h @ .data:006031e8 00 ?? 00h .data:006031e9 00 ?? 00h .data:006031ea 00 ?? 00h .data:006031eb 00 ?? 00h .data:006031ec 00 ?? 00h .data:006031ed 00 ?? 00h .data:006031ee 00 ?? 00h .data:006031ef 00 ?? 00h AUDIT1: ;XREF[7,0]: 00400f83,00400f83,0040186b,00401881 ; 0040189a,004019d6,004019ef .data:006031f0 55 ?? 55h U .data:006031f1 a0 ?? A0h .data:006031f2 62 ?? 62h b .data:006031f3 a6 ?? A6h .data:006031f4 82 ?? 82h .data:006031f5 17 ?? 17h .data:006031f6 b9 ?? B9h .data:006031f7 21 ?? 21h ! .data:006031f8 e8 ?? E8h .data:006031f9 cf ?? CFh .data:006031fa d9 ?? D9h .data:006031fb ac ?? ACh .data:006031fc 96 ?? 96h .data:006031fd 51 ?? 51h Q .data:006031fe 0b ?? 0Bh .data:006031ff 89 ?? 89h .data:00603200 9a ?? 9Ah .data:00603201 70 ?? 70h p .data:00603202 a9 ?? A9h .data:00603203 b4 ?? B4h .data:00603204 46 ?? 46h F .data:00603205 d0 ?? D0h .data:00603206 6e ?? 6Eh n .data:00603207 ca ?? CAh .data:00603208 df ?? DFh .data:00603209 91 ?? 91h .data:0060320a 00 ?? 00h .data:0060320b 00 ?? 00h .data:0060320c 00 ?? 00h .data:0060320d 00 ?? 00h .data:0060320e 00 ?? 00h .data:0060320f 00 ?? 00h AUDIT2: ;XREF[7,0]: 00400f92,00400f92,004018a5,004018bb ; 004018d4,004019fa,00401a13 .data:00603210 55 ?? 55h U .data:00603211 a0 ?? A0h .data:00603212 62 ?? 62h b .data:00603213 a6 ?? A6h .data:00603214 82 ?? 82h .data:00603215 17 ?? 17h .data:00603216 b9 ?? B9h .data:00603217 21 ?? 21h ! .data:00603218 e8 ?? E8h .data:00603219 cf ?? CFh .data:0060321a d9 ?? D9h .data:0060321b ac ?? ACh .data:0060321c 96 ?? 96h .data:0060321d 51 ?? 51h Q .data:0060321e 0b ?? 0Bh .data:0060321f 89 ?? 89h .data:00603220 9a ?? 9Ah .data:00603221 70 ?? 70h p .data:00603222 a9 ?? A9h .data:00603223 b4 ?? B4h .data:00603224 46 ?? 46h F .data:00603225 d0 ?? D0h .data:00603226 6e ?? 6Eh n .data:00603227 ca ?? CAh .data:00603228 df ?? DFh .data:00603229 92 ?? 92h .data:0060322a 00 ?? 00h .data:0060322b 00 ?? 00h .data:0060322c 00 ?? 00h .data:0060322d 00 ?? 00h .data:0060322e 00 ?? 00h .data:0060322f 00 ?? 00h AUTHLOG: ;XREF[5,0]: 00400fa1,00400fa1,004018df,004018f5 ; 0040190e .data:00603230 e4 ?? E4h .data:00603231 18 ?? 18h .data:00603232 1a ?? 1Ah .data:00603233 09 ?? 09h .data:00603234 71 ?? 71h q .data:00603235 38 ?? 38h 8 .data:00603236 0f ?? 0Fh .data:00603237 fd ?? FDh .data:00603238 61 ?? 61h a .data:00603239 61 ?? 61h a .data:0060323a 7c ?? 7Ch | .data:0060323b 05 ?? 05h .data:0060323c a7 ?? A7h .data:0060323d 98 ?? 98h .data:0060323e fd ?? FDh .data:0060323f a8 ?? A8h .data:00603240 ce ?? CEh .data:00603241 00 ?? 00h .data:00603242 00 ?? 00h .data:00603243 00 ?? 00h .data:00603244 00 ?? 00h .data:00603245 00 ?? 00h .data:00603246 00 ?? 00h .data:00603247 00 ?? 00h .data:00603248 00 ?? 00h .data:00603249 00 ?? 00h .data:0060324a 00 ?? 00h .data:0060324b 00 ?? 00h .data:0060324c 00 ?? 00h .data:0060324d 00 ?? 00h .data:0060324e 00 ?? 00h .data:0060324f 00 ?? 00h HISTORY: ;XREF[5,0]: 00400fb0,00400fb0,00401919,0040192f ; 00401948 .data:00603250 1a ?? 1Ah .data:00603251 88 ?? 88h .data:00603252 44 ?? 44h D .data:00603253 93 ?? 93h .data:00603254 93 ?? 93h .data:00603255 82 ?? 82h .data:00603256 73 ?? 73h s .data:00603257 a9 ?? A9h .data:00603258 28 ?? 28h ( .data:00603259 49 ?? 49h I .data:0060325a 29 ?? 29h ) .data:0060325b ab ?? ABh .data:0060325c f5 ?? F5h .data:0060325d b3 ?? B3h .data:0060325e 69 ?? 69h i .data:0060325f 24 ?? 24h $ .data:00603260 14 ?? 14h .data:00603261 66 ?? 66h f .data:00603262 fc ?? FCh .data:00603263 93 ?? 93h .data:00603264 33 ?? 33h 3 .data:00603265 21 ?? 21h ! .data:00603266 0f ?? 0Fh .data:00603267 c3 ?? C3h .data:00603268 38 ?? 38h 8 .data:00603269 5d ?? 5Dh ] .data:0060326a 94 ?? 94h .data:0060326b 00 ?? 00h .data:0060326c 00 ?? 00h .data:0060326d 00 ?? 00h .data:0060326e 00 ?? 00h .data:0060326f 00 ?? 00h AUTHPRIV: ;XREF[5,0]: 00400fbf,00400fbf,0040170f,00401725 ; 0040173e .data:00603270 e4 ?? E4h .data:00603271 18 ?? 18h .data:00603272 1a ?? 1Ah .data:00603273 09 ?? 09h .data:00603274 71 ?? 71h q .data:00603275 38 ?? 38h 8 .data:00603276 0f ?? 0Fh .data:00603277 fd ?? FDh .data:00603278 61 ?? 61h a .data:00603279 61 ?? 61h a .data:0060327a 7c ?? 7Ch | .data:0060327b 05 ?? 05h .data:0060327c a7 ?? A7h .data:0060327d c6 ?? C6h .data:0060327e e3 ?? E3h .data:0060327f ae ?? AEh .data:00603280 df ?? DFh .data:00603281 00 ?? 00h .data:00603282 00 ?? 00h .data:00603283 00 ?? 00h .data:00603284 00 ?? 00h .data:00603285 00 ?? 00h .data:00603286 00 ?? 00h .data:00603287 00 ?? 00h .data:00603288 00 ?? 00h .data:00603289 00 ?? 00h .data:0060328a 00 ?? 00h .data:0060328b 00 ?? 00h .data:0060328c 00 ?? 00h .data:0060328d 00 ?? 00h .data:0060328e 00 ?? 00h .data:0060328f 00 ?? 00h DEAMONLOG: ;XREF[5,0]: 00400fce,00400fce,00401749,0040175f ; 00401778 .data:00603290 27 ?? 27h ' .data:00603291 c8 ?? C8h .data:00603292 99 ?? 99h .data:00603293 bc ?? BCh .data:00603294 c1 ?? C1h .data:00603295 6d ?? 6Dh m .data:00603296 83 ?? 83h .data:00603297 84 ?? 84h .data:00603298 e1 ?? E1h .data:00603299 95 ?? 95h .data:0060329a 5c ?? 5Ch \ .data:0060329b c1 ?? C1h .data:0060329c 06 ?? 06h .data:0060329d 4b ?? 4Bh K .data:0060329e 8f ?? 8Fh .data:0060329f 57 ?? 57h W .data:006032a0 ae ?? AEh .data:006032a1 74 ?? 74h t .data:006032a2 b1 ?? B1h .data:006032a3 00 ?? 00h .data:006032a4 00 ?? 00h .data:006032a5 00 ?? 00h .data:006032a6 00 ?? 00h .data:006032a7 00 ?? 00h .data:006032a8 00 ?? 00h .data:006032a9 00 ?? 00h .data:006032aa 00 ?? 00h .data:006032ab 00 ?? 00h .data:006032ac 00 ?? 00h .data:006032ad 00 ?? 00h .data:006032ae 00 ?? 00h .data:006032af 00 ?? 00h SYSLOG: ;XREF[5,0]: 00400fdd,00400fdd,00401783,00401799 ; 004017b2 .data:006032b0 a1 ?? A1h .data:006032b1 68 ?? 68h h .data:006032b2 9f ?? 9Fh .data:006032b3 5a ?? 5Ah Z .data:006032b4 28 ?? 28h ( .data:006032b5 cb ?? CBh .data:006032b6 62 ?? 62h b .data:006032b7 36 ?? 36h 6 .data:006032b8 e1 ?? E1h .data:006032b9 3b ?? 3Bh ; .data:006032ba ac ?? ACh .data:006032bb 04 ?? 04h .data:006032bc 96 ?? 96h .data:006032bd ee ?? EEh .data:006032be 6f ?? 6Fh o .data:006032bf 00 ?? 00h ACHTdPROZENTs: ;XREF[10,0]: 00400fec,00400fec,00401b9c,00401b9c ; 00401db4,00401db4,004024f6,004024f6 ; 004027b9,004027b9 .data:006032c0 44 ?? 44h D .data:006032c1 9d ?? 9Dh .data:006032c2 fc ?? FCh .data:006032c3 35 ?? 35h 5 .data:006032c4 25 ?? 25h % .data:006032c5 80 ?? 80h .data:006032c6 d7 ?? D7h .data:006032c7 00 ?? 00h OPTOPTS: ;XREF[4,0]: 00400ffb,00400ffb,00401195,00401195 .data:006032c8 72 ?? 72h r .data:006032c9 44 ?? 44h D .data:006032ca bf ?? BFh .data:006032cb b8 ?? B8h .data:006032cc 8f ?? 8Fh .data:006032cd 3a ?? 3Ah : .data:006032ce 97 ?? 97h .data:006032cf d3 ?? D3h .data:006032d0 f8 ?? F8h .data:006032d1 ab ?? ABh .data:006032d2 0c ?? 0Ch .data:006032d3 00 ?? 00h UIDISPROZD: ;XREF[4,0]: 0040100a,0040100a,0040197c,0040197c .data:006032d4 14 ?? 14h .data:006032d5 cc ?? CCh .data:006032d6 fc ?? FCh .data:006032d7 28 ?? 28h ( .data:006032d8 25 ?? 25h % .data:006032d9 de ?? DEh .data:006032da b9 ?? B9h .data:006032db 00 ?? 00h .data:006032dc 00 ?? 00h .data:006032dd 00 ?? 00h .data:006032de 00 ?? 00h .data:006032df 00 ?? 00h ERRORARGSEXIT: ;XREF[4,0]: 00400ece,00400ece,00401019,00401019 .data:006032e0 ae ?? AEh .data:006032e1 1c ?? 1Ch .data:006032e2 09 ?? 09h .data:006032e3 14 ?? 14h .data:006032e4 2c ?? 2Ch , .data:006032e5 74 ?? 74h t .data:006032e6 01 ?? 01h .data:006032e7 e8 ?? E8h .data:006032e8 29 ?? 29h ) .data:006032e9 73 ?? 73h s .data:006032ea 25 ?? 25h % .data:006032eb 51 ?? 51h Q .data:006032ec aa ?? AAh .data:006032ed ce ?? CEh .data:006032ee f8 ?? F8h .data:006032ef b3 ?? B3h .data:006032f0 a3 ?? A3h .data:006032f1 00 ?? 00h ROOT: ;XREF[4,0]: 00401028,00401028,004015ff,004015ff .data:006032f2 1b ?? 1Bh .data:006032f3 42 ?? 42h B .data:006032f4 af ?? AFh .data:006032f5 08 ?? 08h .data:006032f6 00 ?? 00h optind: ;XREF[23,0]: Entry Point,004011ea,0040120a ; 0040122b,00401288,004012a8 ; 004012c9,00401326,00401346 ; 00401367,004013c0,004013dd ; 00401432,00401452,00401473 ; 00401498,004014bd,0040151e ; 0040153b,00401595,004015b5 ; 004015d6,_elfSectionHeaders::00000650 .bss:00603300 00000000 undefined4 00000000h .bss:00603304 00 ?? 00h .bss:00603305 00 ?? 00h .bss:00603306 00 ?? 00h .bss:00603307 00 ?? 00h optarg: ;XREF[5,0]: Entry Point,004010c3,004010da ; 004010ed,00401120 .bss:00603308 000000000... undefined8 0000000000000000h DAT_00603310: ;XREF[2,0]: 00400df0,00400e03 .bss:00603310 00 ?? 00h .bss:00603311 00 ?? 00h .bss:00603312 00 ?? 00h .bss:00603313 00 ?? 00h .bss:00603314 00 ?? 00h .bss:00603315 00 ?? 00h .bss:00603316 00 ?? 00h .bss:00603317 00 ?? 00h .bss:00603318 00 ?? 00h .bss:00603319 00 ?? 00h .bss:0060331a 00 ?? 00h .bss:0060331b 00 ?? 00h .bss:0060331c 00 ?? 00h .bss:0060331d 00 ?? 00h .bss:0060331e 00 ?? 00h .bss:0060331f 00 ?? 00h DAT_00603320: ;XREF[3,0]: 00401abd,00401af3,00401af3 .bss:00603320 00 ?? 00h .bss:00603321 00 ?? 00h DAT_00603322: ;XREF[1,0]: 00401ad1 .bss:00603322 00 ?? 00h .bss:00603323 00 ?? 00h .bss:00603324 00 ?? 00h .bss:00603325 00 ?? 00h .bss:00603326 00 ?? 00h .bss:00603327 00 ?? 00h DAT_00603328: ;XREF[1,0]: 00401ac6 .bss:00603328 00 ?? 00h .bss:00603329 00 ?? 00h .bss:0060332a 00 ?? 00h .bss:0060332b 00 ?? 00h .bss:0060332c 00 ?? 00h .bss:0060332d 00 ?? 00h .bss:0060332e 00 ?? 00h .bss:0060332f 00 ?? 00h DAT_00603330: ;XREF[1,0]: 00401ada .bss:00603330 00 ?? 00h .bss:00603331 00 ?? 00h .bss:00603332 00 ?? 00h .bss:00603333 00 ?? 00h .bss:00603334 00 ?? 00h .bss:00603335 00 ?? 00h .bss:00603336 00 ?? 00h .bss:00603337 00 ?? 00h DAT_00603338: ;XREF[1,0]: 00401aea .bss:00603338 00 ?? 00h .bss:00603339 00 ?? 00h .bss:0060333a 00 ?? 00h .bss:0060333b 00 ?? 00h .bss:0060333c 00 ?? 00h .bss:0060333d 00 ?? 00h .bss:0060333e 00 ?? 00h .bss:0060333f 00 ?? 00h DAT_00603340: ;XREF[3,0]: 00401c5f,00401c95,00401c95 .bss:00603340 00 ?? 00h .bss:00603341 00 ?? 00h DAT_00603342: ;XREF[1,0]: 00401c73 .bss:00603342 00 ?? 00h .bss:00603343 00 ?? 00h .bss:00603344 00 ?? 00h .bss:00603345 00 ?? 00h .bss:00603346 00 ?? 00h .bss:00603347 00 ?? 00h DAT_00603348: ;XREF[1,0]: 00401c68 .bss:00603348 00 ?? 00h .bss:00603349 00 ?? 00h .bss:0060334a 00 ?? 00h .bss:0060334b 00 ?? 00h .bss:0060334c 00 ?? 00h .bss:0060334d 00 ?? 00h .bss:0060334e 00 ?? 00h .bss:0060334f 00 ?? 00h DAT_00603350: ;XREF[1,0]: 00401c7c .bss:00603350 00 ?? 00h .bss:00603351 00 ?? 00h .bss:00603352 00 ?? 00h .bss:00603353 00 ?? 00h .bss:00603354 00 ?? 00h .bss:00603355 00 ?? 00h .bss:00603356 00 ?? 00h .bss:00603357 00 ?? 00h DAT_00603358: ;XREF[1,0]: 00401c8c .bss:00603358 00 ?? 00h .bss:00603359 00 ?? 00h .bss:0060335a 00 ?? 00h .bss:0060335b 00 ?? 00h .bss:0060335c 00 ?? 00h .bss:0060335d 00 ?? 00h .bss:0060335e 00 ?? 00h .bss:0060335f 00 ?? 00h DAT_00603360: ;XREF[3,0]: 0040203e,00402074,00402074 .bss:00603360 00 ?? 00h .bss:00603361 00 ?? 00h DAT_00603362: ;XREF[1,0]: 00402052 .bss:00603362 00 ?? 00h .bss:00603363 00 ?? 00h .bss:00603364 00 ?? 00h .bss:00603365 00 ?? 00h .bss:00603366 00 ?? 00h .bss:00603367 00 ?? 00h DAT_00603368: ;XREF[1,0]: 00402047 .bss:00603368 00 ?? 00h .bss:00603369 00 ?? 00h .bss:0060336a 00 ?? 00h .bss:0060336b 00 ?? 00h .bss:0060336c 00 ?? 00h .bss:0060336d 00 ?? 00h .bss:0060336e 00 ?? 00h .bss:0060336f 00 ?? 00h DAT_00603370: ;XREF[1,0]: 0040205b .bss:00603370 00 ?? 00h .bss:00603371 00 ?? 00h .bss:00603372 00 ?? 00h .bss:00603373 00 ?? 00h .bss:00603374 00 ?? 00h .bss:00603375 00 ?? 00h .bss:00603376 00 ?? 00h .bss:00603377 00 ?? 00h pid: ;XREF[1,0]: 0040206b .bss:00603378 00 ?? 00h .bss:00603379 00 ?? 00h .bss:0060337a 00 ?? 00h .bss:0060337b 00 ?? 00h .bss:0060337c 00 ?? 00h .bss:0060337d 00 ?? 00h .bss:0060337e 00 ?? 00h .bss:0060337f 00 ?? 00h DAT_00603380: ;XREF[3,0]: 00402564,0040259a,0040259a .bss:00603380 00 ?? 00h .bss:00603381 00 ?? 00h DAT_00603382: ;XREF[1,0]: 00402578 .bss:00603382 00 ?? 00h .bss:00603383 00 ?? 00h .bss:00603384 00 ?? 00h .bss:00603385 00 ?? 00h .bss:00603386 00 ?? 00h .bss:00603387 00 ?? 00h DAT_00603388: ;XREF[1,0]: 0040256d .bss:00603388 00 ?? 00h .bss:00603389 00 ?? 00h .bss:0060338a 00 ?? 00h .bss:0060338b 00 ?? 00h .bss:0060338c 00 ?? 00h .bss:0060338d 00 ?? 00h .bss:0060338e 00 ?? 00h .bss:0060338f 00 ?? 00h DAT_00603390: ;XREF[1,0]: 00402581 .bss:00603390 00 ?? 00h .bss:00603391 00 ?? 00h .bss:00603392 00 ?? 00h .bss:00603393 00 ?? 00h .bss:00603394 00 ?? 00h .bss:00603395 00 ?? 00h .bss:00603396 00 ?? 00h .bss:00603397 00 ?? 00h DAT_00603398: ;XREF[1,0]: 00402591 .bss:00603398 00 ?? 00h .bss:00603399 00 ?? 00h .bss:0060339a 00 ?? 00h .bss:0060339b 00 ?? 00h .bss:0060339c 00 ?? 00h .bss:0060339d 00 ?? 00h .bss:0060339e 00 ?? 00h .bss:0060339f 00 ?? 00h .bss:006033a0 00 ?? 00h .bss:006033a1 00 ?? 00h .bss:006033a2 00 ?? 00h .bss:006033a3 00 ?? 00h .bss:006033a4 00 ?? 00h .bss:006033a5 00 ?? 00h .bss:006033a6 00 ?? 00h .bss:006033a7 00 ?? 00h .bss:006033a8 00 ?? 00h .bss:006033a9 00 ?? 00h .bss:006033aa 00 ?? 00h .bss:006033ab 00 ?? 00h .bss:006033ac 00 ?? 00h .bss:006033ad 00 ?? 00h .bss:006033ae 00 ?? 00h .bss:006033af 00 ?? 00h .bss:006033b0 00 ?? 00h .bss:006033b1 00 ?? 00h .bss:006033b2 00 ?? 00h .bss:006033b3 00 ?? 00h .bss:006033b4 00 ?? 00h .bss:006033b5 00 ?? 00h .bss:006033b6 00 ?? 00h .bss:006033b7 00 ?? 00h .bss:006033b8 00 ?? 00h .bss:006033b9 00 ?? 00h .bss:006033ba 00 ?? 00h .bss:006033bb 00 ?? 00h .bss:006033bc 00 ?? 00h .bss:006033bd 00 ?? 00h .bss:006033be 00 ?? 00h .bss:006033bf 00 ?? 00h .bss:006033c0 00 ?? 00h .bss:006033c1 00 ?? 00h .bss:006033c2 00 ?? 00h .bss:006033c3 00 ?? 00h .bss:006033c4 00 ?? 00h .bss:006033c5 00 ?? 00h .bss:006033c6 00 ?? 00h .bss:006033c7 00 ?? 00h .bss:006033c8 00 ?? 00h .bss:006033c9 00 ?? 00h .bss:006033ca 00 ?? 00h .bss:006033cb 00 ?? 00h .bss:006033cc 00 ?? 00h .bss:006033cd 00 ?? 00h .bss:006033ce 00 ?? 00h .bss:006033cf 00 ?? 00h .bss:006033d0 00 ?? 00h .bss:006033d1 00 ?? 00h .bss:006033d2 00 ?? 00h .bss:006033d3 00 ?? 00h .bss:006033d4 00 ?? 00h .bss:006033d5 00 ?? 00h .bss:006033d6 00 ?? 00h .bss:006033d7 00 ?? 00h .bss:006033d8 00 ?? 00h .bss:006033d9 00 ?? 00h .bss:006033da 00 ?? 00h .bss:006033db 00 ?? 00h .bss:006033dc 00 ?? 00h .bss:006033dd 00 ?? 00h .bss:006033de 00 ?? 00h .bss:006033df 00 ?? 00h .bss:006033e0 00 ?? 00h .bss:006033e1 00 ?? 00h .bss:006033e2 00 ?? 00h .bss:006033e3 00 ?? 00h .bss:006033e4 00 ?? 00h .bss:006033e5 00 ?? 00h .bss:006033e6 00 ?? 00h .bss:006033e7 00 ?? 00h .bss:006033e8 00 ?? 00h .bss:006033e9 00 ?? 00h .bss:006033ea 00 ?? 00h .bss:006033eb 00 ?? 00h .bss:006033ec 00 ?? 00h .bss:006033ed 00 ?? 00h .bss:006033ee 00 ?? 00h .bss:006033ef 00 ?? 00h .bss:006033f0 00 ?? 00h .bss:006033f1 00 ?? 00h .bss:006033f2 00 ?? 00h .bss:006033f3 00 ?? 00h .bss:006033f4 00 ?? 00h .bss:006033f5 00 ?? 00h .bss:006033f6 00 ?? 00h .bss:006033f7 00 ?? 00h .bss:006033f8 00 ?? 00h .bss:006033f9 00 ?? 00h .bss:006033fa 00 ?? 00h .bss:006033fb 00 ?? 00h .bss:006033fc 00 ?? 00h .bss:006033fd 00 ?? 00h .bss:006033fe 00 ?? 00h .bss:006033ff 00 ?? 00h .bss:00603400 00 ?? 00h .bss:00603401 00 ?? 00h .bss:00603402 00 ?? 00h .bss:00603403 00 ?? 00h .bss:00603404 00 ?? 00h .bss:00603405 00 ?? 00h .bss:00603406 00 ?? 00h .bss:00603407 00 ?? 00h .bss:00603408 00 ?? 00h .bss:00603409 00 ?? 00h .bss:0060340a 00 ?? 00h .bss:0060340b 00 ?? 00h .bss:0060340c 00 ?? 00h .bss:0060340d 00 ?? 00h .bss:0060340e 00 ?? 00h .bss:0060340f 00 ?? 00h .bss:00603410 00 ?? 00h .bss:00603411 00 ?? 00h .bss:00603412 00 ?? 00h .bss:00603413 00 ?? 00h .bss:00603414 00 ?? 00h .bss:00603415 00 ?? 00h .bss:00603416 00 ?? 00h .bss:00603417 00 ?? 00h .bss:00603418 00 ?? 00h .bss:00603419 00 ?? 00h .bss:0060341a 00 ?? 00h .bss:0060341b 00 ?? 00h .bss:0060341c 00 ?? 00h .bss:0060341d 00 ?? 00h .bss:0060341e 00 ?? 00h .bss:0060341f 00 ?? 00h .bss:00603420 00 ?? 00h .bss:00603421 00 ?? 00h .bss:00603422 00 ?? 00h .bss:00603423 00 ?? 00h .bss:00603424 00 ?? 00h .bss:00603425 00 ?? 00h .bss:00603426 00 ?? 00h .bss:00603427 00 ?? 00h .bss:00603428 00 ?? 00h .bss:00603429 00 ?? 00h .bss:0060342a 00 ?? 00h .bss:0060342b 00 ?? 00h .bss:0060342c 00 ?? 00h .bss:0060342d 00 ?? 00h .bss:0060342e 00 ?? 00h .bss:0060342f 00 ?? 00h .bss:00603430 00 ?? 00h .bss:00603431 00 ?? 00h .bss:00603432 00 ?? 00h .bss:00603433 00 ?? 00h .bss:00603434 00 ?? 00h .bss:00603435 00 ?? 00h .bss:00603436 00 ?? 00h .bss:00603437 00 ?? 00h .bss:00603438 00 ?? 00h .bss:00603439 00 ?? 00h .bss:0060343a 00 ?? 00h .bss:0060343b 00 ?? 00h .bss:0060343c 00 ?? 00h .bss:0060343d 00 ?? 00h .bss:0060343e 00 ?? 00h .bss:0060343f 00 ?? 00h DAT_00603440: ;XREF[16,0]: 00401a5c,00401a5c,00401b7a,00401b7a ; 00401bfe,00401bfe,00401d92,00401d92 ; 00401ffc,00401ffc,004024dd,004024dd ; 00402525,00402525,004027a3,004027a3 .bss:00603440 00 ?? 00h .bss:00603441 00 ?? 00h .bss:00603442 00 ?? 00h .bss:00603443 00 ?? 00h .bss:00603444 00 ?? 00h .bss:00603445 00 ?? 00h .bss:00603446 00 ?? 00h .bss:00603447 00 ?? 00h .bss:00603448 00 ?? 00h .bss:00603449 00 ?? 00h .bss:0060344a 00 ?? 00h .bss:0060344b 00 ?? 00h .bss:0060344c 00 ?? 00h .bss:0060344d 00 ?? 00h .bss:0060344e 00 ?? 00h .bss:0060344f 00 ?? 00h .bss:00603450 00 ?? 00h .bss:00603451 00 ?? 00h .bss:00603452 00 ?? 00h .bss:00603453 00 ?? 00h .bss:00603454 00 ?? 00h .bss:00603455 00 ?? 00h .bss:00603456 00 ?? 00h .bss:00603457 00 ?? 00h .bss:00603458 00 ?? 00h .bss:00603459 00 ?? 00h .bss:0060345a 00 ?? 00h .bss:0060345b 00 ?? 00h .bss:0060345c 00 ?? 00h .bss:0060345d 00 ?? 00h .bss:0060345e 00 ?? 00h .bss:0060345f 00 ?? 00h .bss:00603460 00 ?? 00h .bss:00603461 00 ?? 00h .bss:00603462 00 ?? 00h .bss:00603463 00 ?? 00h .bss:00603464 00 ?? 00h .bss:00603465 00 ?? 00h .bss:00603466 00 ?? 00h .bss:00603467 00 ?? 00h .bss:00603468 00 ?? 00h .bss:00603469 00 ?? 00h .bss:0060346a 00 ?? 00h .bss:0060346b 00 ?? 00h .bss:0060346c 00 ?? 00h .bss:0060346d 00 ?? 00h .bss:0060346e 00 ?? 00h .bss:0060346f 00 ?? 00h .bss:00603470 00 ?? 00h .bss:00603471 00 ?? 00h .bss:00603472 00 ?? 00h .bss:00603473 00 ?? 00h .bss:00603474 00 ?? 00h .bss:00603475 00 ?? 00h .bss:00603476 00 ?? 00h .bss:00603477 00 ?? 00h .bss:00603478 00 ?? 00h .bss:00603479 00 ?? 00h .bss:0060347a 00 ?? 00h .bss:0060347b 00 ?? 00h .bss:0060347c 00 ?? 00h .bss:0060347d 00 ?? 00h .bss:0060347e 00 ?? 00h .bss:0060347f 00 ?? 00h .bss:00603480 00 ?? 00h .bss:00603481 00 ?? 00h .bss:00603482 00 ?? 00h .bss:00603483 00 ?? 00h .bss:00603484 00 ?? 00h .bss:00603485 00 ?? 00h .bss:00603486 00 ?? 00h .bss:00603487 00 ?? 00h .bss:00603488 00 ?? 00h .bss:00603489 00 ?? 00h .bss:0060348a 00 ?? 00h .bss:0060348b 00 ?? 00h .bss:0060348c 00 ?? 00h .bss:0060348d 00 ?? 00h .bss:0060348e 00 ?? 00h .bss:0060348f 00 ?? 00h .bss:00603490 00 ?? 00h .bss:00603491 00 ?? 00h .bss:00603492 00 ?? 00h .bss:00603493 00 ?? 00h .bss:00603494 00 ?? 00h .bss:00603495 00 ?? 00h .bss:00603496 00 ?? 00h .bss:00603497 00 ?? 00h .bss:00603498 00 ?? 00h .bss:00603499 00 ?? 00h .bss:0060349a 00 ?? 00h .bss:0060349b 00 ?? 00h .bss:0060349c 00 ?? 00h .bss:0060349d 00 ?? 00h .bss:0060349e 00 ?? 00h .bss:0060349f 00 ?? 00h .bss:006034a0 00 ?? 00h .bss:006034a1 00 ?? 00h .bss:006034a2 00 ?? 00h .bss:006034a3 00 ?? 00h .bss:006034a4 00 ?? 00h .bss:006034a5 00 ?? 00h .bss:006034a6 00 ?? 00h .bss:006034a7 00 ?? 00h .bss:006034a8 00 ?? 00h .bss:006034a9 00 ?? 00h .bss:006034aa 00 ?? 00h .bss:006034ab 00 ?? 00h .bss:006034ac 00 ?? 00h .bss:006034ad 00 ?? 00h .bss:006034ae 00 ?? 00h .bss:006034af 00 ?? 00h .bss:006034b0 00 ?? 00h .bss:006034b1 00 ?? 00h .bss:006034b2 00 ?? 00h .bss:006034b3 00 ?? 00h .bss:006034b4 00 ?? 00h .bss:006034b5 00 ?? 00h .bss:006034b6 00 ?? 00h .bss:006034b7 00 ?? 00h .bss:006034b8 00 ?? 00h .bss:006034b9 00 ?? 00h .bss:006034ba 00 ?? 00h .bss:006034bb 00 ?? 00h .bss:006034bc 00 ?? 00h .bss:006034bd 00 ?? 00h .bss:006034be 00 ?? 00h .bss:006034bf 00 ?? 00h .bss:006034c0 00 ?? 00h .bss:006034c1 00 ?? 00h .bss:006034c2 00 ?? 00h .bss:006034c3 00 ?? 00h .bss:006034c4 00 ?? 00h .bss:006034c5 00 ?? 00h .bss:006034c6 00 ?? 00h .bss:006034c7 00 ?? 00h .bss:006034c8 00 ?? 00h .bss:006034c9 00 ?? 00h .bss:006034ca 00 ?? 00h .bss:006034cb 00 ?? 00h .bss:006034cc 00 ?? 00h .bss:006034cd 00 ?? 00h .bss:006034ce 00 ?? 00h .bss:006034cf 00 ?? 00h now: ;XREF[9,0]: 0040109c,004010fe,00401105,00401111 ; 0040112f,00402240,004022db,004026d2 ; 004026f2 .bss:006034d0 000000000... undefined8 0000000000000000h ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int utime(char * __file, utimbuf * __file_times) ;__file char * RDI ;__file_times utimbuf * RSI ;XREF[2,0]: 00400b40,00603018 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;void free(void * __ptr) ;__ptr void * RDI ;XREF[2,0]: 00400b50,00603020 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;char * strncpy(char * __dest, char * __src, size_t __n) ;__dest char * RDI ;__src char * RSI ;__n size_t RDX ;XREF[2,0]: 00400b60,00603028 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int strncmp(char * __s1, char * __s2, size_t __n) ;__s1 char * RDI ;__s2 char * RSI ;__n size_t RDX ;XREF[2,0]: 00400b70,00603030 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;char * strcpy(char * __dest, char * __src) ;__dest char * RDI ;__src char * RSI ;XREF[2,0]: 00400b80,00603038 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int fcntl(int __fd, int __cmd, ...) ;__fd int EDI ;__cmd int ESI ;XREF[2,0]: 00400b90,00603040 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;ssize_t write(int __fd, void * __buf, size_t __n) ;__fd int EDI ;__buf void * RSI ;__n size_t RDX ;XREF[2,0]: 00400ba0,00603048 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;__pid_t getpid(void) ;XREF[2,0]: 00400bb0,00603050 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;char * ctime(time_t * __timer) ;__timer time_t * RDI ;XREF[2,0]: 00400bc0,00603058 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;size_t strlen(char * __s) ;__s char * RDI ;XREF[2,0]: 00400bd0,00603060 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;char * strchr(char * __s, int __c) ;__s char * RDI ;__c int ESI ;XREF[2,0]: 00400be0,00603068 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int printf(char * __format, ...) ;__format char * RDI ;XREF[2,0]: 00400bf0,00603070 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int ftruncate(int __fd, __off_t __length) ;__fd int EDI ;__length __off_t RSI ;XREF[2,0]: 00400c00,00603078 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;__off_t lseek(int __fd, __off_t __offset, int __whence) ;__fd int EDI ;__offset __off_t RSI ;__whence int EDX ;XREF[2,0]: 00400c10,00603080 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;void * memset(void * __s, int __c, size_t __n) ;__s void * RDI ;__c int ESI ;__n size_t RDX ;XREF[2,0]: 00400c20,00603088 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int close(int __fd) ;__fd int EDI ;XREF[2,0]: 00400c30,00603090 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;ssize_t read(int __fd, void * __buf, size_t __nbytes) ;__fd int EDI ;__buf void * RSI ;__nbytes size_t RDX ;XREF[2,0]: 00400c40,00603098 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;undefined __libc_start_main() ;XREF[2,0]: 00400c50,006030a0 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;void * calloc(size_t __nmemb, size_t __size) ;__nmemb size_t RDI ;__size size_t RSI ;XREF[2,0]: 00400c60,006030a8 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int strcmp(char * __s1, char * __s2) ;__s1 char * RDI ;__s2 char * RSI ;XREF[2,0]: 00400c70,006030b0 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;passwd * getpwnam(char * __name) ;__name char * RDI ;XREF[2,0]: 00400c80,006030b8 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;undefined __gmon_start__() ;XREF[4,0]: 00400b14,00400c90,00602ff8,006030c0 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;void * memcpy(void * __dest, void * __src, size_t __n) ;__dest void * RDI ;__src void * RSI ;__n size_t RDX ;XREF[2,0]: 00400ca0,006030c8 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;time_t time(time_t * __timer) ;__timer time_t * RDI ;XREF[2,0]: 00400cb0,006030d0 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int __xstat(int __ver, char * __filename, stat * __stat_buf) ;__ver int EDI ;__filename char * RSI ;__stat_buf stat * RDX ;XREF[2,0]: 00400cc0,006030d8 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;time_t mktime(tm * __tp) ;__tp tm * RDI ;XREF[2,0]: 00400cd0,006030e0 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int chown(char * __file, __uid_t __owner, __gid_t __group) ;__file char * RDI ;__owner __uid_t ESI ;__group __gid_t EDX ;XREF[2,0]: 00400ce0,006030e8 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int open(char * __file, int __oflag, ...) ;__file char * RDI ;__oflag int ESI ;XREF[2,0]: 00400cf0,006030f0 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int getopt(int ___argc, char * * ___argv, char * __shortopts) ;___argc int EDI ;___argv char * * RSI ;__shortopts char * RDX ;XREF[2,0]: 00400d00,006030f8 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int atoi(char * __nptr) ;__nptr char * RDI ;XREF[2,0]: 00400d10,00603100 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;int sprintf(char * __s, char * __format, ...) ;__s char * RDI ;__format char * RSI ;XREF[2,0]: 00400d20,00603108 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;void exit(int __status) ;__status int EDI ;XREF[2,0]: 00400d30,00603110 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? ;************************************************************************************************ ;* FUNCTION * ;************************************************************************************************ ;char * strstr(char * __haystack, char * __needle) ;__haystack char * RDI ;__needle char * RSI ;XREF[2,0]: 00400d40,00603118 EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? EXTERNAL:0060... ?? ?? s_GCC:_(GNU)_4.8.5_20150623...;XREF[1,0]: _elfSectionHeaders::00000690 .comment:.com...4743433a2... ds "GCC: (GNU) 4.8.5 20150623 (Red Hat 4... DAT_.shstrtab__00000000: ;XREF[1,0]: _elfSectionHeaders::000006d0 .shstrtab:.sh...00 ?? 00h .shstrtab:.sh...2e7368737... ds ".shstrtab" .shstrtab:.sh...2e696e746... ds ".interp" .shstrtab:.sh...2e6e6f746... ds ".note.ABI-tag" .shstrtab:.sh...2e6e6f746... ds ".note.gnu.build-id" .shstrtab:.sh...2e676e752... ds ".gnu.hash" .shstrtab:.sh...2e64796e7... ds ".dynsym" .shstrtab:.sh...2e64796e7... ds ".dynstr" .shstrtab:.sh...2e676e752... ds ".gnu.version" .shstrtab:.sh...2e676e752... ds ".gnu.version_r" .shstrtab:.sh...2e72656c6... ds ".rela.dyn" .shstrtab:.sh...2e72656c6... ds ".rela.plt" .shstrtab:.sh...2e696e697400 ds ".init" .shstrtab:.sh...2e7465787400 ds ".text" .shstrtab:.sh...2e66696e6900 ds ".fini" .shstrtab:.sh...2e726f646... ds ".rodata" .shstrtab:.sh...2e65685f6... ds ".eh_frame_hdr" .shstrtab:.sh...2e65685f6... ds ".eh_frame" .shstrtab:.sh...2e696e697... ds ".init_array" .shstrtab:.sh...2e66696e6... ds ".fini_array" .shstrtab:.sh...2e6a637200 ds ".jcr" .shstrtab:.sh...2e64796e6... ds ".dynamic" .shstrtab:.sh...2e676f7400 ds ".got" .shstrtab:.sh...2e676f742... ds ".got.plt" .shstrtab:.sh...2e6461746100 ds ".data" .shstrtab:.sh...2e62737300 ds ".bss" .shstrtab:.sh...2e636f6d6... ds ".comment" Elf64_Shdr_ARRAY__elfSectio...;XREF[1,0]: 00400028 _elfSectionHe...000000000... Elf64_Sh... ;SECTION0 - SHT_NULL |__elfSectionHe...[0] Elf64_Shdr |__elfSectionHe...sh_name ddw 0h |__elfSectionHe...sh_type Elf_Sect...SHT_NULL |__elfSectionHe...sh_flags dq 0h |__elfSectionHe...sh_addr dq 0h |__elfSectionHe...sh_offset dq 0h |__elfSectionHe...sh_size dq 0h |__elfSectionHe...sh_link ddw 0h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 0h |__elfSectionHe...sh_entsize dq 0h |__elfSectionHe...[1] Elf64_Shdr |__elfSectionHe...sh_name ddw Bh |__elfSectionHe...sh_type Elf_Sect...SHT_PROGBITS |__elfSectionHe...sh_flags dq 2h |__elfSectionHe...sh_addr dq .interp:s_/lib64/ld-linux-x86-64.so.2... |__elfSectionHe...sh_offset dq 238h |__elfSectionHe...sh_size dq 1Ch |__elfSectionHe...sh_link ddw 0h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 1h |__elfSectionHe...sh_entsize dq 0h |__elfSectionHe...[2] Elf64_Shdr |__elfSectionHe...sh_name ddw 13h |__elfSectionHe...sh_type Elf_Sect...SHT_NOTE |__elfSectionHe...sh_flags dq 2h |__elfSectionHe...sh_addr dq .note.ABI-tag:DAT_00400254 |__elfSectionHe...sh_offset dq 254h |__elfSectionHe...sh_size dq 20h |__elfSectionHe...sh_link ddw 0h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 4h |__elfSectionHe...sh_entsize dq 0h |__elfSectionHe...[3] Elf64_Shdr |__elfSectionHe...sh_name ddw 21h |__elfSectionHe...sh_type Elf_Sect...SHT_NOTE |__elfSectionHe...sh_flags dq 2h |__elfSectionHe...sh_addr dq .note.gnu.build-id:DAT_00400274 |__elfSectionHe...sh_offset dq 274h |__elfSectionHe...sh_size dq 24h |__elfSectionHe...sh_link ddw 0h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 4h |__elfSectionHe...sh_entsize dq 0h |__elfSectionHe...[4] Elf64_Shdr |__elfSectionHe...sh_name ddw 34h |__elfSectionHe...sh_type Elf_Sect...SHT_GNU_HASH |__elfSectionHe...sh_flags dq 2h |__elfSectionHe...sh_addr dq .gnu.hash:__DT_GNU_HASH |__elfSectionHe...sh_offset dq 298h |__elfSectionHe...sh_size dq 28h |__elfSectionHe...sh_link ddw 5h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 8h |__elfSectionHe...sh_entsize dq 0h |__elfSectionHe...[5] Elf64_Shdr |__elfSectionHe...sh_name ddw 3Eh |__elfSectionHe...sh_type Elf_Sect...SHT_DYNSYM |__elfSectionHe...sh_flags dq 2h |__elfSectionHe...sh_addr dq .dynsym:__DT_SYMTAB |__elfSectionHe...sh_offset dq 2C0h |__elfSectionHe...sh_size dq 360h |__elfSectionHe...sh_link ddw 6h |__elfSectionHe...sh_info ddw 1h |__elfSectionHe...sh_addralign dq 8h |__elfSectionHe...sh_entsize dq 18h |__elfSectionHe...[6] Elf64_Shdr |__elfSectionHe...sh_name ddw 46h |__elfSectionHe...sh_type Elf_Sect...SHT_STRTAB |__elfSectionHe...sh_flags dq 2h |__elfSectionHe...sh_addr dq .dynstr:__DT_STRTAB |__elfSectionHe...sh_offset dq 620h |__elfSectionHe...sh_size dq 114h |__elfSectionHe...sh_link ddw 0h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 1h |__elfSectionHe...sh_entsize dq 0h |__elfSectionHe...[7] Elf64_Shdr |__elfSectionHe...sh_name ddw 4Eh |__elfSectionHe...sh_type Elf_Sect...SHT_GNU_versym |__elfSectionHe...sh_flags dq 2h |__elfSectionHe...sh_addr dq .gnu.version:__DT_VERSYM |__elfSectionHe...sh_offset dq 734h |__elfSectionHe...sh_size dq 48h |__elfSectionHe...sh_link ddw 5h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 2h |__elfSectionHe...sh_entsize dq 2h |__elfSectionHe...[8] Elf64_Shdr |__elfSectionHe...sh_name ddw 5Bh |__elfSectionHe...sh_type Elf_Sect...SHT_GNU_verneed |__elfSectionHe...sh_flags dq 2h |__elfSectionHe...sh_addr dq .gnu.version_r:__DT_VERNEED |__elfSectionHe...sh_offset dq 780h |__elfSectionHe...sh_size dq 30h |__elfSectionHe...sh_link ddw 6h |__elfSectionHe...sh_info ddw 1h |__elfSectionHe...sh_addralign dq 8h |__elfSectionHe...sh_entsize dq 0h |__elfSectionHe...[9] Elf64_Shdr |__elfSectionHe...sh_name ddw 6Ah |__elfSectionHe...sh_type Elf_Sect...SHT_RELA |__elfSectionHe...sh_flags dq 2h |__elfSectionHe...sh_addr dq .rela.dyn:__DT_RELA |__elfSectionHe...sh_offset dq 7B0h |__elfSectionHe...sh_size dq 48h |__elfSectionHe...sh_link ddw 5h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 8h |__elfSectionHe...sh_entsize dq 18h |__elfSectionHe...[10] Elf64_Shdr |__elfSectionHe...sh_name ddw 74h |__elfSectionHe...sh_type Elf_Sect...SHT_RELA |__elfSectionHe...sh_flags dq 42h |__elfSectionHe...sh_addr dq .rela.plt:__DT_JMPREL |__elfSectionHe...sh_offset dq 7F8h |__elfSectionHe...sh_size dq 318h |__elfSectionHe...sh_link ddw 5h |__elfSectionHe...sh_info ddw 17h |__elfSectionHe...sh_addralign dq 8h |__elfSectionHe...sh_entsize dq 18h |__elfSectionHe...[11] Elf64_Shdr |__elfSectionHe...sh_name ddw 7Eh |__elfSectionHe...sh_type Elf_Sect...SHT_PROGBITS |__elfSectionHe...sh_flags dq 6h |__elfSectionHe...sh_addr dq .init:_DT_INIT |__elfSectionHe...sh_offset dq B10h |__elfSectionHe...sh_size dq 1Ah |__elfSectionHe...sh_link ddw 0h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 4h |__elfSectionHe...sh_entsize dq 0h |__elfSectionHe...[12] Elf64_Shdr |__elfSectionHe...sh_name ddw 79h |__elfSectionHe...sh_type Elf_Sect...SHT_PROGBITS |__elfSectionHe...sh_flags dq 6h |__elfSectionHe...sh_addr dq .plt:FUN_00400b30 |__elfSectionHe...sh_offset dq B30h |__elfSectionHe...sh_size dq 220h |__elfSectionHe...sh_link ddw 0h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 10h |__elfSectionHe...sh_entsize dq 10h |__elfSectionHe...[13] Elf64_Shdr |__elfSectionHe...sh_name ddw 84h |__elfSectionHe...sh_type Elf_Sect...SHT_PROGBITS |__elfSectionHe...sh_flags dq 6h |__elfSectionHe...sh_addr dq .text:entry |__elfSectionHe...sh_offset dq D50h |__elfSectionHe...sh_size dq 1B10h |__elfSectionHe...sh_link ddw 0h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 10h |__elfSectionHe...sh_entsize dq 0h |__elfSectionHe...[14] Elf64_Shdr |__elfSectionHe...sh_name ddw 8Ah |__elfSectionHe...sh_type Elf_Sect...SHT_PROGBITS |__elfSectionHe...sh_flags dq 6h |__elfSectionHe...sh_addr dq .fini:_DT_FINI |__elfSectionHe...sh_offset dq 2860h |__elfSectionHe...sh_size dq 9h |__elfSectionHe...sh_link ddw 0h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 4h |__elfSectionHe...sh_entsize dq 0h |__elfSectionHe...[15] Elf64_Shdr |__elfSectionHe...sh_name ddw 90h |__elfSectionHe...sh_type Elf_Sect...SHT_PROGBITS |__elfSectionHe...sh_flags dq 2h |__elfSectionHe...sh_addr dq .rodata:DAT_00402870 |__elfSectionHe...sh_offset dq 2870h |__elfSectionHe...sh_size dq CCh |__elfSectionHe...sh_link ddw 0h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 8h |__elfSectionHe...sh_entsize dq 0h |__elfSectionHe...[16] Elf64_Shdr |__elfSectionHe...sh_name ddw 98h |__elfSectionHe...sh_type Elf_Sect...SHT_PROGBITS |__elfSectionHe...sh_flags dq 2h |__elfSectionHe...sh_addr dq .eh_frame_hdr:eh_frame_hdr_0040293c |__elfSectionHe...sh_offset dq 293Ch |__elfSectionHe...sh_size dq 84h |__elfSectionHe...sh_link ddw 0h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 4h |__elfSectionHe...sh_entsize dq 0h |__elfSectionHe...[17] Elf64_Shdr |__elfSectionHe...sh_name ddw A6h |__elfSectionHe...sh_type Elf_Sect...SHT_PROGBITS |__elfSectionHe...sh_flags dq 2h |__elfSectionHe...sh_addr dq .eh_frame:cie_004029c0 |__elfSectionHe...sh_offset dq 29C0h |__elfSectionHe...sh_size dq 22Ch |__elfSectionHe...sh_link ddw 0h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 8h |__elfSectionHe...sh_entsize dq 0h |__elfSectionHe...[18] Elf64_Shdr |__elfSectionHe...sh_name ddw B0h |__elfSectionHe...sh_type Elf_Sect...SHT_INIT_ARRAY |__elfSectionHe...sh_flags dq 3h |__elfSectionHe...sh_addr dq .init_array:__DT_INIT_ARRAY |__elfSectionHe...sh_offset dq 2E10h |__elfSectionHe...sh_size dq 8h |__elfSectionHe...sh_link ddw 0h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 8h |__elfSectionHe...sh_entsize dq 8h |__elfSectionHe...[19] Elf64_Shdr |__elfSectionHe...sh_name ddw BCh |__elfSectionHe...sh_type Elf_Sect...SHT_FINI_ARRAY |__elfSectionHe...sh_flags dq 3h |__elfSectionHe...sh_addr dq .fini_array:__DT_FINI_ARRAY |__elfSectionHe...sh_offset dq 2E18h |__elfSectionHe...sh_size dq 8h |__elfSectionHe...sh_link ddw 0h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 8h |__elfSectionHe...sh_entsize dq 8h |__elfSectionHe...[20] Elf64_Shdr |__elfSectionHe...sh_name ddw C8h |__elfSectionHe...sh_type Elf_Sect...SHT_PROGBITS |__elfSectionHe...sh_flags dq 3h |__elfSectionHe...sh_addr dq .jcr:DAT_00602e20 |__elfSectionHe...sh_offset dq 2E20h |__elfSectionHe...sh_size dq 8h |__elfSectionHe...sh_link ddw 0h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 8h |__elfSectionHe...sh_entsize dq 0h |__elfSectionHe...[21] Elf64_Shdr |__elfSectionHe...sh_name ddw CDh |__elfSectionHe...sh_type Elf_Sect...SHT_DYNAMIC |__elfSectionHe...sh_flags dq 3h |__elfSectionHe...sh_addr dq .dynamic:_DYNAMIC |__elfSectionHe...sh_offset dq 2E28h |__elfSectionHe...sh_size dq 1D0h |__elfSectionHe...sh_link ddw 6h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 8h |__elfSectionHe...sh_entsize dq 10h |__elfSectionHe...[22] Elf64_Shdr |__elfSectionHe...sh_name ddw D6h |__elfSectionHe...sh_type Elf_Sect...SHT_PROGBITS |__elfSectionHe...sh_flags dq 3h |__elfSectionHe...sh_addr dq .got:PTR___gmon_start___00602ff8 |__elfSectionHe...sh_offset dq 2FF8h |__elfSectionHe...sh_size dq 8h |__elfSectionHe...sh_link ddw 0h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 8h |__elfSectionHe...sh_entsize dq 8h |__elfSectionHe...[23] Elf64_Shdr |__elfSectionHe...sh_name ddw DBh |__elfSectionHe...sh_type Elf_Sect...SHT_PROGBITS |__elfSectionHe...sh_flags dq 3h |__elfSectionHe...sh_addr dq .got.plt:__DT_PLTGOT |__elfSectionHe...sh_offset dq 3000h |__elfSectionHe...sh_size dq 120h |__elfSectionHe...sh_link ddw 0h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 8h |__elfSectionHe...sh_entsize dq 8h |__elfSectionHe...[24] Elf64_Shdr |__elfSectionHe...sh_name ddw E4h |__elfSectionHe...sh_type Elf_Sect...SHT_PROGBITS |__elfSectionHe...sh_flags dq 3h |__elfSectionHe...sh_addr dq .data:DAT_00603120 |__elfSectionHe...sh_offset dq 3120h |__elfSectionHe...sh_size dq 1D7h |__elfSectionHe...sh_link ddw 0h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 10h |__elfSectionHe...sh_entsize dq 0h |__elfSectionHe...[25] Elf64_Shdr |__elfSectionHe...sh_name ddw EAh |__elfSectionHe...sh_type Elf_Sect...SHT_NOBITS |__elfSectionHe...sh_flags dq 3h |__elfSectionHe...sh_addr dq .bss:optind |__elfSectionHe...sh_offset dq 32F7h |__elfSectionHe...sh_size dq 1D8h |__elfSectionHe...sh_link ddw 0h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 20h |__elfSectionHe...sh_entsize dq 0h |__elfSectionHe...[26] Elf64_Shdr |__elfSectionHe...sh_name ddw EFh |__elfSectionHe...sh_type Elf_Sect...SHT_PROGBITS |__elfSectionHe...sh_flags dq 30h |__elfSectionHe...sh_addr dq .comment:s_GCC:_(GNU)_4.8.5_20150623_... |__elfSectionHe...sh_offset dq 32F7h |__elfSectionHe...sh_size dq 2Dh |__elfSectionHe...sh_link ddw 0h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 1h |__elfSectionHe...sh_entsize dq 1h |__elfSectionHe...[27] Elf64_Shdr |__elfSectionHe...sh_name ddw 1h |__elfSectionHe...sh_type Elf_Sect...SHT_STRTAB |__elfSectionHe...sh_flags dq 0h |__elfSectionHe...sh_addr dq .shstrtab:DAT_.shstrtab__00000000 |__elfSectionHe...sh_offset dq 3324h |__elfSectionHe...sh_size dq F8h |__elfSectionHe...sh_link ddw 0h |__elfSectionHe...sh_info ddw 0h |__elfSectionHe...sh_addralign dq 1h |__elfSectionHe...sh_entsize dq 0h