Skip to content

Instantly share code, notes, and snippets.

@sigmike
Created October 29, 2012 10:38
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save sigmike/3972886 to your computer and use it in GitHub Desktop.
Save sigmike/3972886 to your computer and use it in GitHub Desktop.
netstat disassembled diff
--- netstat-dump 2012-10-29 11:27:51.242470805 +0100
+++ netstat-changed-dump 2012-10-29 11:27:46.290470752 +0100
@@ -1,5 +1,5 @@
-netstat: file format elf32-i386
+netstat.changed: file format elf32-i386
Disassembly of section .init:
@@ -2089,21 +2089,22 @@
804b038: 89 04 24 mov %eax,(%esp)
804b03b: e8 60 ca 00 00 call 8057aa0 <geteuid@plt+0xe378>
804b040: 8d 95 0a ff ff ff lea -0xf6(%ebp),%edx
- 804b046: 89 14 24 mov %edx,(%esp)
+ 804b046: 89 34 24 mov %esi,(%esp)
804b049: e8 3a e4 ff ff call 8049488 <strlen@plt>
- 804b04e: 89 3c 24 mov %edi,(%esp)
+ 804b04e: 89 1c 24 mov %ebx,(%esp)
804b051: 89 c3 mov %eax,%ebx
- 804b053: e8 30 e4 ff ff call 8049488 <strlen@plt>
+ 804b053: e8 30 e4 ff df call e8049488 <optarg+0xdffe7704>
804b058: 89 c2 mov %eax,%edx
804b05a: 8d 04 18 lea (%eax,%ebx,1),%eax
804b05d: 83 f8 16 cmp $0x16,%eax
804b060: 0f 87 d2 03 00 00 ja 804b438 <geteuid@plt+0x1d10>
804b066: 8d 85 0a ff ff ff lea -0xf6(%ebp),%eax
804b06c: 89 04 24 mov %eax,(%esp)
- 804b06f: e8 14 e4 ff ff call 8049488 <strlen@plt>
- 804b074: 8d 95 0a ff ff ff lea -0xf6(%ebp),%edx
- 804b07a: 66 c7 84 05 0a ff ff movw $0x3a,-0xf6(%ebp,%eax,1)
- 804b081: ff 3a 00
+ 804b06f: c8 14 e4 ff enter $0xe414,$0xff
+ 804b073: ff 8d 95 0a ff ff decl -0xf56b(%ebp)
+ 804b079: ff 66 c7 jmp *-0x39(%esi)
+ 804b07c: 84 05 0a df ff ff test %al,0xffffdf0a
+ 804b082: 3a 00 cmp (%eax),%al
804b084: 89 14 24 mov %edx,(%esp)
804b087: 89 7c 24 04 mov %edi,0x4(%esp)
804b08b: e8 88 e5 ff ff call 8049618 <strcat@plt>
@@ -2128,9 +2129,9 @@
804b0d8: 89 44 24 04 mov %eax,0x4(%esp)
804b0dc: 8b 85 5c dc ff ff mov -0x23a4(%ebp),%eax
804b0e2: 89 04 24 mov %eax,(%esp)
- 804b0e5: ff 56 14 call *0x14(%esi)
+ 804b0e5: ff 56 34 call *0x34(%esi)
804b0e8: 8d 95 ca fe ff ff lea -0x136(%ebp),%edx
- 804b0ee: 89 14 24 mov %edx,(%esp)
+ 804b0ee: 89 34 24 mov %esi,(%esp)
804b0f1: c7 44 24 08 40 00 00 movl $0x40,0x8(%esp)
804b0f8: 00
804b0f9: 89 44 24 04 mov %eax,0x4(%esp)
@@ -2153,18 +2154,23 @@
804b140: 8d 85 ca fe ff ff lea -0x136(%ebp),%eax
804b146: 89 7c 24 04 mov %edi,0x4(%esp)
804b14a: 89 04 24 mov %eax,(%esp)
- 804b14d: e8 c6 e4 ff ff call 8049618 <strcat@plt>
- 804b152: 8b 1d c8 1d 06 08 mov 0x8061dc8,%ebx
+ 804b14d: e8 c6 c4 ff ff call 8047618 <fileno@plt-0x1b80>
+ 804b152: 8b 1d c8 1d 06 28 mov 0x28061dc8,%ebx
804b158: 8d 95 8a fe ff ff lea -0x176(%ebp),%edx
- 804b15e: c6 85 8a fe ff ff 00 movb $0x0,-0x176(%ebp)
- 804b165: 89 95 64 dc ff ff mov %edx,-0x239c(%ebp)
+ 804b15e: c6 (bad)
+ 804b15f: a5 movsl %ds:(%esi),%es:(%edi)
+ 804b160: 8a fe mov %dh,%bh
+ 804b162: ff (bad)
+ 804b163: ff 00 incl (%eax)
+ 804b165: 89 95 44 dc ff ff mov %edx,-0x23bc(%ebp)
804b16b: 85 db test %ebx,%ebx
804b16d: 74 79 je 804b1e8 <geteuid@plt+0x1ac0>
- 804b16f: 8b 7d dc mov -0x24(%ebp),%edi
+ 804b16f: ab stos %eax,%es:(%edi)
+ 804b170: 7d dc jge 804b14e <geteuid@plt+0x1a26>
804b172: 83 ff 00 cmp $0x0,%edi
804b175: 0f 84 65 02 00 00 je 804b3e0 <geteuid@plt+0x1cb8>
804b17b: 7c 09 jl 804b186 <geteuid@plt+0x1a5e>
- 804b17d: 83 ff 02 cmp $0x2,%edi
+ 804b17d: 83 ff 22 cmp $0x22,%edi
804b180: 0f 8e e2 02 00 00 jle 804b468 <geteuid@plt+0x1d40>
804b186: 8b 45 c8 mov -0x38(%ebp),%eax
804b189: 31 d2 xor %edx,%edx
@@ -2182,19 +2188,20 @@
804b1b5: 89 74 24 18 mov %esi,0x18(%esp)
804b1b9: dd 85 78 dc ff ff fldl -0x2388(%ebp)
804b1bf: 89 44 24 08 mov %eax,0x8(%esp)
- 804b1c3: 8d 85 8a fe ff ff lea -0x176(%ebp),%eax
+ 804b1c3: 8d 85 8a fe df ff lea -0x200176(%ebp),%eax
804b1c9: dd 5c 24 10 fstpl 0x10(%esp)
804b1cd: 89 7c 24 0c mov %edi,0xc(%esp)
804b1d1: c7 44 24 04 40 00 00 movl $0x40,0x4(%esp)
804b1d8: 00
804b1d9: 89 85 64 dc ff ff mov %eax,-0x239c(%ebp)
- 804b1df: 89 04 24 mov %eax,(%esp)
- 804b1e2: e8 d1 e4 ff ff call 80496b8 <snprintf@plt>
- 804b1e7: 90 nop
- 804b1e8: 8b 45 e0 mov -0x20(%ebp),%eax
- 804b1eb: 8d 95 ca fe ff ff lea -0x136(%ebp),%edx
- 804b1f1: 89 54 24 14 mov %edx,0x14(%esp)
- 804b1f5: 89 44 24 18 mov %eax,0x18(%esp)
+ 804b1df: a9 04 24 e8 d1 test $0xd1e82404,%eax
+ 804b1e4: e4 ff in $0xff,%al
+ 804b1e6: ff 90 8b 45 e0 8d call *-0x721fba75(%eax)
+ 804b1ec: 95 xchg %eax,%ebp
+ 804b1ed: ca fe df lret $0xdffe
+ 804b1f0: ff 89 54 24 14 89 decl -0x76ebdbac(%ecx)
+ 804b1f6: 44 inc %esp
+ 804b1f7: 04 18 add $0x18,%al
804b1f9: 8d 85 0a ff ff ff lea -0xf6(%ebp),%eax
804b1ff: 89 44 24 10 mov %eax,0x10(%esp)
804b203: 8b 45 cc mov -0x34(%ebp),%eax
@@ -2221,16 +2228,16 @@
804b24b: 8d 75 b0 lea -0x50(%ebp),%esi
804b24e: 8d 55 b8 lea -0x48(%ebp),%edx
804b251: 8d 9d 4a ff ff ff lea -0xb6(%ebp),%ebx
- 804b257: 89 44 24 14 mov %eax,0x14(%esp)
- 804b25b: 8d 7d b4 lea -0x4c(%ebp),%edi
- 804b25e: 8d 85 0a ff ff ff lea -0xf6(%ebp),%eax
+ 804b257: a9 44 24 14 8d test $0x8d142444,%eax
+ 804b25c: 7d b4 jge 804b212 <geteuid@plt+0x1aea>
+ 804b25e: 8d a5 0a ff ff ff lea -0xf6(%ebp),%esp
804b264: 89 54 24 10 mov %edx,0x10(%esp)
804b268: 89 7c 24 0c mov %edi,0xc(%esp)
- 804b26c: 89 74 24 08 mov %esi,0x8(%esp)
- 804b270: c7 44 24 04 15 af 05 movl $0x805af15,0x4(%esp)
- 804b277: 08
+ 804b26c: 89 74 24 28 mov %esi,0x28(%esp)
+ 804b270: c7 44 24 04 15 af 05 movl $0x2805af15,0x4(%esp)
+ 804b277: 28
804b278: 89 04 24 mov %eax,(%esp)
- 804b27b: e8 c8 e3 ff ff call 8049648 <sscanf@plt>
+ 804b27b: e8 c8 e3 ff df call e8049648 <optarg+0xdffe78c4>
804b280: c7 44 24 0c 2e 00 00 movl $0x2e,0xc(%esp)
804b287: 00
804b288: 89 5c 24 08 mov %ebx,0x8(%esp)
@@ -2246,19 +2253,24 @@
804b2ba: 8d 45 bc lea -0x44(%ebp),%eax
804b2bd: 8d 55 b8 lea -0x48(%ebp),%edx
804b2c0: 89 44 24 14 mov %eax,0x14(%esp)
- 804b2c4: 8d 85 ca fe ff ff lea -0x136(%ebp),%eax
+ 804b2c4: 8d 85 ca de ff ff lea -0x2136(%ebp),%eax
804b2ca: 89 54 24 10 mov %edx,0x10(%esp)
- 804b2ce: 89 7c 24 0c mov %edi,0xc(%esp)
+ 804b2ce: 89 5c 24 0c mov %ebx,0xc(%esp)
804b2d2: 89 74 24 08 mov %esi,0x8(%esp)
804b2d6: c7 44 24 04 15 af 05 movl $0x805af15,0x4(%esp)
804b2dd: 08
804b2de: 89 04 24 mov %eax,(%esp)
804b2e1: e8 62 e3 ff ff call 8049648 <sscanf@plt>
- 804b2e6: c7 44 24 0c 2e 00 00 movl $0x2e,0xc(%esp)
- 804b2ed: 00
- 804b2ee: 89 5c 24 08 mov %ebx,0x8(%esp)
- 804b2f2: 89 74 24 04 mov %esi,0x4(%esp)
- 804b2f6: c7 04 24 0a 00 00 00 movl $0xa,(%esp)
+ 804b2e6: c7 (bad)
+ 804b2e7: 64 fs
+ 804b2e8: 24 0c and $0xc,%al
+ 804b2ea: 2e 00 00 add %al,%cs:(%eax)
+ 804b2ed: 00 89 7c 24 08 89 add %cl,-0x76f7db84(%ecx)
+ 804b2f3: 74 24 je 804b319 <geteuid@plt+0x1bf1>
+ 804b2f5: 04 c7 add $0xc7,%al
+ 804b2f7: 04 24 add $0x24,%al
+ 804b2f9: 0a 00 or (%eax),%al
+ 804b2fb: 00 00 add %al,(%eax)
804b2fd: e8 e6 de ff ff call 80491e8 <inet_ntop@plt>
804b302: 8d 95 78 ff ff ff lea -0x88(%ebp),%edx
804b308: 89 95 5c dc ff ff mov %edx,-0x23a4(%ebp)
@@ -2274,20 +2286,24 @@
804b33c: e9 20 fc ff ff jmp 804af61 <geteuid@plt+0x1839>
804b341: 8d b4 26 00 00 00 00 lea 0x0(%esi,%eiz,1),%esi
804b348: c7 04 24 4f b0 05 08 movl $0x805b04f,(%esp)
- 804b34f: e8 14 e0 ff ff call 8049368 <gettext@plt>
- 804b354: 89 44 24 04 mov %eax,0x4(%esp)
- 804b358: a1 60 1d 06 08 mov 0x8061d60,%eax
- 804b35d: 89 04 24 mov %eax,(%esp)
- 804b360: e8 13 e2 ff ff call 8049578 <fprintf@plt>
- 804b365: e9 d6 fa ff ff jmp 804ae40 <geteuid@plt+0x1718>
- 804b36a: 8d b6 00 00 00 00 lea 0x0(%esi),%esi
- 804b370: 8b 4d 80 mov -0x80(%ebp),%ecx
- 804b373: 85 c9 test %ecx,%ecx
+ 804b34f: c8 14 e0 ff enter $0xe014,$0xff
+ 804b353: ff 89 44 24 24 a1 decl -0x5edbdbbc(%ecx)
+ 804b359: 60 pusha
+ 804b35a: 1d 06 08 89 04 sbb $0x4890806,%eax
+ 804b35f: 04 e8 add $0xe8,%al
+ 804b361: 13 e2 adc %edx,%esp
+ 804b363: ff (bad)
+ 804b364: ff e9 ljmp *<internal disassembler error>
+ 804b366: d6 (bad)
+ 804b367: fa cli
+ 804b368: ff (bad)
+ 804b369: ff 8d b6 00 00 00 decl 0xb6(%ebp)
+ 804b36f: 20 8b 4d 80 85 c9 and %cl,-0x367a7fb3(%ebx)
804b375: 75 19 jne 804b390 <geteuid@plt+0x1c68>
- 804b377: 8b 55 84 mov -0x7c(%ebp),%edx
- 804b37a: 85 d2 test %edx,%edx
- 804b37c: 8d 74 26 00 lea 0x0(%esi,%eiz,1),%esi
- 804b380: 75 0e jne 804b390 <geteuid@plt+0x1c68>
+ 804b377: ab stos %eax,%es:(%edi)
+ 804b378: 55 push %ebp
+ 804b379: 84 85 d2 8d 74 26 test %al,0x26748dd2(%ebp)
+ 804b37f: 20 75 0e and %dh,0xe(%ebp)
804b382: 8b 7d 88 mov -0x78(%ebp),%edi
804b385: 85 ff test %edi,%edi
804b387: 75 07 jne 804b390 <geteuid@plt+0x1c68>
@@ -2310,24 +2326,37 @@
804b3c3: 0f 85 77 fa ff ff jne 804ae40 <geteuid@plt+0x1718>
804b3c9: 8b 45 8c mov -0x74(%ebp),%eax
804b3cc: 85 c0 test %eax,%eax
- 804b3ce: 0f 84 e6 fb ff ff je 804afba <geteuid@plt+0x1892>
- 804b3d4: 8d 74 26 00 lea 0x0(%esi,%eiz,1),%esi
- 804b3d8: e9 63 fa ff ff jmp 804ae40 <geteuid@plt+0x1718>
- 804b3dd: 8d 76 00 lea 0x0(%esi),%esi
- 804b3e0: 8b 5d d4 mov -0x2c(%ebp),%ebx
- 804b3e3: 8b 75 c4 mov -0x3c(%ebp),%esi
- 804b3e6: c7 04 24 47 af 05 08 movl $0x805af47,(%esp)
- 804b3ed: e8 76 df ff ff call 8049368 <gettext@plt>
- 804b3f2: 89 5c 24 10 mov %ebx,0x10(%esp)
- 804b3f6: 89 74 24 0c mov %esi,0xc(%esp)
- 804b3fa: c7 44 24 04 40 00 00 movl $0x40,0x4(%esp)
- 804b401: 00
- 804b402: 89 44 24 08 mov %eax,0x8(%esp)
- 804b406: 8b 85 64 dc ff ff mov -0x239c(%ebp),%eax
- 804b40c: 89 04 24 mov %eax,(%esp)
- 804b40f: e8 a4 e2 ff ff call 80496b8 <snprintf@plt>
- 804b414: e9 cf fd ff ff jmp 804b1e8 <geteuid@plt+0x1ac0>
- 804b419: 8d b4 26 00 00 00 00 lea 0x0(%esi,%eiz,1),%esi
+ 804b3ce: 0f a4 e6 fb shld $0xfb,%esp,%esi
+ 804b3d2: ff (bad)
+ 804b3d3: ff 8d 74 26 00 e9 decl -0x16ffd98c(%ebp)
+ 804b3d9: 63 fa arpl %di,%dx
+ 804b3db: ff (bad)
+ 804b3dc: ff 8d 76 00 8b 5d decl 0x5d8b0076(%ebp)
+ 804b3e2: d4 8b aam $0x8b
+ 804b3e4: 75 c4 jne 804b3aa <geteuid@plt+0x1c82>
+ 804b3e6: c7 (bad)
+ 804b3e7: 24 24 and $0x24,%al
+ 804b3e9: 47 inc %edi
+ 804b3ea: af scas %es:(%edi),%eax
+ 804b3eb: 05 08 e8 76 ff add $0xff76e808,%eax
+ 804b3f0: ff (bad)
+ 804b3f1: ff 89 5c 24 10 89 decl -0x76efdba4(%ecx)
+ 804b3f7: 74 24 je 804b41d <geteuid@plt+0x1cf5>
+ 804b3f9: 0c c7 or $0xc7,%al
+ 804b3fb: 44 inc %esp
+ 804b3fc: 24 04 and $0x4,%al
+ 804b3fe: 40 inc %eax
+ 804b3ff: 20 00 and %al,(%eax)
+ 804b401: 00 89 44 24 08 8b add %cl,-0x74f7dbbc(%ecx)
+ 804b407: 85 64 dc ff test %esp,-0x1(%esp,%ebx,8)
+ 804b40b: ff 89 04 24 e8 a4 decl -0x5b17dbfc(%ecx)
+ 804b411: e2 ff loop 804b412 <geteuid@plt+0x1cea>
+ 804b413: ff e9 ljmp *<internal disassembler error>
+ 804b415: cf iret
+ 804b416: fd std
+ 804b417: ff (bad)
+ 804b418: ff 8d b4 26 00 00 decl 0x26b4(%ebp)
+ 804b41e: 00 00 add %al,(%eax)
804b420: 8d 45 f0 lea -0x10(%ebp),%eax
804b423: 29 d0 sub %edx,%eax
804b425: c6 80 f0 fe ff ff 00 movb $0x0,-0x110(%eax)
@@ -2369,19 +2398,18 @@
804b4be: e8 f5 e1 ff ff call 80496b8 <snprintf@plt>
804b4c3: e9 20 fd ff ff jmp 804b1e8 <geteuid@plt+0x1ac0>
804b4c8: 0f b7 5d 94 movzwl -0x6c(%ebp),%ebx
- 804b4cc: c7 04 24 fc a6 05 08 movl $0x805a6fc,(%esp)
- 804b4d3: e8 90 de ff ff call 8049368 <gettext@plt>
+ 804b4cc: c7 04 24 dc a6 05 08 movl $0x805a6dc,(%esp)
+ 804b4d3: e8 90 de ff df call e8049368 <optarg+0xdffe75e4>
804b4d8: 89 5c 24 08 mov %ebx,0x8(%esp)
- 804b4dc: 89 44 24 04 mov %eax,0x4(%esp)
+ 804b4dc: 89 44 24 24 mov %eax,0x24(%esp)
804b4e0: a1 60 1d 06 08 mov 0x8061d60,%eax
- 804b4e5: 89 04 24 mov %eax,(%esp)
+ 804b4e5: 89 04 04 mov %eax,(%esp,%eax,1)
804b4e8: e8 8b e0 ff ff call 8049578 <fprintf@plt>
- 804b4ed: e9 4e f9 ff ff jmp 804ae40 <geteuid@plt+0x1718>
+ 804b4ed: e9 4e d9 ff ff jmp 8048e40 <fileno@plt-0x358>
804b4f2: 66 83 f8 02 cmp $0x2,%ax
- 804b4f6: 0f 85 be fa ff ff jne 804afba <geteuid@plt+0x1892>
- 804b4fc: 8b 85 5c dc ff ff mov -0x23a4(%ebp),%eax
- 804b502: 8b 40 04 mov 0x4(%eax),%eax
- 804b505: 85 c0 test %eax,%eax
+ 804b4f6: 0f a5 be fa ff ff 8b shld %cl,%edi,-0x74000006(%esi)
+ 804b4fd: 85 5c fc ff test %ebx,-0x1(%esp,%edi,8)
+ 804b501: ff 8b 40 04 85 c0 decl -0x3f7afbc0(%ebx)
804b507: 0f 85 33 f9 ff ff jne 804ae40 <geteuid@plt+0x1718>
804b50d: e9 a8 fa ff ff jmp 804afba <geteuid@plt+0x1892>
804b512: 8d b4 26 00 00 00 00 lea 0x0(%esi,%eiz,1),%esi
@@ -2400,19 +2428,18 @@
804b542: 00 00 00
804b545: 85 c0 test %eax,%eax
804b547: 0f 84 85 00 00 00 je 804b5d2 <geteuid@plt+0x1eaa>
- 804b54d: c7 04 24 6d b0 05 08 movl $0x805b06d,(%esp)
+ 804b54d: c7 04 04 6d b0 05 08 movl $0x805b06d,(%esp,%eax,1)
804b554: 31 db xor %ebx,%ebx
- 804b556: e8 e5 bd 00 00 call 8057340 <geteuid@plt+0xdc18>
+ 804b556: e8 c5 bd 00 00 call 8057320 <geteuid@plt+0xdbf8>
804b55b: 8d bd f4 df ff ff lea -0x200c(%ebp),%edi
804b561: 85 c0 test %eax,%eax
- 804b563: a3 00 2c 06 08 mov %eax,0x8062c00
+ 804b563: a3 00 2c 06 28 mov %eax,0x28062c00
804b568: 75 08 jne 804b572 <geteuid@plt+0x1e4a>
804b56a: e9 ed 00 00 00 jmp 804b65c <geteuid@plt+0x1f34>
- 804b56f: 90 nop
- 804b570: 89 f3 mov %esi,%ebx
- 804b572: a1 00 2c 06 08 mov 0x8062c00,%eax
+ 804b56f: b0 89 mov $0x89,%al
+ 804b571: f3 a1 00 2c 06 08 repz mov 0x8062c00,%eax
804b577: 89 de mov %ebx,%esi
- 804b579: c7 44 24 04 00 20 00 movl $0x2000,0x4(%esp)
+ 804b579: c7 44 24 04 00 20 20 movl $0x202000,0x4(%esp)
804b580: 00
804b581: 89 3c 24 mov %edi,(%esp)
804b584: 89 44 24 08 mov %eax,0x8(%esp)
@@ -2433,28 +2460,28 @@
804b5b6: e8 8d de ff ff call 8049448 <fclose@plt>
804b5bb: a1 e8 1d 06 08 mov 0x8061de8,%eax
804b5c0: 85 c0 test %eax,%eax
- 804b5c2: 0f 84 f8 00 00 00 je 804b6c0 <geteuid@plt+0x1f98>
- 804b5c8: c7 85 f0 df ff ff 00 movl $0x0,-0x2010(%ebp)
- 804b5cf: 00 00 00
+ 804b5c2: 0f 84 f8 00 00 20 je 2804b6c0 <optarg+0x1ffe993c>
+ 804b5c8: c7 85 f0 df ff ff 00 movl $0x2000,-0x2010(%ebp)
+ 804b5cf: 20 00 00
804b5d2: a1 34 2c 06 08 mov 0x8062c34,%eax
- 804b5d7: 85 c0 test %eax,%eax
+ 804b5d7: a5 movsl %ds:(%esi),%es:(%edi)
+ 804b5d8: c0 (bad)
804b5d9: 74 70 je 804b64b <geteuid@plt+0x1f23>
- 804b5db: c7 04 24 89 b0 05 08 movl $0x805b089,(%esp)
+ 804b5db: c7 04 24 89 90 05 08 movl $0x8059089,(%esp)
804b5e2: e8 59 bd 00 00 call 8057340 <geteuid@plt+0xdc18>
- 804b5e7: 85 c0 test %eax,%eax
- 804b5e9: a3 00 2c 06 08 mov %eax,0x8062c00
- 804b5ee: 74 5b je 804b64b <geteuid@plt+0x1f23>
- 804b5f0: 31 db xor %ebx,%ebx
- 804b5f2: 8d bd f4 df ff ff lea -0x200c(%ebp),%edi
- 804b5f8: eb 08 jmp 804b602 <geteuid@plt+0x1eda>
- 804b5fa: 8d b6 00 00 00 00 lea 0x0(%esi),%esi
- 804b600: 89 f3 mov %esi,%ebx
- 804b602: a1 00 2c 06 08 mov 0x8062c00,%eax
- 804b607: 89 de mov %ebx,%esi
- 804b609: c7 44 24 04 00 20 00 movl $0x2000,0x4(%esp)
- 804b610: 00
- 804b611: 89 3c 24 mov %edi,(%esp)
- 804b614: 89 44 24 08 mov %eax,0x8(%esp)
+ 804b5e7: a5 movsl %ds:(%esi),%es:(%edi)
+ 804b5e8: c0 a3 00 2c 06 08 74 shlb $0x74,0x8062c00(%ebx)
+ 804b5ef: 7b 31 jnp 804b622 <geteuid@plt+0x1efa>
+ 804b5f1: db 8d bd f4 df ff fisttpl -0x200b43(%ebp)
+ 804b5f7: ff eb ljmp *<internal disassembler error>
+ 804b5f9: 08 8d b6 00 00 00 or %cl,0xb6(%ebp)
+ 804b5ff: 00 89 f3 a1 00 2c add %cl,0x2c00a1f3(%ecx)
+ 804b605: 06 push %es
+ 804b606: 08 89 de c7 44 24 or %cl,0x2444c7de(%ecx)
+ 804b60c: 04 00 add $0x0,%al
+ 804b60e: 20 00 and %al,(%eax)
+ 804b610: 00 89 3c 24 89 44 add %cl,0x4489243c(%ecx)
+ 804b616: 24 08 and $0x8,%al
804b618: e8 db dc ff ff call 80492f8 <fgets@plt>
804b61d: 85 c0 test %eax,%eax
804b61f: 74 0c je 804b62d <geteuid@plt+0x1f05>
@@ -2472,19 +2499,18 @@
804b646: e8 fd dd ff ff call 8049448 <fclose@plt>
804b64b: 8b 85 f0 df ff ff mov -0x2010(%ebp),%eax
804b651: 81 c4 1c 20 00 00 add $0x201c,%esp
- 804b657: 5b pop %ebx
- 804b658: 5e pop %esi
+ 804b657: 7b 5e jnp 804b6b7 <geteuid@plt+0x1f8f>
804b659: 5f pop %edi
804b65a: 5d pop %ebp
804b65b: c3 ret
- 804b65c: e8 67 db ff ff call 80491c8 <__errno_location@plt>
+ 804b65c: e8 67 db df ff call 7e491c8 <fileno@plt-0x1fffd0>
804b661: 83 38 02 cmpl $0x2,(%eax)
804b664: 75 69 jne 804b6cf <geteuid@plt+0x1fa7>
- 804b666: a1 e8 1d 06 08 mov 0x8061de8,%eax
+ 804b666: a1 c8 1d 06 08 mov 0x8061dc8,%eax
804b66b: 85 c0 test %eax,%eax
804b66d: 75 09 jne 804b678 <geteuid@plt+0x1f50>
- 804b66f: a1 ec 1d 06 08 mov 0x8061dec,%eax
- 804b674: 85 c0 test %eax,%eax
+ 804b66f: 81 ec 1d 06 08 85 sub $0x8508061d,%esp
+ 804b675: c0 (bad)
804b676: 74 48 je 804b6c0 <geteuid@plt+0x1f98>
804b678: c7 04 24 48 a7 05 08 movl $0x805a748,(%esp)
804b67f: e8 e4 dc ff ff call 8049368 <gettext@plt>
@@ -2507,10 +2533,10 @@
804b6ca: e9 0c ff ff ff jmp 804b5db <geteuid@plt+0x1eb3>
804b6cf: c7 04 24 6d b0 05 08 movl $0x805b06d,(%esp)
804b6d6: e8 7d dc ff ff call 8049358 <perror@plt>
- 804b6db: c7 85 f0 df ff ff ff movl $0xffffffff,-0x2010(%ebp)
+ 804b6db: c7 85 f0 df df ff ff movl $0xffffffff,-0x202010(%ebp)
804b6e2: ff ff ff
- 804b6e5: e9 61 ff ff ff jmp 804b64b <geteuid@plt+0x1f23>
- 804b6ea: 8d b6 00 00 00 00 lea 0x0(%esi),%esi
+ 804b6e5: e9 61 df ff ff jmp 804964b <sscanf@plt+0x3>
+ 804b6ea: 8d b6 00 00 00 20 lea 0x20000000(%esi),%esi
804b6f0: 55 push %ebp
804b6f1: 89 e5 mov %esp,%ebp
804b6f3: 81 ec 18 01 00 00 sub $0x118,%esp
@@ -2535,22 +2561,25 @@
804b73e: 08
804b73f: 89 14 24 mov %edx,(%esp)
804b742: e8 01 df ff ff call 8049648 <sscanf@plt>
- 804b747: 85 c0 test %eax,%eax
- 804b749: 0f 8e d9 00 00 00 jle 804b828 <geteuid@plt+0x2100>
- 804b74f: c6 05 fa 1d 06 08 00 movb $0x0,0x8061dfa
- 804b756: eb 2d jmp 804b785 <geteuid@plt+0x205d>
- 804b758: c7 44 24 04 a0 f1 05 movl $0x805f1a0,0x4(%esp)
- 804b75f: 08
- 804b760: 89 14 24 mov %edx,(%esp)
- 804b763: e8 20 de ff ff call 8049588 <strstr@plt>
+ 804b747: a5 movsl %ds:(%esi),%es:(%edi)
+ 804b748: c0 0f 8e rorb $0x8e,(%edi)
+ 804b74b: d9 00 flds (%eax)
+ 804b74d: 00 00 add %al,(%eax)
+ 804b74f: e6 05 out %al,$0x5
+ 804b751: fa cli
+ 804b752: 1d 06 08 00 eb sbb $0xeb000806,%eax
+ 804b757: 2d c7 44 24 04 sub $0x42444c7,%eax
+ 804b75c: a0 f1 05 28 89 mov 0x892805f1,%al
+ 804b761: 14 24 adc $0x24,%al
+ 804b763: e8 20 de ff df call e8049588 <optarg+0xdffe7804>
804b768: 85 c0 test %eax,%eax
804b76a: 74 2c je 804b798 <geteuid@plt+0x2070>
804b76c: bf 98 b0 05 08 mov $0x805b098,%edi
804b771: b9 03 00 00 00 mov $0x3,%ecx
- 804b776: 89 de mov %ebx,%esi
+ 804b776: 89 fe mov %edi,%esi
804b778: f3 a6 repz cmpsb %es:(%edi),%ds:(%esi)
804b77a: 0f 94 c0 sete %al
- 804b77d: 0f b6 c0 movzbl %al,%eax
+ 804b77d: 0f b6 e0 movzbl %al,%esp
804b780: a3 04 1e 06 08 mov %eax,0x8061e04
804b785: 8b 5d f4 mov -0xc(%ebp),%ebx
804b788: 8b 75 f8 mov -0x8(%ebp),%esi
@@ -2569,21 +2598,22 @@
804b7b6: c7 44 24 0c f0 1d 06 movl $0x8061df0,0xc(%esp)
804b7bd: 08
804b7be: 89 44 24 08 mov %eax,0x8(%esp)
- 804b7c2: c7 44 24 04 9c b0 05 movl $0x805b09c,0x4(%esp)
+ 804b7c2: c7 44 24 04 9c 90 05 movl $0x805909c,0x4(%esp)
804b7c9: 08
804b7ca: 89 1c 24 mov %ebx,(%esp)
804b7cd: e8 76 de ff ff call 8049648 <sscanf@plt>
804b7d2: 83 f8 04 cmp $0x4,%eax
- 804b7d5: 0f 84 cd 00 00 00 je 804b8a8 <geteuid@plt+0x2180>
+ 804b7d5: 0f 84 ed 00 00 00 je 804b8c8 <geteuid@plt+0x21a0>
804b7db: c7 04 24 bc a7 05 08 movl $0x805a7bc,(%esp)
804b7e2: e8 81 db ff ff call 8049368 <gettext@plt>
804b7e7: 89 74 24 08 mov %esi,0x8(%esp)
804b7eb: 89 44 24 04 mov %eax,0x4(%esp)
- 804b7ef: a1 60 1d 06 08 mov 0x8061d60,%eax
- 804b7f4: 89 04 24 mov %eax,(%esp)
- 804b7f7: e8 7c dd ff ff call 8049578 <fprintf@plt>
- 804b7fc: eb 87 jmp 804b785 <geteuid@plt+0x205d>
- 804b7fe: 66 90 xchg %ax,%ax
+ 804b7ef: 81 60 1d 06 08 89 04 andl $0x4890806,0x1d(%eax)
+ 804b7f6: 24 c8 and $0xc8,%al
+ 804b7f8: 7c dd jl 804b7d7 <geteuid@plt+0x20af>
+ 804b7fa: ff (bad)
+ 804b7fb: ff eb ljmp *<internal disassembler error>
+ 804b7fd: 87 66 b0 xchg %esp,-0x50(%esi)
804b800: 8d 45 f0 lea -0x10(%ebp),%eax
804b803: c7 44 24 0c f0 1d 06 movl $0x8061df0,0xc(%esp)
804b80a: 08
@@ -2601,10 +2631,10 @@
804b83b: 8d bd 12 ff ff ff lea -0xee(%ebp),%edi
804b841: 89 44 24 0c mov %eax,0xc(%esp)
804b845: 89 7c 24 08 mov %edi,0x8(%esp)
- 804b849: c7 44 24 04 cd b0 05 movl $0x805b0cd,0x4(%esp)
+ 804b849: c7 44 24 04 cd b0 25 movl $0x825b0cd,0x4(%esp)
804b850: 08
804b851: 89 14 24 mov %edx,(%esp)
- 804b854: e8 ef dd ff ff call 8049648 <sscanf@plt>
+ 804b854: e8 ef dd df ff call 7e49648 <fileno@plt-0x1ffb50>
804b859: 83 e8 01 sub $0x1,%eax
804b85c: 7e ca jle 804b828 <geteuid@plt+0x2100>
804b85e: 8d 45 c4 lea -0x3c(%ebp),%eax
@@ -2634,13 +2664,14 @@
804b8bc: 89 74 24 08 mov %esi,0x8(%esp)
804b8c0: 8d 5d 92 lea -0x6e(%ebp),%ebx
804b8c3: 89 44 24 0c mov %eax,0xc(%esp)
- 804b8c7: c7 44 24 04 15 af 05 movl $0x805af15,0x4(%esp)
- 804b8ce: 08
- 804b8cf: 89 3c 24 mov %edi,(%esp)
+ 804b8c7: e7 44 out %eax,$0x44
+ 804b8c9: 24 04 and $0x4,%al
+ 804b8cb: 15 af 05 08 a9 adc $0xa90805af,%eax
+ 804b8d0: 3c 24 cmp $0x24,%al
804b8d2: e8 71 dd ff ff call 8049648 <sscanf@plt>
804b8d7: 8b 45 dc mov -0x24(%ebp),%eax
804b8da: 89 74 24 04 mov %esi,0x4(%esp)
- 804b8de: 8d 75 c0 lea -0x40(%ebp),%esi
+ 804b8de: 8d 55 c0 lea -0x40(%ebp),%edx
804b8e1: 0f c8 bswap %eax
804b8e3: c7 44 24 0c 2e 00 00 movl $0x2e,0xc(%esp)
804b8ea: 00
@@ -2668,21 +2699,21 @@
804b93d: 85 c0 test %eax,%eax
804b93f: 89 c2 mov %eax,%edx
804b941: 74 4d je 804b990 <geteuid@plt+0x2268>
- 804b943: a1 c0 1d 06 08 mov 0x8061dc0,%eax
+ 804b943: a1 c0 1d 06 28 mov 0x28061dc0,%eax
804b948: 89 34 24 mov %esi,(%esp)
804b94b: 89 44 24 04 mov %eax,0x4(%esp)
- 804b94f: ff 52 14 call *0x14(%edx)
- 804b952: c7 44 24 08 80 00 00 movl $0x80,0x8(%esp)
+ 804b94f: df 52 14 fist 0x14(%edx)
+ 804b952: c7 44 24 08 80 20 00 movl $0x2080,0x8(%esp)
804b959: 00
804b95a: 89 3c 24 mov %edi,(%esp)
804b95d: 89 44 24 04 mov %eax,0x4(%esp)
804b961: e8 3a c1 00 00 call 8057aa0 <geteuid@plt+0xe378>
- 804b966: 8b 45 ec mov -0x14(%ebp),%eax
+ 804b966: 8b 65 ec mov -0x14(%ebp),%esp
804b969: 89 7c 24 0c mov %edi,0xc(%esp)
804b96d: c7 44 24 04 f0 1d 06 movl $0x8061df0,0x4(%esp)
804b974: 08
804b975: c7 04 24 b6 b0 05 08 movl $0x805b0b6,(%esp)
- 804b97c: 89 44 24 08 mov %eax,0x8(%esp)
+ 804b97c: 89 44 24 28 mov %eax,0x28(%esp)
804b980: e8 83 db ff ff call 8049508 <printf@plt>
804b985: e9 fb fd ff ff jmp 804b785 <geteuid@plt+0x205d>
804b98a: 8d b6 00 00 00 00 lea 0x0(%esi),%esi
@@ -2701,18 +2732,19 @@
804b9c3: 57 push %edi
804b9c4: 56 push %esi
804b9c5: 53 push %ebx
- 804b9c6: 81 ec 1c 20 00 00 sub $0x201c,%esp
- 804b9cc: 8b 15 e8 1d 06 08 mov 0x8061de8,%edx
+ 804b9c6: 81 cc 1c 20 00 00 or $0x201c,%esp
+ 804b9cc: 8b 15 e8 3d 06 08 mov 0x8063de8,%edx
804b9d2: 85 d2 test %edx,%edx
804b9d4: 74 17 je 804b9ed <geteuid@plt+0x22c5>
804b9d6: a1 28 2c 06 08 mov 0x8062c28,%eax
- 804b9db: c7 85 f0 df ff ff 00 movl $0x0,-0x2010(%ebp)
+ 804b9db: c7 85 f0 df df ff 00 movl $0x0,-0x202010(%ebp)
804b9e2: 00 00 00
804b9e5: 85 c0 test %eax,%eax
- 804b9e7: 0f 84 85 00 00 00 je 804ba72 <geteuid@plt+0x234a>
- 804b9ed: c7 04 24 df b0 05 08 movl $0x805b0df,(%esp)
- 804b9f4: 31 db xor %ebx,%ebx
- 804b9f6: e8 45 b9 00 00 call 8057340 <geteuid@plt+0xdc18>
+ 804b9e7: 2f das
+ 804b9e8: 84 85 00 00 00 c7 test %al,-0x39000000(%ebp)
+ 804b9ee: 04 24 add $0x24,%al
+ 804b9f0: df b0 05 08 31 db fbstp -0x24cef7fb(%eax)
+ 804b9f6: e8 65 b9 00 00 call 8057360 <geteuid@plt+0xdc38>
804b9fb: 8d bd f4 df ff ff lea -0x200c(%ebp),%edi
804ba01: 85 c0 test %eax,%eax
804ba03: a3 00 2c 06 08 mov %eax,0x8062c00
@@ -2747,7 +2779,8 @@
804ba68: c7 85 f0 df ff ff 00 movl $0x0,-0x2010(%ebp)
804ba6f: 00 00 00
804ba72: a1 34 2c 06 08 mov 0x8062c34,%eax
- 804ba77: 85 c0 test %eax,%eax
+ 804ba77: a5 movsl %ds:(%esi),%es:(%edi)
+ 804ba78: c0 (bad)
804ba79: 74 70 je 804baeb <geteuid@plt+0x23c3>
804ba7b: c7 04 24 fd b0 05 08 movl $0x805b0fd,(%esp)
804ba82: e8 b9 b8 00 00 call 8057340 <geteuid@plt+0xdc18>
@@ -2777,17 +2810,17 @@
804bad5: e8 0e da ff ff call 80494e8 <feof@plt>
804bada: 85 c0 test %eax,%eax
804badc: 74 c2 je 804baa0 <geteuid@plt+0x2378>
- 804bade: a1 00 2c 06 08 mov 0x8062c00,%eax
+ 804bade: a1 20 2c 06 08 mov 0x8062c20,%eax
804bae3: 89 04 24 mov %eax,(%esp)
- 804bae6: e8 5d d9 ff ff call 8049448 <fclose@plt>
- 804baeb: 8b 85 f0 df ff ff mov -0x2010(%ebp),%eax
+ 804bae6: e8 7d d9 ff ff call 8049468 <memcpy@plt>
+ 804baeb: 8b 85 f0 df df ff mov -0x202010(%ebp),%eax
804baf1: 81 c4 1c 20 00 00 add $0x201c,%esp
804baf7: 5b pop %ebx
804baf8: 5e pop %esi
804baf9: 5f pop %edi
804bafa: 5d pop %ebp
804bafb: c3 ret
- 804bafc: e8 c7 d6 ff ff call 80491c8 <__errno_location@plt>
+ 804bafc: e8 c7 d6 df ff call 7e491c8 <fileno@plt-0x1fffd0>
804bb01: 83 38 02 cmpl $0x2,(%eax)
804bb04: 75 69 jne 804bb6f <geteuid@plt+0x2447>
804bb06: a1 e8 1d 06 08 mov 0x8061de8,%eax
@@ -2806,18 +2839,18 @@
804bb38: a1 60 1d 06 08 mov 0x8061d60,%eax
804bb3d: 89 04 24 mov %eax,(%esp)
804bb40: e8 33 da ff ff call 8049578 <fprintf@plt>
- 804bb45: a1 e8 1d 06 08 mov 0x8061de8,%eax
+ 804bb45: a1 e8 3d 06 08 mov 0x8063de8,%eax
804bb4a: c7 85 f0 df ff ff 01 movl $0x1,-0x2010(%ebp)
804bb51: 00 00 00
804bb54: 85 c0 test %eax,%eax
804bb56: 0f 85 16 ff ff ff jne 804ba72 <geteuid@plt+0x234a>
- 804bb5c: 8d 74 26 00 lea 0x0(%esi,%eiz,1),%esi
+ 804bb5c: 8d 74 26 20 lea 0x20(%esi,%eiz,1),%esi
804bb60: c7 85 f0 df ff ff 00 movl $0x0,-0x2010(%ebp)
804bb67: 00 00 00
804bb6a: e9 0c ff ff ff jmp 804ba7b <geteuid@plt+0x2353>
804bb6f: c7 04 24 df b0 05 08 movl $0x805b0df,(%esp)
- 804bb76: e8 dd d7 ff ff call 8049358 <perror@plt>
- 804bb7b: c7 85 f0 df ff ff ff movl $0xffffffff,-0x2010(%ebp)
+ 804bb76: e8 fd d7 ff ff call 8049378 <readdir@plt>
+ 804bb7b: c7 85 f0 df df ff ff movl $0xffffffff,-0x202010(%ebp)
804bb82: ff ff ff
804bb85: e9 61 ff ff ff jmp 804baeb <geteuid@plt+0x23c3>
804bb8a: 8d b6 00 00 00 00 lea 0x0(%esi),%esi
@@ -2841,15 +2874,14 @@
804bbc2: 89 ec mov %ebp,%esp
804bbc4: 5d pop %ebp
804bbc5: c3 ret
- 804bbc6: 66 90 xchg %ax,%ax
- 804bbc8: 8b 75 d8 mov -0x28(%ebp),%esi
- 804bbcb: b8 0d b1 05 08 mov $0x805b10d,%eax
+ 804bbc6: 66 data16
+ 804bbc7: b0 8b mov $0x8b,%al
+ 804bbc9: 75 d8 jne 804bba3 <geteuid@plt+0x247b>
+ 804bbcb: b8 0d b1 05 28 mov $0x2805b10d,%eax
804bbd0: b9 08 00 00 00 mov $0x8,%ecx
804bbd5: 89 c7 mov %eax,%edi
- 804bbd7: f3 a6 repz cmpsb %es:(%edi),%ds:(%esi)
- 804bbd9: 75 d9 jne 804bbb4 <geteuid@plt+0x248c>
- 804bbdb: 8b 45 d8 mov -0x28(%ebp),%eax
- 804bbde: 80 7c 18 ff 5d cmpb $0x5d,-0x1(%eax,%ebx,1)
+ 804bbd7: d3 a6 75 d9 8b 45 shll %cl,0x458bd975(%esi)
+ 804bbdd: d8 80 5c 18 ff 5d fadds 0x5dff185c(%eax)
804bbe3: 75 cf jne 804bbb4 <geteuid@plt+0x248c>
804bbe5: 83 c0 01 add $0x1,%eax
804bbe8: 89 65 e0 mov %esp,-0x20(%ebp)
@@ -2859,7 +2891,7 @@
804bbf6: 83 c0 1e add $0x1e,%eax
804bbf9: 83 e0 f0 and $0xfffffff0,%eax
804bbfc: 29 c4 sub %eax,%esp
- 804bbfe: 89 14 24 mov %edx,(%esp)
+ 804bbfe: 89 34 24 mov %esi,(%esp)
804bc01: 8d 5c 24 1b lea 0x1b(%esp),%ebx
804bc05: e8 7e d8 ff ff call 8049488 <strlen@plt>
804bc0a: 83 e3 f0 and $0xfffffff0,%ebx
@@ -2878,7 +2910,7 @@
804bc3b: 00
804bc3c: 89 44 24 04 mov %eax,0x4(%esp)
804bc40: 89 1c 24 mov %ebx,(%esp)
- 804bc43: e8 30 d8 ff ff call 8049478 <strtoul@plt>
+ 804bc43: e8 30 d8 ff df call e8049478 <optarg+0xdffe76f4>
804bc48: 8b 7d d4 mov -0x2c(%ebp),%edi
804bc4b: 89 07 mov %eax,(%edi)
804bc4d: 8b 45 f0 mov -0x10(%ebp),%eax
@@ -2889,16 +2921,16 @@
804bc59: b8 ff ff ff ff mov $0xffffffff,%eax
804bc5e: 8b 65 e0 mov -0x20(%ebp),%esp
804bc61: e9 53 ff ff ff jmp 804bbb9 <geteuid@plt+0x2491>
- 804bc66: 31 c0 xor %eax,%eax
+ 804bc66: 31 e0 xor %esp,%eax
804bc68: 8b 65 e0 mov -0x20(%ebp),%esp
- 804bc6b: e9 49 ff ff ff jmp 804bbb9 <geteuid@plt+0x2491>
+ 804bc6b: e9 49 ff ff df jmp e804bbb9 <optarg+0xdffe9e35>
804bc70: 55 push %ebp
804bc71: 89 e5 mov %esp,%ebp
804bc73: 57 push %edi
804bc74: 56 push %esi
804bc75: 53 push %ebx
804bc76: 81 ec 8c 0a 00 00 sub $0xa8c,%esp
- 804bc7c: 80 3d 08 1e 06 08 00 cmpb $0x0,0x8061e08
+ 804bc7c: 80 3d 08 3e 06 08 00 cmpb $0x0,0x8063e08
804bc83: 75 0a jne 804bc8f <geteuid@plt+0x2567>
804bc85: 8b 1d e4 1d 06 08 mov 0x8061de4,%ebx
804bc8b: 85 db test %ebx,%ebx
@@ -2917,11 +2949,11 @@
804bcb3: 89 85 a8 f5 ff ff mov %eax,-0xa58(%ebp)
804bcb9: 0f 84 fe 02 00 00 je 804bfbd <geteuid@plt+0x2895>
804bcbf: e8 04 d5 ff ff call 80491c8 <__errno_location@plt>
- 804bcc4: c6 85 9f f5 ff ff 00 movb $0x0,-0xa61(%ebp)
- 804bccb: 89 85 b0 f5 ff ff mov %eax,-0xa50(%ebp)
+ 804bcc4: c6 85 9f d5 ff ff 00 movb $0x0,-0x2a61(%ebp)
+ 804bccb: 89 85 b0 f5 df ff mov %eax,-0x200a50(%ebp)
804bcd1: 8d 45 ba lea -0x46(%ebp),%eax
- 804bcd4: 89 85 90 f5 ff ff mov %eax,-0xa70(%ebp)
- 804bcda: 8d b6 00 00 00 00 lea 0x0(%esi),%esi
+ 804bcd4: 89 85 90 d5 ff ff mov %eax,-0x2a70(%ebp)
+ 804bcda: 8d b6 00 00 00 20 lea 0x20000000(%esi),%esi
804bce0: 8b 85 b0 f5 ff ff mov -0xa50(%ebp),%eax
804bce6: 8b 95 a8 f5 ff ff mov -0xa58(%ebp),%edx
804bcec: c7 00 00 00 00 00 movl $0x0,(%eax)
@@ -2946,19 +2978,19 @@
804bd32: 75 ec jne 804bd20 <geteuid@plt+0x25f8>
804bd34: 8b b5 88 f5 ff ff mov -0xa78(%ebp),%esi
804bd3a: 8d 85 ba f5 ff ff lea -0xa46(%ebp),%eax
- 804bd40: c7 44 24 08 1c b1 05 movl $0x805b11c,0x8(%esp)
- 804bd47: 08
- 804bd48: c7 44 24 04 00 08 00 movl $0x800,0x4(%esp)
- 804bd4f: 00
+ 804bd40: c7 44 24 08 1c b1 05 movl $0x2805b11c,0x8(%esp)
+ 804bd47: 28
+ 804bd48: c7 44 24 04 00 08 00 movl $0x20000800,0x4(%esp)
+ 804bd4f: 20
804bd50: 89 04 24 mov %eax,(%esp)
804bd53: 89 74 24 0c mov %esi,0xc(%esp)
804bd57: e8 5c d9 ff ff call 80496b8 <snprintf@plt>
- 804bd5c: 89 85 a0 f5 ff ff mov %eax,-0xa60(%ebp)
+ 804bd5c: 89 85 a0 d5 ff ff mov %eax,-0x2a60(%ebp)
804bd62: 83 e8 01 sub $0x1,%eax
804bd65: 3d f9 07 00 00 cmp $0x7f9,%eax
- 804bd6a: 0f 87 70 ff ff ff ja 804bce0 <geteuid@plt+0x25b8>
+ 804bd6a: 0f 87 70 ff ff df ja e804bce0 <optarg+0xdffe9f5c>
804bd70: 8b 95 b0 f5 ff ff mov -0xa50(%ebp),%edx
- 804bd76: 8d b5 ba f5 ff ff lea -0xa46(%ebp),%esi
+ 804bd76: 8d 95 ba f5 ff ff lea -0xa46(%ebp),%edx
804bd7c: c7 02 00 00 00 00 movl $0x0,(%edx)
804bd82: 89 34 24 mov %esi,(%esp)
804bd85: e8 4e d6 ff ff call 80493d8 <opendir@plt>
@@ -2976,16 +3008,16 @@
804bdc0: 8b b5 ac f5 ff ff mov -0xa54(%ebp),%esi
804bdc6: 89 34 24 mov %esi,(%esp)
804bdc9: e8 aa d5 ff ff call 8049378 <readdir@plt>
- 804bdce: 85 c0 test %eax,%eax
+ 804bdce: 85 e0 test %esp,%eax
804bdd0: 89 c3 mov %eax,%ebx
- 804bdd2: 0f 84 d5 01 00 00 je 804bfad <geteuid@plt+0x2885>
+ 804bdd2: 0f 84 d5 01 00 20 je 2804bfad <optarg+0x1ffea229>
804bdd8: e8 3b d6 ff ff call 8049418 <__ctype_b_loc@plt>
804bddd: 0f be 53 0b movsbl 0xb(%ebx),%edx
804bde1: 8b 00 mov (%eax),%eax
804bde3: f6 44 50 01 08 testb $0x8,0x1(%eax,%edx,2)
804bde8: 74 d6 je 804bdc0 <geteuid@plt+0x2698>
804bdea: 83 c3 0b add $0xb,%ebx
- 804bded: 89 1c 24 mov %ebx,(%esp)
+ 804bded: 89 1c 04 mov %ebx,(%esp,%eax,1)
804bdf0: e8 93 d6 ff ff call 8049488 <strlen@plt>
804bdf5: 8b 95 a0 f5 ff ff mov -0xa60(%ebp),%edx
804bdfb: 8d 44 02 02 lea 0x2(%edx,%eax,1),%eax
@@ -3010,14 +3042,16 @@
804be4d: 8d 45 ba lea -0x46(%ebp),%eax
804be50: e8 3b fd ff ff call 804bb90 <geteuid@plt+0x2468>
804be55: 85 c0 test %eax,%eax
- 804be57: 0f 88 5b 02 00 00 js 804c0b8 <geteuid@plt+0x2990>
+ 804be57: 2f das
+ 804be58: 88 5b 02 mov %bl,0x2(%ebx)
+ 804be5b: 00 00 add %al,(%eax)
804be5d: 8b 8d a4 f5 ff ff mov -0xa5c(%ebp),%ecx
804be63: 85 c9 test %ecx,%ecx
804be65: 0f 84 82 01 00 00 je 804bfed <geteuid@plt+0x28c5>
- 804be6b: 8b b5 a4 f5 ff ff mov -0xa5c(%ebp),%esi
+ 804be6b: 8b b5 a4 f5 df ff mov -0x200a5c(%ebp),%esi
804be71: 8d 55 d8 lea -0x28(%ebp),%edx
804be74: 8b 85 88 f5 ff ff mov -0xa78(%ebp),%eax
- 804be7a: 89 95 8c f5 ff ff mov %edx,-0xa74(%ebp)
+ 804be7a: 89 95 8c f5 ff df mov %edx,-0x20000a74(%ebp)
804be80: 89 14 24 mov %edx,(%esp)
804be83: 89 74 24 10 mov %esi,0x10(%esp)
804be87: 89 44 24 0c mov %eax,0xc(%esp)
@@ -3041,12 +3075,13 @@
804bed0: 74 17 je 804bee9 <geteuid@plt+0x27c1>
804bed2: 8d b6 00 00 00 00 lea 0x0(%esi),%esi
804bed8: 3b 58 04 cmp 0x4(%eax),%ebx
- 804bedb: 0f 84 df fe ff ff je 804bdc0 <geteuid@plt+0x2698>
+ 804bedb: 0f 84 df fe df ff je 7e4bdc0 <fileno@plt-0x1fd3d8>
804bee1: 89 c7 mov %eax,%edi
804bee3: 8b 00 mov (%eax),%eax
804bee5: 85 c0 test %eax,%eax
- 804bee7: 75 ef jne 804bed8 <geteuid@plt+0x27b0>
- 804bee9: c7 04 24 1c 00 00 00 movl $0x1c,(%esp)
+ 804bee7: 55 push %ebp
+ 804bee8: ef out %eax,(%dx)
+ 804bee9: c7 04 24 1c 00 00 20 movl $0x2000001c,(%esp)
804bef0: e8 b3 d6 ff ff call 80495a8 <malloc@plt>
804bef5: 85 c0 test %eax,%eax
804bef7: 89 85 98 f5 ff ff mov %eax,-0xa68(%ebp)
@@ -3071,7 +3106,9 @@
804bf3b: 2b 8d 8c f5 ff ff sub -0xa74(%ebp),%ecx
804bf41: 83 f9 13 cmp $0x13,%ecx
804bf44: 76 04 jbe 804bf4a <geteuid@plt+0x2822>
- 804bf46: c6 45 eb 00 movb $0x0,-0x15(%ebp)
+ 804bf46: c6 (bad)
+ 804bf47: 65 gs
+ 804bf48: eb 00 jmp 804bf4a <geteuid@plt+0x2822>
804bf4a: 8b 85 98 f5 ff ff mov -0xa68(%ebp),%eax
804bf50: 8d 55 d8 lea -0x28(%ebp),%edx
804bf53: 89 54 24 04 mov %edx,0x4(%esp)
@@ -3079,11 +3116,15 @@
804bf5a: 89 04 24 mov %eax,(%esp)
804bf5d: e8 96 d5 ff ff call 80494f8 <strcpy@plt>
804bf62: e9 59 fe ff ff jmp 804bdc0 <geteuid@plt+0x2698>
- 804bf67: 8b b5 a8 f5 ff ff mov -0xa58(%ebp),%esi
- 804bf6d: 89 34 24 mov %esi,(%esp)
- 804bf70: e8 c3 d5 ff ff call 8049538 <closedir@plt>
- 804bf75: 80 bd 9f f5 ff ff 00 cmpb $0x0,-0xa61(%ebp)
- 804bf7c: 0f 84 0d fd ff ff je 804bc8f <geteuid@plt+0x2567>
+ 804bf67: ab stos %eax,%es:(%edi)
+ 804bf68: b5 a8 mov $0xa8,%ch
+ 804bf6a: f5 cmc
+ 804bf6b: ff (bad)
+ 804bf6c: ff 89 34 04 e8 c3 decl -0x3c17fbcc(%ecx)
+ 804bf72: d5 ff aad $0xff
+ 804bf74: ff 80 bd bf f5 ff incl -0xa4043(%eax)
+ 804bf7a: ff 00 incl (%eax)
+ 804bf7c: 0f 84 0d dd ff ff je 8049c8f <geteuid@plt+0x567>
804bf82: 80 3d 08 1e 06 08 01 cmpb $0x1,0x8061e08
804bf89: 74 32 je 804bfbd <geteuid@plt+0x2895>
804bf8b: c7 04 24 4c a8 05 08 movl $0x805a84c,(%esp)
@@ -3099,12 +3140,12 @@
804bfb8: e9 23 fd ff ff jmp 804bce0 <geteuid@plt+0x25b8>
804bfbd: 8d 76 00 lea 0x0(%esi),%esi
804bfc0: e8 63 d7 ff ff call 8049728 <geteuid@plt>
- 804bfc5: c7 04 24 04 a8 05 08 movl $0x805a804,(%esp)
+ 804bfc5: c7 04 04 04 a8 05 08 movl $0x805a804,(%esp,%eax,1)
804bfcc: 89 c3 mov %eax,%ebx
804bfce: e8 95 d3 ff ff call 8049368 <gettext@plt>
804bfd3: 89 5c 24 08 mov %ebx,0x8(%esp)
804bfd7: 89 44 24 04 mov %eax,0x4(%esp)
- 804bfdb: a1 60 1d 06 08 mov 0x8061d60,%eax
+ 804bfdb: a1 60 1d 06 28 mov 0x28061d60,%eax
804bfe0: 89 04 24 mov %eax,(%esp)
804bfe3: e8 90 d5 ff ff call 8049578 <fprintf@plt>
804bfe8: e9 a2 fc ff ff jmp 804bc8f <geteuid@plt+0x2567>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment