global _end global _init: function global _start: function global __x86.get_pc_thunk.bx: function global main: function global __libc_csu_init: function global __libc_csu_fini: function global _fini: function global _fp_hw global _IO_stdin_used global _IO_stdin_used global __data_start global data_start global __dso_handle global __TMC_END__ global __bss_start global _edata extern _ITM_registerTMCloneTable extern __isoc99_scanf@@GLIBC_2.7 extern _Jv_RegisterClasses extern __libc_start_main@@GLIBC_2.0 extern __gmon_start__ extern __stack_chk_fail@@GLIBC_2.4 extern printf@@GLIBC_2.0 extern _ITM_deregisterTMCloneTable extern __isoc99_scanf extern __libc_start_main extern __gmon_start__ extern __stack_chk_fail extern printf SECTION .interp align=1 noexecute db 2FH,6CH,69H,62H,2FH,6CH,64H,2DH db 6CH,69H,6EH,75H,78H,2EH,73H,6FH db 2EH,32H,00H ECTION .note.ABI-tag align=4 noexecute db 04H,00H,00H,00H,10H,00H,00H,00H db 01H,00H,00H,00H,47H,4EH,55H,00H db 00H,00H,00H,00H,02H,00H,00H,00H db 06H,00H,00H,00H,20H,00H,00H,00H SECTION .note.gnu.build-id align=4 noexecute db 04H,00H,00H,00H,14H,00H,00H,00H db 03H,00H,00H,00H,47H,4EH,55H,00H db 8BH,72H,0C4H,60H,0EEH,5BH,45H,0C9H db 53H,0ADH,0C5H,0FFH,35H,12H,8DH,3AH db 0FEH,55H,51H,80H SECTION .gnu.hash align=4 noexecute db 02H,00H,00H,00H,06H,00H,00H,00H db 01H,00H,00H,00H,05H,00H,00H,00H db 00H,20H,00H,20H,00H,00H,00H,00H db 06H,00H,00H,00H,0ADH,4BH,0E3H,0C0H SECTION .dynsym align=4 noexecute db 00H,00H,00H,00H,00H,00H,00H,00H db 00H,00H,00H,00H,00H,00H,00H,00H db 3AH,00H,00H,00H,00H,00H,00H,00H db 00H,00H,00H,00H,12H,00H,00H,00H db 29H,00H,00H,00H,00H,00H,00H,00H db 00H,00H,00H,00H,12H,00H,00H,00H db 53H,00H,00H,00H,00H,00H,00H,00H db 00H,00H,00H,00H,20H,00H,00H,00H db 41H,00H,00H,00H,00H,00H,00H,00H db 00H,00H,00H,00H,12H,00H,00H,00H db 1AH,00H,00H,00H,00H,00H,00H,00H db 00H,00H,00H,00H,12H,00H,00H,00H db 0BH,00H,00H,00H,0ACH,86H,04H,08H db 04H,00H,00H,00H,11H,00H,10H,00H SECTION .dynstr align=1 noexecute db 00H,6CH,69H,62H,63H,2EH,73H,6FH db 2EH,36H,00H,5FH,49H,4FH,5FH,73H db 74H,64H,69H,6EH,5FH,75H,73H,65H db 64H,00H,5FH,5FH,69H,73H,6FH,63H db 39H,39H,5FH,73H,63H,61H,6EH,66H db 00H,5FH,5FH,73H,74H,61H,63H,6BH db 5FH,63H,68H,6BH,5FH,66H,61H,69H db 6CH,00H,70H,72H,69H,6EH,74H,66H db 00H,5FH,5FH,6CH,69H,62H,63H,5FH db 73H,74H,61H,72H,74H,5FH,6DH,61H db 69H,6EH,00H,5FH,5FH,67H,6DH,6FH db 6EH,5FH,73H,74H,61H,72H,74H,5FH db 5FH,00H,47H,4CH,49H,42H,43H,5FH db 32H,2EH,37H,00H,47H,4CH,49H,42H db 43H,5FH,32H,2EH,34H,00H,47H,4CH db 49H,42H,43H,5FH,32H,2EH,30H,00H SECTION .gnu.version align=2 noexecute section number 7,const db 00H,00H,02H,00H,03H,00H,00H,00H db 02H,00H,04H,00H,01H,00H SECTION .gnu.version_r align=4 noexecute db 01H,00H,03H,00H,01H,00H,00H,00H db 10H,00H,00H,00H,00H,00H,00H,00H db 17H,69H,69H,0DH,00H,00H,04H,00H db 62H,00H,00H,00H,10H,00H,00H,00H db 14H,69H,69H,0DH,00H,00H,03H,00H db 6CH,00H,00H,00H,10H,00H,00H,00H db 10H,69H,69H,0DH,00H,00H,02H,00H db 76H,00H,00H,00H,00H,00H,00H,00H SECTION .rel.dyn align=4 noexecute section number 9,const db 0FCH,9FH,04H,08H,06H,03H,00H,00H SECTION .rel.plt align=4 noexecute section number 10,const db 0CH,0A0H,04H,08H,07H,01H,00H,00H db 10H,0A0H,04H,08H,07H,02H,00H,00H db 14H,0A0H,04H,08H,07H,04H,00H,00H db 18H,0A0H,04H,08H,07H,05H,00H,00H SECTION .init align=4 execute section number 11,code _init: push ebx sub esp,8 call __x86.get_pc_thunk.bx add ebx,7363 mov eax,dword [ebx-4H] test eax,eax jz ?_001 call ?_011 ?_001: add esp,8 pop ebx ret SECTION .plt align=16 execute ?_002: push dword [?_023] jmp near [?_024] db 00H,00H,00H,00H ?_003: jmp near [?_025] ?_004: push 0 jmp ?_002 ?_005: jmp near [?_026] ?_006: push 8 jmp ?_002 ?_007: jmp near [?_027] ?_008: push 16 jmp ?_002 ?_009: jmp near [?_028] ?_010: push 24 jmp ?_002 SECTION .plt.got align=8 execute ?_011: jmp near [?_022] ALIGN 8 SECTION .text align=16 execute _start: xor ebp,ebp pop esi mov ecx,esp and esp,0FFFFFFF0H push eax push esp push edx push __libc_csu_fini push __libc_csu_init push ecx push esi push main call ?_007 hlt ALIGN 16 __x86.get_pc_thunk.bx: mov ebx,dword [esp] ret ALIGN 16 deregister_tm_clones: mov eax,?_029 sub eax,134520868 cmp eax,6 jbe ?_012 mov eax,0 test eax,eax jz ?_012 push ebp mov ebp,esp sub esp,20 push _edata call eax add esp,16 leave ?_012: ret nop ALIGN 8 register_tm_clones: mov eax,_edata sub eax,134520868 sar eax,2 mov edx,eax shr edx,31 add eax,edx sar eax,1 jz ?_013 mov edx,0 test edx,edx jz ?_013 push ebp mov ebp,esp sub esp,16 push eax push _edata call edx add esp,16 leave ?_013: ret ALIGN 16 __do_global_dtors_aux: cmp byte [_edata],0 jnz ?_014 push ebp mov ebp,esp sub esp,8 call deregister_tm_clones mov byte [_edata],1 leave ?_014: ret ALIGN 8 frame_dummy: mov eax,__JCR_LIST__ mov edx,dword [eax] test edx,edx jnz ?_016 ?_015: jmp register_tm_clones ALIGN 8 ?_016: mov edx,0 test edx,edx jz ?_015 push ebp mov ebp,esp sub esp,20 push eax call edx add esp,16 leave jmp register_tm_clones main: lea ecx,[esp+4H] and esp,0FFFFFFF0H push dword [ecx-4H] push ebp mov ebp,esp push ecx sub esp,68 mov eax,dword [gs:14H] mov dword [ebp-0CH],eax xor eax,eax sub esp,12 lea eax,[ebp-1CH] push eax lea eax,[ebp-20H] push eax lea eax,[ebp-24H] push eax lea eax,[ebp-28H] push eax lea eax,[ebp-2CH] push eax lea eax,[ebp-30H] push eax lea eax,[ebp-34H] push eax lea eax,[ebp-38H] push eax lea eax,[ebp-3CH] push eax lea eax,[ebp-10H] push eax lea eax,[ebp-14H] push eax lea eax,[ebp-18H] push eax push ?_020 call ?_009 add esp,64 mov edx,dword [ebp-3CH] mov eax,dword [ebp-18H] sub edx,eax mov eax,edx mov dword [ebp-3CH],eax mov edx,dword [ebp-38H] mov eax,dword [ebp-14H] sub edx,eax mov eax,edx mov dword [ebp-38H],eax mov edx,dword [ebp-34H] mov eax,dword [ebp-10H] sub edx,eax mov eax,edx mov dword [ebp-34H],eax mov edx,dword [ebp-30H] mov eax,dword [ebp-18H] sub edx,eax mov eax,edx mov dword [ebp-30H],eax mov edx,dword [ebp-2CH] mov eax,dword [ebp-14H] sub edx,eax mov eax,edx mov dword [ebp-2CH],eax mov edx,dword [ebp-28H] mov eax,dword [ebp-10H] sub edx,eax mov eax,edx mov dword [ebp-28H],eax mov edx,dword [ebp-24H] mov eax,dword [ebp-18H] sub edx,eax mov eax,edx mov dword [ebp-24H],eax mov edx,dword [ebp-20H] mov eax,dword [ebp-14H] sub edx,eax mov eax,edx mov dword [ebp-20H],eax mov edx,dword [ebp-1CH] mov eax,dword [ebp-10H] sub edx,eax mov eax,edx mov dword [ebp-1CH],eax mov edx,dword [ebp-3CH] mov eax,dword [ebp-2CH] imul edx,eax mov eax,dword [ebp-1CH] imul edx,eax mov ecx,dword [ebp-38H] mov eax,dword [ebp-28H] imul ecx,eax mov eax,dword [ebp-24H] imul eax,ecx lea ecx,[edx+eax] mov edx,dword [ebp-34H] mov eax,dword [ebp-30H] imul edx,eax mov eax,dword [ebp-20H] imul eax,edx add ecx,eax mov edx,dword [ebp-3CH] mov eax,dword [ebp-20H] imul edx,eax mov eax,dword [ebp-28H] imul eax,edx sub ecx,eax mov edx,dword [ebp-38H] mov eax,dword [ebp-1CH] imul edx,eax mov eax,dword [ebp-30H] imul eax,edx sub ecx,eax mov edx,dword [ebp-34H] mov eax,dword [ebp-24H] imul edx,eax mov eax,dword [ebp-2CH] imul eax,edx sub ecx,eax mov edx,715827883 mov eax,ecx imul edx mov eax,ecx sar eax,31 sub edx,eax mov eax,edx sub esp,8 push eax push ?_02 call ?_003 add esp,16 nop mov eax,dword [ebp-0CH] xor eax,dword [gs:14H] jz ?_017 call ?_005 ?_017: mov ecx,dword [ebp-4H] leave lea esp,[ecx-4H] ret ALIGN 8 __libc_csu_init: push ebp push edi push esi push ebx call __x86.get_pc_thunk.bx add ebx,6599 sub esp,12 mov ebp,dword [esp+20H] lea esi,[ebx-0F4H] call _init lea eax,[ebx-0F8H] sub esi,eax sar esi,2 test esi,esi jz ?_019 xor edi,edi ALIGN 8 ?_018: sub esp,4 push dword [esp+2CH] push dword [esp+2CH] push ebp call near [ebx+edi*4-0F8H] add edi,1 add esp,16 cmp edi,esi jnz ?_018 ?_019: add esp,12 pop ebx pop esi pop edi pop ebp ret ALIGN 8 __libc_csu_fini: ret SECTION .fini align=4 execute _fini: push ebx sub esp,8 call __x86.get_pc_thunk.bx add ebx,6499 add esp,8 pop ebx ret SECTION .rodata align=4 noexecute _fp_hw: dd 00000003H _IO_stdin_used: _IO_stdin_used: dd 00020001H ?_020: db 25H,64H,25H,64H,25H,64H,25H,64H db 25H,64H,25H,64H,25H,64H,25H,64H db 25H,64H,25H,64H,25H,64H,25H,64H db 00H ?_021: db 25H,64H,00H SECTION .eh_frame_hdr align=4 noexecute __GNU_EH_FRAME_HDR: db 01H,1BH,03H,3BH,28H,00H,00H,00H db 04H,00H,00H,00H,94H,0FCH,0FFH,0FFH db 44H,00H,00H,00H,0EFH,0FDH,0FFH,0FFH db 68H,00H,00H,00H,64H,0FFH,0FFH,0FFH db 98H,00H,00H,00H,0C4H,0FFH,0FFH,0FFH db 0E4H,00H,00H,00H __FRAME_END__: db 00H,00H,00H,00H SECTION .init_array align=4 noexecute __init_array_start: __frame_dummy_init_array_entry: db 90H,84H,04H,08H SECTION .fini_array align=4 noexecute __init_array_end: __do_global_dtors_aux_fini_array_entry: db 70H,84H,04H,08H SECTION .jcr align=4 noexecute __JCR_END__: __JCR_LIST__: db 00H,00H,00H,00H SECTION .got align=4 noexecute ?_022: dd __gmon_start__ SECTION .got.plt align=4 noexecute _GLOBAL_OFFSET_TABLE_: db 14H,9FH,04H,08H ?_023: dd 00000000H ?_024: dd 00000000H ?_025: dd ?_004 ?_026: dd ?_006 ?_027: dd ?_008 ?_028: dd ?_010 SECTION .data align=4 noexecute __data_start: data_start: db 00H,00H,00H,00H __dso_handle: db 00H,00H,00H,00H SECTION .bss align=1 noexecute __TMC_END__: __bss_start: _edata: completed.7209: resb 3 ?_029: resb 1