Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ch13: file format elf32-i386
- Disassembly of section .text:
- 08048060 <.text>:
- 8048060: eb 01 jmp 0x8048063
- 8048062: e8 b8 30 00 00 call 0x804b11f
- 8048067: 00 bb 05 00 00 00 add BYTE PTR [ebx+0x5],bh
- 804806d: b9 e2 80 04 08 mov ecx,0x80480e2
- 8048072: cd 80 int 0x80
- 8048074: eb 01 jmp 0x8048077
- 8048076: ce into
- 8048077: cc int3
- 8048078: eb 01 jmp 0x804807b
- 804807a: 90 nop
- 804807b: b8 30 00 00 00 mov eax,0x30
- 8048080: bb 05 00 00 00 mov ebx,0x5
- 8048085: b9 94 81 04 08 mov ecx,0x8048194
- 804808a: cd 80 int 0x80
- 804808c: eb 01 jmp 0x804808f
- 804808e: 90 nop
- 804808f: cc int3
- 8048090: eb 01 jmp 0x8048093
- 8048092: ce into
- 8048093: b8 30 00 00 00 mov eax,0x30
- 8048098: bb 05 00 00 00 mov ebx,0x5
- 804809d: b9 04 81 04 08 mov ecx,0x8048104
- 80480a2: cd 80 int 0x80
- 80480a4: eb 01 jmp 0x80480a7
- 80480a6: 90 nop
- 80480a7: cc int3
- 80480a8: eb 01 jmp 0x80480ab
- 80480aa: 90 nop
- 80480ab: b8 30 00 00 00 mov eax,0x30
- 80480b0: bb 05 00 00 00 mov ebx,0x5
- 80480b5: b9 38 81 04 08 mov ecx,0x8048138
- 80480ba: cd 80 int 0x80
- 80480bc: eb 01 jmp 0x80480bf
- 80480be: ce into
- 80480bf: cc int3
- 80480c0: eb 01 jmp 0x80480c3
- 80480c2: 90 nop
- 80480c3: b8 30 00 00 00 mov eax,0x30
- 80480c8: bb 05 00 00 00 mov ebx,0x5
- 80480cd: b9 49 81 04 08 mov ecx,0x8048149
- 80480d2: cd 80 int 0x80
- 80480d4: eb 01 jmp 0x80480d7
- 80480d6: 90 nop
- 80480d7: cc int3
- 80480d8: eb 01 jmp 0x80480db
- 80480da: 90 nop
- 80480db: b8 01 00 00 00 mov eax,0x1
- 80480e0: cd 80 int 0x80
- 80480e2: b8 04 81 04 08 mov eax,0x8048104
- 80480e7: eb 18 jmp 0x8048101
- 80480e9: 3d e8 82 04 08 cmp eax,0x80482e8
- 80480ee: 74 13 je 0x8048103
- 80480f0: eb 01 jmp 0x80480f3
- 80480f2: 90 nop
- 80480f3: 81 30 c1 8f 04 08 xor DWORD PTR [eax],0x8048fc1
- 80480f9: 83 c0 04 add eax,0x4
- 80480fc: eb 01 jmp 0x80480ff
- 80480fe: 90 nop
- 80480ff: eb e8 jmp 0x80480e9
- 8048101: eb e6 jmp 0x80480e9
- 8048103: c3 ret
- 8048104: 7a 8e jp 0x8048094
- 8048106: 04 08 add al,0x8
- 8048108: c1 36 39 shl DWORD PTR [esi],0x39
- 804810b: 8a c5 mov al,ch
- 804810d: 87 be 1c c1 8f 04 xchg DWORD PTR [esi+0x48fc11c],edi
- 8048113: e0 74 loopne 0x8048189
- 8048115: 8f 04 08 pop DWORD PTR [eax+ecx*1]
- 8048118: 7a 8f jp 0x80480a9
- 804811a: 04 08 add al,0x8
- 804811c: c1 36 55 shl DWORD PTR [esi],0x55
- 804811f: 8a c5 mov al,ch
- 8048121: 87 be 88 c1 8f 04 xchg DWORD PTR [esi+0x48fc188],edi
- 8048127: e0 68 loopne 0x8048191
- 8048129: 8f 04 08 pop DWORD PTR [eax+ecx*1]
- 804812c: 7a de jp 0x804810c
- 804812e: 86 0c c9 xchg BYTE PTR [ecx+ecx*8],cl
- 8048131: 8e c7 mov es,edi
- 8048133: 43 inc ebx
- 8048134: 07 pop es
- 8048135: 8c 04 cb mov WORD PTR [ebx+ecx*8],es
- 8048138: 79 de jns 0x8048118
- 804813a: 86 0c c9 xchg BYTE PTR [ecx+ecx*8],cl
- 804813d: 0f 3c (bad)
- 804813f: 08 b5 89 84 38 3d or BYTE PTR [ebp+0x3d388489],dh
- 8048145: cf iret
- 8048146: ef out dx,eax
- 8048147: fd std
- 8048148: 02 37 add dh,BYTE PTR [edi]
- 804814a: 55 push ebp
- 804814b: 8a c5 mov al,ch
- 804814d: 87 bf d9 43 8b 0c xchg DWORD PTR [edi+0xc8b43d9],edi
- 8048153: 82 c9 b5 or cl,0xb5
- 8048156: 0f 7d (bad)
- 8048158: c8 0f fd 08 enter 0xfd0f,0x8
- 804815c: b5 92 mov ch,0x92
- 804815e: 44 inc esp
- 804815f: 4b dec ebx
- 8048160: 2a 7e bf sub bh,BYTE PTR [esi-0x41]
- 8048163: 09 c1 or ecx,eax
- 8048165: 8f 04 b1 pop DWORD PTR [ecx+esi*4]
- 8048168: c6 (bad)
- 8048169: 0d 00 00 7b 99 or eax,0x997b0000
- 804816e: 04 08 add al,0x8
- 8048170: c1 67 53 08 shl DWORD PTR [edi+0x53],0x8
- 8048174: c1 8f ec 6a c1 8f 04 ror DWORD PTR [edi-0x703e9514],0x4
- 804817b: b3 c0 mov bl,0xc0
- 804817d: 8f 04 08 pop DWORD PTR [eax+ecx*1]
- 8048180: 78 6b js 0x80481ed
- 8048182: 85 0c c9 test DWORD PTR [ecx+ecx*8],ecx
- 8048185: 35 27 08 c1 8f xor eax,0x8fc10827
- 804818a: ec in al,dx
- 804818b: 36 c1 8f 04 e0 88 8f ror DWORD PTR ss:[edi-0x70771ffc],0x4
- 8048192: 04
- 8048193: 08 f0 or al,dh
- 8048195: 4f dec edi
- 8048196: bf 68 41 8b 0c mov edi,0xc8b4168
- 804819b: 89 3a mov DWORD PTR [edx],edi
- 804819d: 6b 86 0c c9 fb 03 3b imul eax,DWORD PTR [esi+0x3fbc90c],0x3b
- 80481a4: c2 0c c7 ret 0xc70c
- 80481a7: 0c 2a or al,0x2a
- 80481a9: 7e bf jle 0x804816a
- 80481ab: ec in al,dx
- 80481ac: 43 inc ebx
- 80481ad: 8b 0c 33 mov ecx,DWORD PTR [ebx+esi*1]
- 80481b0: c2 fb 1d ret 0x1dfb
- 80481b3: b3 c0 mov bl,0xc0
- 80481b5: 8f 04 08 pop DWORD PTR [eax+ecx*1]
- 80481b8: 78 92 js 0x804814c
- 80481ba: 86 0c c9 xchg BYTE PTR [ecx+ecx*8],cl
- 80481bd: 35 24 08 c1 8f xor eax,0x8fc10824
- 80481c2: ec in al,dx
- 80481c3: 0e push cs
- 80481c4: c1 8f 04 e0 d0 8f 04 ror DWORD PTR [edi-0x702f1ffc],0x4
- 80481cb: 08 02 or BYTE PTR [edx],al
- 80481cd: 37 aaa
- 80481ce: 00 08 add BYTE PTR [eax],cl
- 80481d0: c1 8f c9 88 02 37 07 ror DWORD PTR [edi+0x370288c9],0x7
- 80481d7: 08 c1 or cl,al
- 80481d9: 8f c9 88 02 37 blci esi,DWORD PTR [edi]
- 80481de: 05 08 c1 8f c9 add eax,0xc98fc108
- 80481e3: 88 86 fd 65 7c bb mov BYTE PTR [esi-0x44839a03],al
- 80481e9: a3 24 7c a9 e6 mov ds:0xe6a97c24,eax
- 80481ee: 77 28 ja 0x8048218
- 80481f0: a8 fc test al,0xfc
- 80481f2: 24 7c and al,0x7c
- 80481f4: a9 ea 24 6f ae test eax,0xae6f24ea
- 80481f9: e0 60 loopne 0x804825b
- 80481fb: 28 b1 ee 77 7b b6 sub BYTE PTR [ecx-0x49848812],dh
- 8048201: e0 76 loopne 0x8048279
- 8048203: 6c ins BYTE PTR es:[edi],dx
- 8048204: e1 ae loope 0x80481b4
- 8048206: 0e push cs
- 8048207: 4a dec edx
- 8048208: a0 eb 24 78 a0 mov al,ds:0xa07824eb
- 804820d: fc cld
- 804820e: 77 7f ja 0x804828f
- 8048210: ae scas al,BYTE PTR es:[edi]
- 8048211: fd std
- 8048212: 60 pusha
- 8048213: 24 e1 and al,0xe1
- 8048215: fc cld
- 8048216: 6b 7a b3 f6 imul edi,DWORD PTR [edx-0x4d],0xfffffff6
- 804821a: 24 29 and al,0x29
- 804821c: cb retf
- 804821d: de 51 41 ficom WORD PTR [ecx+0x41]
- 8048220: 95 xchg ebp,eax
- 8048221: af scas eax,DWORD PTR es:[edi]
- 8048222: 25 28 84 f7 61 and eax,0x61f78428
- 8048227: 6b b4 fb 65 6a ad ea imul esi,DWORD PTR [ebx+edi*8-0x1552959b],0x24
- 804822e: 24
- 804822f: 61 popa
- 8048230: b2 af mov dl,0xaf
- 8048232: 69 67 a5 e6 62 61 a4 imul esp,DWORD PTR [edi-0x5b],0xa46162e6
- 8048239: eb 24 jmp 0x804825f
- 804823b: 29 cb sub ebx,ecx
- 804823d: ca 6a 7c retf 0x7c6a
- 8048240: a4 movs BYTE PTR es:[edi],BYTE PTR ds:[esi]
- 8048241: fd std
- 8048242: 24 7c and al,0x7c
- 8048244: a9 ea 24 78 a0 test eax,0xa07824ea
- 8048249: fc cld
- 804824a: 77 7f ja 0x80482cb
- 804824c: ae scas al,BYTE PTR es:[edi]
- 804824d: fd std
- 804824e: 60 pusha
- 804824f: 32 e1 xor ah,cl
- 8048251: 8f 04 08 pop DWORD PTR [eax+ecx*1]
- 8048254: c1 8f 04 08 c1 8f 04 ror DWORD PTR [edi-0x703ef7fc],0x4
- 804825b: 08 c1 or cl,al
- 804825d: 8f 04 08 pop DWORD PTR [eax+ecx*1]
- 8048260: c1 8f 04 08 c1 8f 04 ror DWORD PTR [edi-0x703ef7fc],0x4
- 8048267: 08 c1 or cl,al
- 8048269: 8f 04 08 pop DWORD PTR [eax+ecx*1]
- 804826c: c1 8f 04 08 c1 8f 04 ror DWORD PTR [edi-0x703ef7fc],0x4
- 8048273: 08 c1 or cl,al
- 8048275: 8f 04 08 pop DWORD PTR [eax+ecx*1]
- 8048278: c1 8f 04 08 c1 8f 04 ror DWORD PTR [edi-0x703ef7fc],0x4
- 804827f: 08 c1 or cl,al
- 8048281: 8f 04 08 pop DWORD PTR [eax+ecx*1]
- 8048284: c1 8f 04 08 c1 8f 04 ror DWORD PTR [edi-0x703ef7fc],0x4
- 804828b: 08 c1 or cl,al
- 804828d: 8f 04 08 pop DWORD PTR [eax+ecx*1]
- 8048290: c1 8f 04 08 c1 8f 04 ror DWORD PTR [edi-0x703ef7fc],0x4
- 8048297: 08 c1 or cl,al
- 8048299: 8f 04 08 pop DWORD PTR [eax+ecx*1]
- 804829c: c1 8f 04 08 c1 8f 04 ror DWORD PTR [edi-0x703ef7fc],0x4
- 80482a3: 08 c1 or cl,al
- 80482a5: 8f 04 08 pop DWORD PTR [eax+ecx*1]
- 80482a8: c1 8f 04 08 c1 8f 04 ror DWORD PTR [edi-0x703ef7fc],0x4
- 80482af: 08 c1 or cl,al
- 80482b1: 8f 04 08 pop DWORD PTR [eax+ecx*1]
- 80482b4: c1 8f 04 08 c1 8f 04 ror DWORD PTR [edi-0x703ef7fc],0x4
- 80482bb: 08 c1 or cl,al
- 80482bd: 8f 04 08 pop DWORD PTR [eax+ecx*1]
- 80482c0: c1 8f 04 08 c1 8f 04 ror DWORD PTR [edi-0x703ef7fc],0x4
- 80482c7: 08 c1 or cl,al
- 80482c9: 8f 04 08 pop DWORD PTR [eax+ecx*1]
- 80482cc: c1 8f 04 08 c1 2a cb ror DWORD PTR [edi+0x2ac10804],0xcb
- 80482d3: 95 xchg ebp,eax
- 80482d4: 75 52 jne 0x8048328
- 80482d6: 8c bc 54 20 91 a7 49 mov WORD PTR [esp+edx*2+0x49a79120],?
- 80482dd: 3b cb cmp ecx,ebx
- 80482df: 9f lahf
- 80482e0: 78 0a js 0x80482ec
- 80482e2: d9 08 (bad) [eax]
- 80482e4: cb retf
- 80482e5: e0 5e loopne 0x8048345
- 80482e7: 76 .byte 0x76
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement