-
Notifications
You must be signed in to change notification settings - Fork 0
/
stack.obj
219 lines (196 loc) · 9.67 KB
/
stack.obj
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
a.out: file format elf64-x86-64
Disassembly of section .init:
0000000000400428 <_init>:
400428: 48 83 ec 08 sub $0x8,%rsp
40042c: 48 8b 05 c5 0b 20 00 mov 0x200bc5(%rip),%rax # 600ff8 <_DYNAMIC+0x1d0>
400433: 48 85 c0 test %rax,%rax
400436: 74 05 je 40043d <_init+0x15>
400438: e8 53 00 00 00 callq 400490 <__libc_start_main@plt+0x10>
40043d: 48 83 c4 08 add $0x8,%rsp
400441: c3 retq
Disassembly of section .plt:
0000000000400450 <__stack_chk_fail@plt-0x10>:
400450: ff 35 b2 0b 20 00 pushq 0x200bb2(%rip) # 601008 <_GLOBAL_OFFSET_TABLE_+0x8>
400456: ff 25 b4 0b 20 00 jmpq *0x200bb4(%rip) # 601010 <_GLOBAL_OFFSET_TABLE_+0x10>
40045c: 0f 1f 40 00 nopl 0x0(%rax)
0000000000400460 <__stack_chk_fail@plt>:
400460: ff 25 b2 0b 20 00 jmpq *0x200bb2(%rip) # 601018 <_GLOBAL_OFFSET_TABLE_+0x18>
400466: 68 00 00 00 00 pushq $0x0
40046b: e9 e0 ff ff ff jmpq 400450 <_init+0x28>
0000000000400470 <printf@plt>:
400470: ff 25 aa 0b 20 00 jmpq *0x200baa(%rip) # 601020 <_GLOBAL_OFFSET_TABLE_+0x20>
400476: 68 01 00 00 00 pushq $0x1
40047b: e9 d0 ff ff ff jmpq 400450 <_init+0x28>
0000000000400480 <__libc_start_main@plt>:
400480: ff 25 a2 0b 20 00 jmpq *0x200ba2(%rip) # 601028 <_GLOBAL_OFFSET_TABLE_+0x28>
400486: 68 02 00 00 00 pushq $0x2
40048b: e9 c0 ff ff ff jmpq 400450 <_init+0x28>
Disassembly of section .plt.got:
0000000000400490 <.plt.got>:
400490: ff 25 62 0b 20 00 jmpq *0x200b62(%rip) # 600ff8 <_DYNAMIC+0x1d0>
400496: 66 90 xchg %ax,%ax
Disassembly of section .text:
00000000004004a0 <_start>:
4004a0: 31 ed xor %ebp,%ebp
4004a2: 49 89 d1 mov %rdx,%r9
4004a5: 5e pop %rsi
4004a6: 48 89 e2 mov %rsp,%rdx
4004a9: 48 83 e4 f0 and $0xfffffffffffffff0,%rsp
4004ad: 50 push %rax
4004ae: 54 push %rsp
4004af: 49 c7 c0 90 06 40 00 mov $0x400690,%r8
4004b6: 48 c7 c1 20 06 40 00 mov $0x400620,%rcx
4004bd: 48 c7 c7 ac 05 40 00 mov $0x4005ac,%rdi
4004c4: e8 b7 ff ff ff callq 400480 <__libc_start_main@plt>
4004c9: f4 hlt
4004ca: 66 0f 1f 44 00 00 nopw 0x0(%rax,%rax,1)
00000000004004d0 <deregister_tm_clones>:
4004d0: b8 47 10 60 00 mov $0x601047,%eax
4004d5: 55 push %rbp
4004d6: 48 2d 40 10 60 00 sub $0x601040,%rax
4004dc: 48 83 f8 0e cmp $0xe,%rax
4004e0: 48 89 e5 mov %rsp,%rbp
4004e3: 76 1b jbe 400500 <deregister_tm_clones+0x30>
4004e5: b8 00 00 00 00 mov $0x0,%eax
4004ea: 48 85 c0 test %rax,%rax
4004ed: 74 11 je 400500 <deregister_tm_clones+0x30>
4004ef: 5d pop %rbp
4004f0: bf 40 10 60 00 mov $0x601040,%edi
4004f5: ff e0 jmpq *%rax
4004f7: 66 0f 1f 84 00 00 00 nopw 0x0(%rax,%rax,1)
4004fe: 00 00
400500: 5d pop %rbp
400501: c3 retq
400502: 0f 1f 40 00 nopl 0x0(%rax)
400506: 66 2e 0f 1f 84 00 00 nopw %cs:0x0(%rax,%rax,1)
40050d: 00 00 00
0000000000400510 <register_tm_clones>:
400510: be 40 10 60 00 mov $0x601040,%esi
400515: 55 push %rbp
400516: 48 81 ee 40 10 60 00 sub $0x601040,%rsi
40051d: 48 c1 fe 03 sar $0x3,%rsi
400521: 48 89 e5 mov %rsp,%rbp
400524: 48 89 f0 mov %rsi,%rax
400527: 48 c1 e8 3f shr $0x3f,%rax
40052b: 48 01 c6 add %rax,%rsi
40052e: 48 d1 fe sar %rsi
400531: 74 15 je 400548 <register_tm_clones+0x38>
400533: b8 00 00 00 00 mov $0x0,%eax
400538: 48 85 c0 test %rax,%rax
40053b: 74 0b je 400548 <register_tm_clones+0x38>
40053d: 5d pop %rbp
40053e: bf 40 10 60 00 mov $0x601040,%edi
400543: ff e0 jmpq *%rax
400545: 0f 1f 00 nopl (%rax)
400548: 5d pop %rbp
400549: c3 retq
40054a: 66 0f 1f 44 00 00 nopw 0x0(%rax,%rax,1)
0000000000400550 <__do_global_dtors_aux>:
400550: 80 3d e9 0a 20 00 00 cmpb $0x0,0x200ae9(%rip) # 601040 <__TMC_END__>
400557: 75 11 jne 40056a <__do_global_dtors_aux+0x1a>
400559: 55 push %rbp
40055a: 48 89 e5 mov %rsp,%rbp
40055d: e8 6e ff ff ff callq 4004d0 <deregister_tm_clones>
400562: 5d pop %rbp
400563: c6 05 d6 0a 20 00 01 movb $0x1,0x200ad6(%rip) # 601040 <__TMC_END__>
40056a: f3 c3 repz retq
40056c: 0f 1f 40 00 nopl 0x0(%rax)
0000000000400570 <frame_dummy>:
400570: bf 20 0e 60 00 mov $0x600e20,%edi
400575: 48 83 3f 00 cmpq $0x0,(%rdi)
400579: 75 05 jne 400580 <frame_dummy+0x10>
40057b: eb 93 jmp 400510 <register_tm_clones>
40057d: 0f 1f 00 nopl (%rax)
400580: b8 00 00 00 00 mov $0x0,%eax
400585: 48 85 c0 test %rax,%rax
400588: 74 f1 je 40057b <frame_dummy+0xb>
40058a: 55 push %rbp
40058b: 48 89 e5 mov %rsp,%rbp
40058e: ff d0 callq *%rax
400590: 5d pop %rbp
400591: e9 7a ff ff ff jmpq 400510 <register_tm_clones>
0000000000400596 <f>:
400596: 55 push %rbp
400597: 48 89 e5 mov %rsp,%rbp
40059a: bf a8 06 40 00 mov $0x4006a8,%edi
40059f: b8 00 00 00 00 mov $0x0,%eax
4005a4: e8 c7 fe ff ff callq 400470 <printf@plt>
4005a9: 90 nop
4005aa: 5d pop %rbp
4005ab: c3 retq
00000000004005ac <main>:
4005ac: 55 push %rbp
4005ad: 48 89 e5 mov %rsp,%rbp
4005b0: 48 83 ec 20 sub $0x20,%rsp
4005b4: 89 7d ec mov %edi,-0x14(%rbp)
4005b7: 48 89 75 e0 mov %rsi,-0x20(%rbp)
4005bb: 64 48 8b 04 25 28 00 mov %fs:0x28,%rax
4005c2: 00 00
4005c4: 48 89 45 f8 mov %rax,-0x8(%rbp)
4005c8: 31 c0 xor %eax,%eax
4005ca: c7 45 f0 00 01 00 00 movl $0x100,-0x10(%rbp)
4005d1: c7 45 f4 00 02 00 00 movl $0x200,-0xc(%rbp)
4005d8: 48 8d 55 f4 lea -0xc(%rbp),%rdx
4005dc: 48 8d 45 f0 lea -0x10(%rbp),%rax
4005e0: b9 ac 05 40 00 mov $0x4005ac,%ecx
4005e5: 48 89 c6 mov %rax,%rsi
4005e8: bf c9 06 40 00 mov $0x4006c9,%edi
4005ed: b8 00 00 00 00 mov $0x0,%eax
4005f2: e8 79 fe ff ff callq 400470 <printf@plt>
4005f7: b8 00 00 00 00 mov $0x0,%eax
4005fc: e8 95 ff ff ff callq 400596 <f>
400601: b8 00 00 00 00 mov $0x0,%eax
400606: 48 8b 4d f8 mov -0x8(%rbp),%rcx
40060a: 64 48 33 0c 25 28 00 xor %fs:0x28,%rcx
400611: 00 00
400613: 74 05 je 40061a <main+0x6e>
400615: e8 46 fe ff ff callq 400460 <__stack_chk_fail@plt>
40061a: c9 leaveq
40061b: c3 retq
40061c: 0f 1f 40 00 nopl 0x0(%rax)
0000000000400620 <__libc_csu_init>:
400620: 41 57 push %r15
400622: 41 56 push %r14
400624: 41 89 ff mov %edi,%r15d
400627: 41 55 push %r13
400629: 41 54 push %r12
40062b: 4c 8d 25 de 07 20 00 lea 0x2007de(%rip),%r12 # 600e10 <__frame_dummy_init_array_entry>
400632: 55 push %rbp
400633: 48 8d 2d de 07 20 00 lea 0x2007de(%rip),%rbp # 600e18 <__init_array_end>
40063a: 53 push %rbx
40063b: 49 89 f6 mov %rsi,%r14
40063e: 49 89 d5 mov %rdx,%r13
400641: 4c 29 e5 sub %r12,%rbp
400644: 48 83 ec 08 sub $0x8,%rsp
400648: 48 c1 fd 03 sar $0x3,%rbp
40064c: e8 d7 fd ff ff callq 400428 <_init>
400651: 48 85 ed test %rbp,%rbp
400654: 74 20 je 400676 <__libc_csu_init+0x56>
400656: 31 db xor %ebx,%ebx
400658: 0f 1f 84 00 00 00 00 nopl 0x0(%rax,%rax,1)
40065f: 00
400660: 4c 89 ea mov %r13,%rdx
400663: 4c 89 f6 mov %r14,%rsi
400666: 44 89 ff mov %r15d,%edi
400669: 41 ff 14 dc callq *(%r12,%rbx,8)
40066d: 48 83 c3 01 add $0x1,%rbx
400671: 48 39 eb cmp %rbp,%rbx
400674: 75 ea jne 400660 <__libc_csu_init+0x40>
400676: 48 83 c4 08 add $0x8,%rsp
40067a: 5b pop %rbx
40067b: 5d pop %rbp
40067c: 41 5c pop %r12
40067e: 41 5d pop %r13
400680: 41 5e pop %r14
400682: 41 5f pop %r15
400684: c3 retq
400685: 90 nop
400686: 66 2e 0f 1f 84 00 00 nopw %cs:0x0(%rax,%rax,1)
40068d: 00 00 00
0000000000400690 <__libc_csu_fini>:
400690: f3 c3 repz retq
Disassembly of section .fini:
0000000000400694 <_fini>:
400694: 48 83 ec 08 sub $0x8,%rsp
400698: 48 83 c4 08 add $0x8,%rsp
40069c: c3 retq