Skip to content

Instantly share code, notes, and snippets.

@dbwodlf3
Last active March 27, 2020 05:49
Show Gist options
  • Select an option

  • Save dbwodlf3/b57a6b4ce88770cc86dfc588d777be29 to your computer and use it in GitHub Desktop.

Select an option

Save dbwodlf3/b57a6b4ce88770cc86dfc588d777be29 to your computer and use it in GitHub Desktop.
mcsema-dyninst-disass
$ mcsema-lift-4.0 --os linux --arch amd64 --cfg hello.cfg --output hello.bc
E0326 11:21:38.169576 45 Function.cpp:921] Function sub_4003d0_printf is empty!
E0326 11:21:38.174134 45 Function.cpp:353] Cannot find target of instruction at 400441; the static target 400443 is not associated with
a lifted subroutine, and it does not have a known call target.
E0326 11:21:38.174180 45 Function.cpp:376] Adding missing block 400443 in function sub_400420_deregister_tm_clones as a tail call to __
remill_error
E0326 11:21:38.176797 45 Function.cpp:353] Cannot find target of instruction at 400483; the static target 400485 is not associated with
a lifted subroutine, and it does not have a known call target.
E0326 11:21:38.176849 45 Function.cpp:376] Adding missing block 400485 in function sub_400450_register_tm_clones as a tail call to __re
mill_error
E0326 11:21:38.178230 45 Function.cpp:842] Block 4003b8 has no terminator, and instruction at 4003b8 is not a local no-return function
call.
E0326 11:21:38.179965 45 Function.cpp:353] Cannot find target of instruction at 400483; the static target 400485 is not associated with
a lifted subroutine, and it does not have a known call target.
E0326 11:21:38.180044 45 Function.cpp:376] Adding missing block 400485 in function sub_4004c0_frame_dummy as a tail call to __remill_er
ror
$ lli hello.bc
LLVM ERROR: Program used external function '__remill_function_call' which could not be resolved!
hello: file format elf64-x86-64
Disassembly of section .init:
00000000004003a8 <_init>:
4003a8: 48 83 ec 08 sub $0x8,%rsp
4003ac: 48 8b 05 45 0c 20 00 mov 0x200c45(%rip),%rax # 600ff8 <__gmon_start__>
4003b3: 48 85 c0 test %rax,%rax
4003b6: 74 02 je 4003ba <_init+0x12>
4003b8: ff d0 callq *%rax
4003ba: 48 83 c4 08 add $0x8,%rsp
4003be: c3 retq
Disassembly of section .plt:
00000000004003c0 <.plt>:
4003c0: ff 35 42 0c 20 00 pushq 0x200c42(%rip) # 601008 <_GLOBAL_OFFSET_TABLE_+0x8>
4003c6: ff 25 44 0c 20 00 jmpq *0x200c44(%rip) # 601010 <_GLOBAL_OFFSET_TABLE_+0x10>
4003cc: 0f 1f 40 00 nopl 0x0(%rax)
00000000004003d0 <printf@plt>:
4003d0: ff 25 42 0c 20 00 jmpq *0x200c42(%rip) # 601018 <printf@GLIBC_2.2.5>
4003d6: 68 00 00 00 00 pushq $0x0
4003db: e9 e0 ff ff ff jmpq 4003c0 <.plt>
Disassembly of section .text:
00000000004003e0 <_start>:
4003e0: 31 ed xor %ebp,%ebp
4003e2: 49 89 d1 mov %rdx,%r9
4003e5: 5e pop %rsi
4003e6: 48 89 e2 mov %rsp,%rdx
4003e9: 48 83 e4 f0 and $0xfffffffffffffff0,%rsp
4003ed: 50 push %rax
4003ee: 54 push %rsp
4003ef: 49 c7 c0 70 05 40 00 mov $0x400570,%r8
4003f6: 48 c7 c1 00 05 40 00 mov $0x400500,%rcx
4003fd: 48 c7 c7 d0 04 40 00 mov $0x4004d0,%rdi
400404: ff 15 e6 0b 20 00 callq *0x200be6(%rip) # 600ff0 <__libc_start_main@GLIBC_2.2.5>
40040a: f4 hlt
40040b: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1)
0000000000400410 <_dl_relocate_static_pie>:
400410: f3 c3 repz retq
400412: 66 2e 0f 1f 84 00 00 nopw %cs:0x0(%rax,%rax,1)
400419: 00 00 00
40041c: 0f 1f 40 00 nopl 0x0(%rax)
0000000000400420 <deregister_tm_clones>:
400420: 55 push %rbp
400421: b8 30 10 60 00 mov $0x601030,%eax
400426: 48 3d 30 10 60 00 cmp $0x601030,%rax
40042c: 48 89 e5 mov %rsp,%rbp
40042f: 74 17 je 400448 <deregister_tm_clones+0x28>
400431: b8 00 00 00 00 mov $0x0,%eax
400436: 48 85 c0 test %rax,%rax
400439: 74 0d je 400448 <deregister_tm_clones+0x28>
40043b: 5d pop %rbp
40043c: bf 30 10 60 00 mov $0x601030,%edi
400441: ff e0 jmpq *%rax
400443: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1)
400448: 5d pop %rbp
400449: c3 retq
40044a: 66 0f 1f 44 00 00 nopw 0x0(%rax,%rax,1)
0000000000400450 <register_tm_clones>:
400450: be 30 10 60 00 mov $0x601030,%esi
400455: 55 push %rbp
400456: 48 81 ee 30 10 60 00 sub $0x601030,%rsi
40045d: 48 89 e5 mov %rsp,%rbp
400460: 48 c1 fe 03 sar $0x3,%rsi
400464: 48 89 f0 mov %rsi,%rax
400467: 48 c1 e8 3f shr $0x3f,%rax
40046b: 48 01 c6 add %rax,%rsi
40046e: 48 d1 fe sar %rsi
400471: 74 15 je 400488 <register_tm_clones+0x38>
400473: b8 00 00 00 00 mov $0x0,%eax
400478: 48 85 c0 test %rax,%rax
40047b: 74 0b je 400488 <register_tm_clones+0x38>
40047d: 5d pop %rbp
40047e: bf 30 10 60 00 mov $0x601030,%edi
400483: ff e0 jmpq *%rax
400485: 0f 1f 00 nopl (%rax)
400488: 5d pop %rbp
400489: c3 retq
40048a: 66 0f 1f 44 00 00 nopw 0x0(%rax,%rax,1)
0000000000400490 <__do_global_dtors_aux>:
400490: 80 3d 99 0b 20 00 00 cmpb $0x0,0x200b99(%rip) # 601030 <__TMC_END__>
400497: 75 17 jne 4004b0 <__do_global_dtors_aux+0x20>
400499: 55 push %rbp
40049a: 48 89 e5 mov %rsp,%rbp
40049d: e8 7e ff ff ff callq 400420 <deregister_tm_clones>
4004a2: c6 05 87 0b 20 00 01 movb $0x1,0x200b87(%rip) # 601030 <__TMC_END__>
4004a9: 5d pop %rbp
4004aa: c3 retq
4004ab: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1)
4004b0: f3 c3 repz retq
4004b2: 0f 1f 40 00 nopl 0x0(%rax)
4004b6: 66 2e 0f 1f 84 00 00 nopw %cs:0x0(%rax,%rax,1)
4004bd: 00 00 00
00000000004004c0 <frame_dummy>:
4004c0: 55 push %rbp
4004c1: 48 89 e5 mov %rsp,%rbp
4004c4: 5d pop %rbp
4004c5: eb 89 jmp 400450 <register_tm_clones>
4004c7: 66 0f 1f 84 00 00 00 nopw 0x0(%rax,%rax,1)
4004ce: 00 00
00000000004004d0 <main>:
4004d0: 55 push %rbp
4004d1: 48 89 e5 mov %rsp,%rbp
4004d4: 48 83 ec 10 sub $0x10,%rsp
4004d8: 48 bf 84 05 40 00 00 movabs $0x400584,%rdi
4004df: 00 00 00
4004e2: c7 45 fc 00 00 00 00 movl $0x0,-0x4(%rbp)
4004e9: b0 00 mov $0x0,%al
4004eb: e8 e0 fe ff ff callq 4003d0 <printf@plt>
4004f0: 31 c9 xor %ecx,%ecx
4004f2: 89 45 f8 mov %eax,-0x8(%rbp)
4004f5: 89 c8 mov %ecx,%eax
4004f7: 48 83 c4 10 add $0x10,%rsp
4004fb: 5d pop %rbp
4004fc: c3 retq
4004fd: 0f 1f 00 nopl (%rax)
0000000000400500 <__libc_csu_init>:
400500: 41 57 push %r15
400502: 41 56 push %r14
400504: 49 89 d7 mov %rdx,%r15
400507: 41 55 push %r13
400509: 41 54 push %r12
40050b: 4c 8d 25 fe 08 20 00 lea 0x2008fe(%rip),%r12 # 600e10 <__frame_dummy_init_array_entry>
400512: 55 push %rbp
400513: 48 8d 2d fe 08 20 00 lea 0x2008fe(%rip),%rbp # 600e18 <__init_array_end>
40051a: 53 push %rbx
40051b: 41 89 fd mov %edi,%r13d
40051e: 49 89 f6 mov %rsi,%r14
400521: 4c 29 e5 sub %r12,%rbp
400524: 48 83 ec 08 sub $0x8,%rsp
400528: 48 c1 fd 03 sar $0x3,%rbp
40052c: e8 77 fe ff ff callq 4003a8 <_init>
400531: 48 85 ed test %rbp,%rbp
400534: 74 20 je 400556 <__libc_csu_init+0x56>
400536: 31 db xor %ebx,%ebx
400538: 0f 1f 84 00 00 00 00 nopl 0x0(%rax,%rax,1)
40053f: 00
400540: 4c 89 fa mov %r15,%rdx
400543: 4c 89 f6 mov %r14,%rsi
400546: 44 89 ef mov %r13d,%edi
400549: 41 ff 14 dc callq *(%r12,%rbx,8)
40054d: 48 83 c3 01 add $0x1,%rbx
400551: 48 39 dd cmp %rbx,%rbp
400554: 75 ea jne 400540 <__libc_csu_init+0x40>
400556: 48 83 c4 08 add $0x8,%rsp
40055a: 5b pop %rbx
40055b: 5d pop %rbp
40055c: 41 5c pop %r12
40055e: 41 5d pop %r13
400560: 41 5e pop %r14
400562: 41 5f pop %r15
400564: c3 retq
400565: 90 nop
400566: 66 2e 0f 1f 84 00 00 nopw %cs:0x0(%rax,%rax,1)
40056d: 00 00 00
0000000000400570 <__libc_csu_fini>:
400570: f3 c3 repz retq
Disassembly of section .fini:
0000000000400574 <_fini>:
400574: 48 83 ec 08 sub $0x8,%rsp
400578: 48 83 c4 08 add $0x8,%rsp
40057c: c3 retq
name: "hello"
funcs {
ea: 4195240
blocks {
ea: 4195240
instructions {
ea: 4195240
bytes: "H\203\354\010"
}
instructions {
ea: 4195244
bytes: "H\213\005E\014 \000"
xrefs {
target_type: DataTarget
operand_type: MemoryOperand
location: Internal
ea: 6295544
}
}
instructions {
ea: 4195251
bytes: "H\205\300"
}
instructions {
ea: 4195254
bytes: "t\002"
}
}
blocks {
ea: 4195256
instructions {
ea: 4195256
bytes: "\377\320"
}
}
blocks {
ea: 4195258
instructions {
ea: 4195258
bytes: "H\203\304\010"
}
instructions {
ea: 4195262
bytes: "\303"
}
}
is_entrypoint: false
name: "_init"
}
funcs {
ea: 4195280
is_entrypoint: false
name: "printf"
}
funcs {
ea: 4195296
blocks {
ea: 4195296
instructions {
ea: 4195296
bytes: "1\355"
}
instructions {
ea: 4195298
bytes: "I\211\321"
}
instructions {
ea: 4195301
bytes: "^"
}
instructions {
ea: 4195302
bytes: "H\211\342"
}
instructions {
ea: 4195305
bytes: "H\203\344\360"
}
instructions {
ea: 4195309
bytes: "P"
}
instructions {
ea: 4195310
bytes: "T"
}
instructions {
ea: 4195311
bytes: "I\307\300p\005@\000"
xrefs {
target_type: DataTarget
operand_type: ImmediateOperand
location: Internal
ea: 4195696
name: "__libc_csu_fini"
}
}
instructions {
ea: 4195318
bytes: "H\307\301\000\005@\000"
xrefs {
target_type: DataTarget
operand_type: ImmediateOperand
location: Internal
ea: 4195584
name: "__libc_csu_init"
}
}
instructions {
ea: 4195325
bytes: "H\307\307\320\004@\000"
xrefs {
target_type: DataTarget
operand_type: ImmediateOperand
location: Internal
ea: 4195536
name: "main"
}
}
instructions {
ea: 4195332
bytes: "\377\025\346\013 \000"
xrefs {
target_type: DataTarget
operand_type: MemoryOperand
location: Internal
ea: 6295536
}
}
successor_eas: 4195338
}
blocks {
ea: 4195338
instructions {
ea: 4195338
bytes: "\364"
}
}
is_entrypoint: false
name: "_start"
}
funcs {
ea: 4195344
blocks {
ea: 4195344
instructions {
ea: 4195344
bytes: "\363\303"
}
}
is_entrypoint: false
name: "_dl_relocate_static_pie"
}
funcs {
ea: 4195360
blocks {
ea: 4195360
instructions {
ea: 4195360
bytes: "U"
}
instructions {
ea: 4195361
bytes: "\2700\020`\000"
xrefs {
target_type: DataTarget
operand_type: ImmediateOperand
location: Internal
ea: 6295600
}
}
instructions {
ea: 4195366
bytes: "H=0\020`\000"
xrefs {
target_type: DataTarget
operand_type: ImmediateOperand
location: Internal
ea: 6295600
}
}
instructions {
ea: 4195372
bytes: "H\211\345"
}
instructions {
ea: 4195375
bytes: "t\027"
}
successor_eas: 4195400
successor_eas: 4195377
}
blocks {
ea: 4195377
instructions {
ea: 4195377
bytes: "\270\000\000\000\000"
}
instructions {
ea: 4195382
bytes: "H\205\300"
}
instructions {
ea: 4195385
bytes: "t\r"
}
successor_eas: 4195400
successor_eas: 4195387
}
blocks {
ea: 4195387
instructions {
ea: 4195387
bytes: "]"
}
instructions {
ea: 4195388
bytes: "\2770\020`\000"
xrefs {
target_type: DataTarget
operand_type: ImmediateOperand
location: Internal
ea: 6295600
}
}
instructions {
ea: 4195393
bytes: "\377\340"
}
}
blocks {
ea: 4195400
instructions {
ea: 4195400
bytes: "]"
}
instructions {
ea: 4195401
bytes: "\303"
}
}
is_entrypoint: false
name: "deregister_tm_clones"
}
funcs {
ea: 4195408
blocks {
ea: 4195408
instructions {
ea: 4195408
bytes: "\2760\020`\000"
xrefs {
target_type: DataTarget
operand_type: ImmediateOperand
location: Internal
ea: 6295600
}
}
instructions {
ea: 4195413
bytes: "U"
}
instructions {
ea: 4195414
bytes: "H\201\3560\020`\000"
xrefs {
target_type: DataTarget
operand_type: ImmediateOperand
location: Internal
ea: 6295600
}
}
instructions {
ea: 4195421
bytes: "H\211\345"
}
instructions {
ea: 4195424
bytes: "H\301\376\003"
}
instructions {
ea: 4195428
bytes: "H\211\360"
}
instructions {
ea: 4195431
bytes: "H\301\350?"
}
instructions {
ea: 4195435
bytes: "H\001\306"
}
instructions {
ea: 4195438
bytes: "H\321\376"
}
instructions {
ea: 4195441
bytes: "t\025"
}
successor_eas: 4195464
successor_eas: 4195443
}
blocks {
ea: 4195443
instructions {
ea: 4195443
bytes: "\270\000\000\000\000"
}
instructions {
ea: 4195448
bytes: "H\205\300"
}
instructions {
ea: 4195451
bytes: "t\013"
}
successor_eas: 4195464
successor_eas: 4195453
}
blocks {
ea: 4195453
instructions {
ea: 4195453
bytes: "]"
}
instructions {
ea: 4195454
bytes: "\2770\020`\000"
xrefs {
target_type: DataTarget
operand_type: ImmediateOperand
location: Internal
ea: 6295600
}
}
instructions {
ea: 4195459
bytes: "\377\340"
}
}
blocks {
ea: 4195464
instructions {
ea: 4195464
bytes: "]"
}
instructions {
ea: 4195465
bytes: "\303"
}
}
is_entrypoint: false
name: "register_tm_clones"
}
funcs {
ea: 4195472
blocks {
ea: 4195472
instructions {
ea: 4195472
bytes: "\200=\231\013 \000\000"
xrefs {
target_type: DataTarget
operand_type: MemoryOperand
location: Internal
ea: 6295600
}
}
instructions {
ea: 4195479
bytes: "u\027"
}
successor_eas: 4195504
successor_eas: 4195481
}
blocks {
ea: 4195481
instructions {
ea: 4195481
bytes: "U"
}
instructions {
ea: 4195482
bytes: "H\211\345"
}
instructions {
ea: 4195485
bytes: "\350~\377\377\377"
xrefs {
target_type: DataTarget
operand_type: ControlFlowOperand
location: Internal
ea: 4195360
name: "deregister_tm_clones"
}
}
successor_eas: 4195490
}
blocks {
ea: 4195490
instructions {
ea: 4195490
bytes: "\306\005\207\013 \000\001"
xrefs {
target_type: DataTarget
operand_type: MemoryOperand
location: Internal
ea: 6295600
}
}
instructions {
ea: 4195497
bytes: "]"
}
instructions {
ea: 4195498
bytes: "\303"
}
}
blocks {
ea: 4195504
instructions {
ea: 4195504
bytes: "\363\303"
}
}
is_entrypoint: false
name: "__do_global_dtors_aux"
}
funcs {
ea: 4195520
blocks {
ea: 4195520
instructions {
ea: 4195520
bytes: "U"
}
instructions {
ea: 4195521
bytes: "H\211\345"
}
instructions {
ea: 4195524
bytes: "]"
}
instructions {
ea: 4195525
bytes: "\353\211"
xrefs {
target_type: CodeTarget
operand_type: ControlFlowOperand
location: Internal
ea: 4195408
name: "register_tm_clones"
}
}
successor_eas: 4195408
}
blocks {
ea: 4195408
instructions {
ea: 4195408
bytes: "\2760\020`\000"
xrefs {
target_type: DataTarget
operand_type: ImmediateOperand
location: Internal
ea: 6295600
}
}
instructions {
ea: 4195413
bytes: "U"
}
instructions {
ea: 4195414
bytes: "H\201\3560\020`\000"
xrefs {
target_type: DataTarget
operand_type: ImmediateOperand
location: Internal
ea: 6295600
}
}
instructions {
ea: 4195421
bytes: "H\211\345"
}
instructions {
ea: 4195424
bytes: "H\301\376\003"
}
instructions {
ea: 4195428
bytes: "H\211\360"
}
instructions {
ea: 4195431
bytes: "H\301\350?"
}
instructions {
ea: 4195435
bytes: "H\001\306"
}
instructions {
ea: 4195438
bytes: "H\321\376"
}
instructions {
ea: 4195441
bytes: "t\025"
}
successor_eas: 4195464
successor_eas: 4195443
}
blocks {
ea: 4195443
instructions {
ea: 4195443
bytes: "\270\000\000\000\000"
}
instructions {
ea: 4195448
bytes: "H\205\300"
}
instructions {
ea: 4195451
bytes: "t\013"
}
successor_eas: 4195464
successor_eas: 4195453
}
blocks {
ea: 4195453
instructions {
ea: 4195453
bytes: "]"
}
instructions {
ea: 4195454
bytes: "\2770\020`\000"
xrefs {
target_type: DataTarget
operand_type: ImmediateOperand
location: Internal
ea: 6295600
}
}
instructions {
ea: 4195459
bytes: "\377\340"
}
}
blocks {
ea: 4195464
instructions {
ea: 4195464
bytes: "]"
}
instructions {
ea: 4195465
bytes: "\303"
}
}
is_entrypoint: false
name: "frame_dummy"
}
funcs {
ea: 4195536
blocks {
ea: 4195536
instructions {
ea: 4195536
bytes: "U"
}
instructions {
ea: 4195537
bytes: "H\211\345"
}
instructions {
ea: 4195540
bytes: "H\203\354\020"
}
instructions {
ea: 4195544
bytes: "H\277\204\005@\000\000\000\000\000"
xrefs {
target_type: DataTarget
operand_type: ImmediateOperand
location: Internal
ea: 4195716
}
}
instructions {
ea: 4195554
bytes: "\307E\374\000\000\000\000"
}
instructions {
ea: 4195561
bytes: "\260\000"
}
instructions {
ea: 4195563
bytes: "\350\340\376\377\377"
xrefs {
target_type: DataTarget
operand_type: ControlFlowOperand
location: External
ea: 6296664
name: "printf"
}
}
successor_eas: 4195568
}
blocks {
ea: 4195568
instructions {
ea: 4195568
bytes: "1\311"
}
instructions {
ea: 4195570
bytes: "\211E\370"
}
instructions {
ea: 4195573
bytes: "\211\310"
}
instructions {
ea: 4195575
bytes: "H\203\304\020"
}
instructions {
ea: 4195579
bytes: "]"
}
instructions {
ea: 4195580
bytes: "\303"
}
}
is_entrypoint: true
name: "main"
}
funcs {
ea: 4195584
blocks {
ea: 4195584
instructions {
ea: 4195584
bytes: "AW"
}
instructions {
ea: 4195586
bytes: "AV"
}
instructions {
ea: 4195588
bytes: "I\211\327"
}
instructions {
ea: 4195591
bytes: "AU"
}
instructions {
ea: 4195593
bytes: "AT"
}
instructions {
ea: 4195595
bytes: "L\215%\376\010 \000"
xrefs {
target_type: DataTarget
operand_type: MemoryOperand
location: Internal
ea: 6295056
}
}
instructions {
ea: 4195602
bytes: "U"
}
instructions {
ea: 4195603
bytes: "H\215-\376\010 \000"
xrefs {
target_type: DataTarget
operand_type: MemoryOperand
location: Internal
ea: 6295064
}
}
instructions {
ea: 4195610
bytes: "S"
}
instructions {
ea: 4195611
bytes: "A\211\375"
}
instructions {
ea: 4195614
bytes: "I\211\366"
}
instructions {
ea: 4195617
bytes: "L)\345"
}
instructions {
ea: 4195620
bytes: "H\203\354\010"
}
instructions {
ea: 4195624
bytes: "H\301\375\003"
}
instructions {
ea: 4195628
bytes: "\350w\376\377\377"
xrefs {
target_type: DataTarget
operand_type: ControlFlowOperand
location: Internal
ea: 4195240
name: "_init"
}
}
successor_eas: 4195633
}
blocks {
ea: 4195633
instructions {
ea: 4195633
bytes: "H\205\355"
}
instructions {
ea: 4195636
bytes: "t "
}
successor_eas: 4195670
successor_eas: 4195638
}
blocks {
ea: 4195638
instructions {
ea: 4195638
bytes: "1\333"
}
instructions {
ea: 4195640
bytes: "\017\037\204\000\000\000\000\000"
}
successor_eas: 4195648
}
blocks {
ea: 4195648
instructions {
ea: 4195648
bytes: "L\211\372"
}
instructions {
ea: 4195651
bytes: "L\211\366"
}
instructions {
ea: 4195654
bytes: "D\211\357"
}
instructions {
ea: 4195657
bytes: "A\377\024\334"
}
successor_eas: 4195661
}
blocks {
ea: 4195661
instructions {
ea: 4195661
bytes: "H\203\303\001"
}
instructions {
ea: 4195665
bytes: "H9\335"
}
instructions {
ea: 4195668
bytes: "u\352"
}
successor_eas: 4195648
successor_eas: 4195670
}
blocks {
ea: 4195670
instructions {
ea: 4195670
bytes: "H\203\304\010"
}
instructions {
ea: 4195674
bytes: "["
}
instructions {
ea: 4195675
bytes: "]"
}
instructions {
ea: 4195676
bytes: "A\\"
}
instructions {
ea: 4195678
bytes: "A]"
}
instructions {
ea: 4195680
bytes: "A^"
}
instructions {
ea: 4195682
bytes: "A_"
}
instructions {
ea: 4195684
bytes: "\303"
}
}
is_entrypoint: false
name: "__libc_csu_init"
}
funcs {
ea: 4195696
blocks {
ea: 4195696
instructions {
ea: 4195696
bytes: "\363\303"
}
}
is_entrypoint: false
name: "__libc_csu_fini"
}
funcs {
ea: 4195700
blocks {
ea: 4195700
instructions {
ea: 4195700
bytes: "H\203\354\010"
}
instructions {
ea: 4195704
bytes: "H\203\304\010"
}
instructions {
ea: 4195708
bytes: "\303"
}
}
is_entrypoint: false
name: "_fini"
}
segments {
ea: 4195792
data: "\024\000\000\000\000\000\000\000\001zR\000\001x\020\001\033\014\007\010\220\001\007\020\020\000\000\000\034\000\000\000\360\375\377\377+\000\000\000\000\000\000\000\024\000\000\000\000\000\000\000\001zR\000\001x\020\001\033\014\007\010\220\001\000\000\020\000\000\000\034\000\000\000\364\375\377\377\002\000\000\000\000\000\000\000$\000\000\0000\000\000\000\220\375\377\377 \000\000\000\000\016\020F\016\030J\017\013w\010\200\000?\032;*3$\"\000\000\000\000\034\000\000\000X\000\000\000x\376\377\377-\000\000\000\000A\016\020\206\002C\r\006\000\000\000\000\000\000\000D\000\000\000x\000\000\000\210\376\377\377e\000\000\000\000B\016\020\217\002B\016\030\216\003E\016 \215\004B\016(\214\005H\0160\206\006H\0168\203\007M\016@r\0168A\0160A\016(B\016 B\016\030B\016\020B\016\010\000\020\000\000\000\300\000\000\000\260\376\377\377\002\000\000\000\000\000\000\000\000\000\000\000"
read_only: true
is_external: false
name: ".eh_frame"
is_exported: false
is_thread_local: false
}
segments {
ea: 6295056
data: "\300\004@\000\000\000\000\000\220\004@\000\000\000\000\000"
read_only: false
is_external: false
name: ".init_array"
is_exported: false
is_thread_local: false
xrefs {
ea: 6295064
width: 8
target_ea: 4195472
target_name: "__do_global_dtors_aux"
target_is_code: true
target_fixup_kind: Absolute
}
xrefs {
ea: 6295056
width: 8
target_ea: 4195520
target_name: "frame_dummy"
target_is_code: true
target_fixup_kind: Absolute
}
}
segments {
ea: 6295536
data: "`\024`\000\000\000\000\000h\024`\000\000\000\000\000"
read_only: false
is_external: false
name: ".got"
is_exported: false
is_thread_local: false
xrefs {
ea: 6295536
width: 8
target_ea: 6296672
target_name: "__libc_start_main"
target_is_code: true
target_fixup_kind: Absolute
}
xrefs {
ea: 6295544
width: 8
target_ea: 6296680
target_name: "__gmon_start__"
target_is_code: true
target_fixup_kind: Absolute
}
}
segments {
ea: 6295552
data: " \016`\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000X\024`\000\000\000\000\000"
read_only: false
is_external: false
name: ".got.plt"
is_exported: false
is_thread_local: false
xrefs {
ea: 6295576
width: 8
target_ea: 6296664
target_name: "printf"
target_is_code: false
target_fixup_kind: Absolute
}
}
segments {
ea: 6295584
data: "\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000"
read_only: false
is_external: false
name: ".data"
is_exported: false
is_thread_local: false
}
segments {
ea: 6295600
data: "\000\000\000\000\000\000\000\000"
read_only: false
is_external: false
name: ".bss"
is_exported: false
is_thread_local: false
}
segments {
ea: 4194872
data: "/lib64/ld-linux-x86-64.so.2\000"
read_only: true
is_external: false
name: ".interp"
is_exported: false
is_thread_local: false
}
segments {
ea: 4194900
data: "\004\000\000\000\020\000\000\000\001\000\000\000GNU\000\000\000\000\000\003\000\000\000\002\000\000\000\000\000\000\000"
read_only: true
is_external: false
name: ".note.ABI-tag"
is_exported: false
is_thread_local: false
}
segments {
ea: 4195128
data: "\000\000\002\000\002\000\000\000"
read_only: true
is_external: false
name: ".gnu.version"
is_exported: false
is_thread_local: false
}
segments {
ea: 4195240
data: "H\203\354\010H\213\005E\014 \000H\205\300t\002\377\320H\203\304\010\303"
read_only: false
is_external: false
name: ".init"
is_exported: false
is_thread_local: false
}
segments {
ea: 4195264
data: "\3775B\014 \000\377%D\014 \000\017\037@\000\377%B\014 \000h\000\000\000\000\351\340\377\377\377"
read_only: false
is_external: false
name: ".plt"
is_exported: false
is_thread_local: false
}
segments {
ea: 4195296
data: "1\355I\211\321^H\211\342H\203\344\360PTI\307\300p\005@\000H\307\301\000\005@\000H\307\307\320\004@\000\377\025\346\013 \000\364\017\037D\000\000\363\303f.\017\037\204\000\000\000\000\000\017\037@\000U\2700\020`\000H=0\020`\000H\211\345t\027\270\000\000\000\000H\205\300t\r]\2770\020`\000\377\340\017\037D\000\000]\303f\017\037D\000\000\2760\020`\000UH\201\3560\020`\000H\211\345H\301\376\003H\211\360H\301\350?H\001\306H\321\376t\025\270\000\000\000\000H\205\300t\013]\2770\020`\000\377\340\017\037\000]\303f\017\037D\000\000\200=\231\013 \000\000u\027UH\211\345\350~\377\377\377\306\005\207\013 \000\001]\303\017\037D\000\000\363\303\017\037@\000f.\017\037\204\000\000\000\000\000UH\211\345]\353\211f\017\037\204\000\000\000\000\000UH\211\345H\203\354\020H\277\204\005@\000\000\000\000\000\307E\374\000\000\000\000\260\000\350\340\376\377\3771\311\211E\370\211\310H\203\304\020]\303\017\037\000AWAVI\211\327AUATL\215%\376\010 \000UH\215-\376\010 \000SA\211\375I\211\366L)\345H\203\354\010H\301\375\003\350w\376\377\377H\205\355t 1\333\017\037\204\000\000\000\000\000L\211\372L\211\366D\211\357A\377\024\334H\203\303\001H9\335u\352H\203\304\010[]A\\A]A^A_\303\220f.\017\037\204\000\000\000\000\000\363\303"
read_only: false
is_external: false
name: ".text"
is_exported: false
is_thread_local: false
}
segments {
ea: 4195136
data: "\001\000\001\000\001\000\000\000\020\000\000\000\000\000\000\000u\032i\t\000\000\002\000$\000\000\000\000\000\000\000"
read_only: true
is_external: false
name: ".gnu.version_r"
is_exported: false
is_thread_local: false
}
segments {
ea: 4195168
data: "\360\017`\000\000\000\000\000\006\000\000\000\002\000\000\000\000\000\000\000\000\000\000\000\370\017`\000\000\000\000\000\006\000\000\000\003\000\000\000\000\000\000\000\000\000\000\000"
read_only: true
is_external: false
name: ".rela.dyn"
is_exported: false
is_thread_local: false
}
segments {
ea: 4195216
data: "\030\020`\000\000\000\000\000\007\000\000\000\001\000\000\000\000\000\000\000\000\000\000\000"
read_only: true
is_external: false
name: ".rela.plt"
is_exported: false
is_thread_local: false
}
segments {
ea: 4194936
data: "\001\000\000\000\001\000\000\000\001\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000"
read_only: true
is_external: false
name: ".gnu.hash"
is_exported: false
is_thread_local: false
}
segments {
ea: 4195700
data: "H\203\354\010H\203\304\010\303"
read_only: false
is_external: false
name: ".fini"
is_exported: false
is_thread_local: false
}
segments {
ea: 4195712
data: "\001\000\002\000Hello World\n\000"
read_only: true
is_external: false
name: ".rodata"
is_exported: false
is_thread_local: false
}
segments {
ea: 4195732
data: "\001\033\003;8\000\000\000\006\000\000\000,\376\377\377\224\000\000\000L\376\377\377T\000\000\000|\376\377\377\200\000\000\000<\377\377\377\274\000\000\000l\377\377\377\334\000\000\000\334\377\377\377$\001\000\000"
read_only: true
is_external: false
name: ".eh_frame_hdr"
is_exported: false
is_thread_local: false
}
external_funcs {
name: "printf"
ea: 4195280
cc: CallerCleanup
has_return: true
no_return: false
argument_count: 0
is_weak: false
}
external_funcs {
name: "printf"
ea: 6296664
cc: CallerCleanup
has_return: true
no_return: false
argument_count: 0
is_weak: false
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment