From ecdf88cb98f53f2854734a79e5885f78ecab09ec Mon Sep 17 00:00:00 2001 From: GentleCold <1952173800@qq.com> Date: Wed, 21 Sep 2022 13:20:44 +0800 Subject: [PATCH] feat: finish Bomb Lab --- README.md | 1 + labs/bomb_lab/README | 452 +++++++++++ labs/bomb_lab/answer | 6 + labs/bomb_lab/bomb | Bin 0 -> 26406 bytes labs/bomb_lab/bomb.c | 115 +++ labs/bomb_lab/bomb.s | 1741 +++++++++++++++++++++++++++++++++++++++++++ labs/bomb_lab/solve_note.md | 78 ++ labs/data_lab/bits.c | 1 + quiz/test_quiz.c | 1 + 9 files changed, 2395 insertions(+) create mode 100644 labs/bomb_lab/README create mode 100644 labs/bomb_lab/answer create mode 100644 labs/bomb_lab/bomb create mode 100644 labs/bomb_lab/bomb.c create mode 100644 labs/bomb_lab/bomb.s create mode 100644 labs/bomb_lab/solve_note.md diff --git a/README.md b/README.md index e98d836..9e00d40 100644 --- a/README.md +++ b/README.md @@ -10,6 +10,7 @@ 各 lab 得分 * Data Lab - 62 / 62 * 项目目录下运行 ```./labs/data_lab/driver.pl -u GentleCold``` +* Bomb Lab - 答案见 bomb_lab/answer 注： * 本人运行环境: WINDOWS10 - WSL2 diff --git a/labs/bomb_lab/README b/labs/bomb_lab/README new file mode 100644 index 0000000..c8e7e7f --- /dev/null +++ b/labs/bomb_lab/README @@ -0,0 +1,452 @@ +####################################################### +# CS:APP Bomb Lab +# Directions to Instructors +# +# Copyright (c) 2003-2016, R. Bryant and D. O'Hallaron +# +####################################################### + +This directory contains the files that you will use to build and run +the CS:APP Bomb Lab. The Bomb Lab teaches students principles of +machine-level programs, as well as general debugger and reverse +engineering skills. + +*********** +1. Overview +*********** + +---- +1.1. Binary Bombs +---- +A "binary bomb" is a Linux executable C program that consists of six +"phases." Each phase expects the student to enter a particular string +on stdin. If the student enters the expected string, then that phase +is "defused." Otherwise the bomb "explodes" by printing "BOOM!!!". +The goal for the students is to defuse as many phases as possible. + +---- +1.2. Solving Binary Bombs +---- +In order to defuse the bomb, students must use a debugger, typically +gdb or ddd, to disassemble the binary and single-step through the +machine code in each phase. The idea is to understand what each +assembly statement does, and then use this knowledge to infer the +defusing string. Students earn points for defusing phases, and they +lose points (configurable by the instructor, but typically 1/2 point) +for each explosion. Thus, they quickly learn to set breakpoints before +each phase and the function that explodes the bomb. It's a great +lesson and forces them to learn to use a debugger. + +---- +1.3. Autograding Service +---- +We have created a stand-alone user-level autograding service that +handles all aspects of the Bomb Lab for you: Students download their +bombs from a server. As the students work on their bombs, each +explosion and defusion is streamed back to the server, where the +current results for each bomb are displayed on a Web "scoreboard." +There are no explicit handins and the lab is self-grading. + +The autograding service consists of four user-level programs that run +in the main ./bomblab directory: + +- Request Server (bomblab-requestd.pl). Students download their bombs +and display the scoreboard by pointing a browser at a simple HTTP +server called the "request server." The request server builds the +bomb, archives it in a tar file, and then uploads the resulting tar +file back to the browser, where it can be saved on disk and +untarred. The request server also creates a copy of the bomb and its +solution for the instructor. + +- Result Server (bomblab-resultd.pl). Each time a student defuses a +bomb phase or causes an explosion, the bomb sends a short HTTP +message, called an "autoresult string," to an HTTP "result server," +which simply appends the autoresult string to a "scoreboard log file." + +- Report Daemon (bomblab-reportd.pl). The "report daemon" periodically +scans the scoreboard log file. The report daemon finds the most recent +defusing string submitted by each student for each phase, and +validates these strings by applying them to a local copy of the +student's bomb. It then updates the HTML scoreboard that summarizes +the current number of explosions and defusions for each bomb, rank +ordered by the total number of accrued points. + +- Main daemon (bomblab.pl). The "main daemon" starts and nannies the +request server, result server, and report deamon, ensuring that +exactly one of these processes (and itself) is running at any point in +time. If one of these processes dies for some reason, the main daemon +detects this and automatically restarts it. The main daemon is the +only program you actually need to run. + +******** +2. Files +******** +The ./bomblab directory contains the following files: + +Makefile - For starting/stopping the lab and cleaning files +bomblab.pl* - Main daemon that nannies the other servers & daemons +Bomblab.pm - Bomblab configuration file +bomblab-reportd.pl* - Report daemon that continuously updates scoreboard +bomblab-requestd.pl* - Request server that serves bombs to students +bomblab-resultd.pl* - Result server that gets autoresult strings from bombs +bomblab-scoreboard.html - Real-time Web scoreboard +bomblab-update.pl* - Helper to bomblab-reportd.pl that updates scoreboard +bombs/ - Contains the bombs sent to each student +log-status.txt - Status log with msgs from various servers and daemons +log.txt - Scoreboard log of autoresults received from bombs +makebomb.pl* - Helper script that builds a bomb +scores.txt - Summarizes current scoreboard scores for each student +src/ - The bomb source files +writeup/ - Sample Latex Bomb Lab writeup + +******************* +3. Bomb Terminology +******************* + +LabID: Each instance (offering) of the lab is identified by a unique +name, e.g., "f12" or "s13", that the instructor chooses. Explosion and +diffusions from bombs whose LabIDs are different from the current +LabID are ignored. The LabID must not have any spaces. + +BombID: Each bomb in a given instance of the lab has a unique +non-negative integer called the "bombID." + +Notifying Bomb: A bomb can be compiled with a NOTIFY option that +causes the bomb to send a message each time the student explodes or +defuses a phase. Such bombs are called "notifying bombs." + +Quiet Bomb: If compiled with the NONOTIFY option, then the bomb +doesn't send any messages when it explodes or is defused. Such bombs +are called "quiet bombs." + +We will also find it helpful to distinguish between custom and +generic bombs: + +Custom Bomb: A "custom bomb" has a BombID > 0, is associated with a +particular student, and can be either notifying or quiet. Custom +notifying bombs are constrained to run on a specific set of Linux +hosts determined by the instructor. On the other hand, custom quiet +bombs can run on any Linux host. + +Generic Bomb: A "generic bomb" has a BombID = 0, isn't associated with +any particular student, is quiet, and hence can run on any host. + +************************ +4. Offering the Bomb Lab +************************ +There are two basic flavors of Bomb Lab: In the "online" version, the +instructor uses the autograding service to handout a custom notifying +bomb to each student on demand, and to automatically track their +progress on the realtime scoreboard. In the "offline" version, the +instructor builds, hands out, and grades the student bombs manually, +without using the autograding service. + +While both version give the students a rich experience, we recommend +the online version. It is clearly the most compelling and fun for the +students, and the easiest for the instructor to grade. However, it +requires that you keep the autograding service running non-stop, +because handouts, grading, and reporting occur continuously for the +duration of the lab. We've made it very easy to run the service, but +some instructors may be uncomfortable with this requirement and will +opt instead for the offline version. + +Here are the directions for offering both versions of the lab. + +--- +4.1. Create a Bomb Lab Directory +--- +Identify the generic Linux machine ($SERVER_NAME) where you will +create the Bomb Lab directory (./bomblab) and, if you are offering the +online version, run the autograding service. You'll only need to have +a user account on this machine. You don't need root access. + +Each offering of the Bomb Lab starts with a clean new ./bomblab +directory on $SERVER_NAME. For example: + + linux> tar xvf bomblab.tar + linux> cd bomblab + linux> make cleanallfiles + +--- +4.2 Configure the Bomb Lab +--- +Configure the Bomb Lab by editing the following file: + +./Bomblab.pm - This is the main configuration file. You will only need +to modify or inspect a few variables in Section 1 of this file. Each +variable is preceded by a descriptive comment. If you are offering the +offline version, you can ignore most of these settings. + +If you are offering the online version, you will also need to edit the +following file: + +./src/config.h - This file lists the domain names of the hosts that +notifying bombs are allowed to run on. Make sure you update this +correctly, else you and your students won't be able to run your bombs. + +---- +4.3. Update the Lab Writeup +--- + +Once you have updated the configuration files, modify the Latex lab +writeup in ./writeup/bomblab.tex for your environment. Then type the +following in the ./writeup directory: + + unix> make clean + unix> make + +This will create ps and pdf versions of the writeup + +--- +4.4. Running the Online Bomb Lab +--- + +------ +4.4.1. Short Version +------ +From the ./bomblab directory: + +(1) Reset the Bomb Lab from scratch by typing + linux> make cleanallfiles + +(2) Start the autograding service by typing + linux> make start + +(3) Stop the autograding service by typing + linux> make stop + +You can start and stop the autograding service as often as you like +without losing any information. When in doubt "make stop; make start" +will get everything in a stable state. + +However, resetting the lab deletes all old bombs, status logs, and the +scoreboard log. Do this only during debugging, or the very first time +you start the lab for your students. + +Students request bombs by pointing their browsers at + http://$SERVER_NAME:$REQUESTD_PORT/ + +Students view the scoreboard by pointing their browsers at + http://$SERVER_NAME:$REQUESTD_PORT/scoreboard + +------ +4.4.2. Long Version +------ + +(1) Resetting the Bomb Lab. "make stop" ensures that there are no +servers running. "make cleanallfiles" resets the lab from scratch, +deleting all data specific to a particular instance of the lab, such +as the status log, all bombs created by the request server, and the +scoreboard log. Do this when you're ready for the lab to go "live" to +the students. + +Resetting is also useful while you're preparing the lab. Before the +lab goes live, you'll want to request a few bombs for yourself, run +them, defuse a few phases, explode a few phases, and make sure that +the results are displayed properly on the scoreboard. If there is a +problem (say because you forgot to update the list of machines the +bombs are allowed to run in src/config.h) you can fix the +configuration, reset the lab, and then request and run more test +bombs. + +CAUTION: If you reset the lab after it's live, you'll lose all your +records of the students bombs and their solutions. You won't be able +to validate the students handins. And your students will have to get +new bombs and start over. + +(2) Starting the Bomb Lab. "make start" runs bomblab.pl, the main +daemon that starts and nannies the other programs in the service, +checking their status every few seconds and restarting them if +necessary: + +(3) Stopping the Bomb Lab. "make stop" kills all of the running +servers. You can start and stop the autograding service as often as +you like without losing any information. When in doubt "make stop; +make start" will get everything in a stable state. + +Request Server: The request server is a simple special-purpose HTTP +server that (1) builds and delivers custom bombs to student browsers +on demand, and (2) displays the current state of the real-time +scoreboard. + +A student requests a bomb from the request daemon in two +steps: First, the student points their favorite browser at + + http://$SERVER_NAME:$REQUESTD_PORT/ + +For example, http://foo.cs.cmu.edu:15213/. The request server +responds by sending an HTML form back to the browser. Next, the +student fills in this form with their user name and email address, and +then submits the form. The request server parses the form, builds and +tars up a notifying custom bomb with bombID=n, and delivers the tar +file to the browser. The student then saves the tar file to disk. When +the student untars this file, it creates a directory (./bomb) with +the following four files: + + bomb* Notifying custom bomb executable + bomb.c Source code for the main bomb routine + ID Identifies the student associated with this bomb + README Lists bomb number, student, and email address + + +The request server also creates a directory (bomblab/bombs/bomb) +that contains the following files: + + bomb* Custom bomb executable + bomb.c Source code for main routine + bomb-quiet* A quiet version of bomb used for autograding + ID Identifies the user name assigned to this bomb + phases.c C source code for the bomb phases + README Lists bombID, user name, and email address + solution.txt The solution for this bomb + + +Result Server: Each time a student defuses a phase or explodes their +bomb, the bomb sends an HTTP message (called an autoresult string) to +the result server, which then appends the message to the scoreboard +log. Each message contains a BombID, a phase, and an indication of the +event that occurred. If the event was a defusion, the message also +contains the "defusing string" that the student typed to defuse the +phase. + +Report Daemon: The report daemon periodically scans the scoreboard log +and updates the Web scoreboard. For each bomb, it tallies the number +of explosions, the last defused phase, validates each last defused +phase using a quiet copy of the bomb, and computes a score for each +student in a tab delimited text file called "scores.txt." The update +frequency is a configuration variable in Bomblab.pm. + +Instructors and students view the scoreboard by pointing their +browsers at: + + http://$SERVER_NAME:$REQUESTD_PORT/scoreboard + +------ +4.4.3. Grading the Online Bomb Lab +------ +The online Bomb Lab is self-grading. At any point in time, the +tab-delimited file (./bomblab/scores.txt) contains the most recent +scores for each student. This file is created by the report daemon +each time it generates a new scoreboard. + +------ +4.4.4. Additional Notes on the Online Bomb Lab +------ +* Since the request server and report daemon both need to execute +bombs, you must include $SERVER_NAME in the list of legal machines in +your bomblab/src/config.h file. + +* All of the servers and daemons are stateless, so you can stop ("make +stop") and start ("make start") the lab as many times as you like +without any ill effects. If you accidentally kill one of the daemons, +or you modify a daemon, or the daemon dies for some reason, then use +"make stop" to clean up, and then restart with "make start". If your +Linux box crashes or reboots, simply restart the daemons with "make +start". + +* Information and error messages from the servers are appended to the +"status log" in bomblab/log-status.txt. Servers run quietly, so they +can be started from initrc scripts at boot time. + +* See src/README for more information about the anatomy of bombs and +how they are constructed. You don't need to understand any of this to +offer the lab. It's provided only for completeness. + +* Before going live with the students, we like to check everything out +by running some tests. We do this by typing + + linux> make cleanallfiles + linux> make start + +Then we request a bomb for ourselves by pointing a Web browser at + + http://$SERVER_NAME:$REQUESTD_PORT + +After saving our bomb to disk, we untar it, copy it to a host in the +approved list in src/config.h, and then explode and defuse it a couple +of times to make sure that the explosions and diffusion are properly +recorded on the scoreboard, which we check at + + http://$SERVER_NAME:$REQUESTD_PORT/scoreboard + +Once we're satisfied that everything is OK, we stop the lab + + linux> make stop + +and then go live: + + linux> make cleanallfiles + linux> make start + +Once we go live, we type "make stop" and "make start" as often as we +need to, but we are careful never to type "make cleanallfiles" again. + +---- +4.5. Running the Offline Bomb Lab +---- +In this version of the lab, you build your own quiet bombs manually +and then hand them out to the students. The students work on defusing +their bombs offline (i.e., independently of any autograding service) +and then handin their solution files to you, each of which you grade +manually. + +You can use the makebomb.pl script to build your own bombs +manually. The makebomb.pl script also generates the bomb's solution. +Type "./makebomb.pl -h" to see its arguments. + +Option 1: The simplest approach for offering the offline Bomb Lab is +to build a single generic bomb that every student attempts to defuse: + + linux> ./makebomb.pl -s ./src -b ./bombs + +This will create a generic bomb and some other files in ./bombs/bomb0: + + bomb* Generic bomb executable (handout to students) + bomb.c Source code for main routine (handout to students) + bomb-quiet* Ignore this + ID Ignore this + phases.c C source code for the bomb phases + README Ignore this + solution.txt The solution for this bomb + +You will handout only two of these files to the students: ./bomb and ./bomb.c + +The students will handin their solution files, which you can validate +by feeding to the bomb: + + linux> cd bombs/bomb0 + linux> ./bomb < student_solution.txt + +This option is easy for the instructor, but we don't recommend it +because it is too easy for the students to cheat. + +Option 2. The other option for offering an offline lab is to use the +makebomb.pl script to build a unique quiet custom bomb for each +student: + + linux> ./makebomb.pl -i -s ./src -b ./bombs -l bomblab -u -v + +This will create a quiet custom bomb in ./bombs/bomb for the +student whose email address is and whose user name is : + + bomb* Custom bomb executable (handout to student) + bomb.c Source code for main routine (handout to student) + bomb-quiet* Ignore this + ID Identifies the student associated with this bomb + phases.c C source code for the bomb phases + README Lists bomb number, student, and email address + solution.txt The solution for this bomb + +You will handout four of these files to the student: bomb, bomb.c, ID, +and README. + +Each student will hand in their solution file, which you can validate +by hand by running their custom bomb against their solution: + + linux> cd ./bombs/bomb + linux> ./bomb < student_n_solution.txt + +The source code for the different phase variants is in ./src/phases/. + + + diff --git a/labs/bomb_lab/answer b/labs/bomb_lab/answer new file mode 100644 index 0000000..e60bf8b --- /dev/null +++ b/labs/bomb_lab/answer @@ -0,0 +1,6 @@ +Border relations with Canada have never been better. +1 2 4 8 16 32 +1 311 +7 0 +9?>567 +4 3 2 1 6 5 \ No newline at end of file diff --git a/labs/bomb_lab/bomb b/labs/bomb_lab/bomb new file mode 100644 index 0000000000000000000000000000000000000000..f59281d2bdc4eb7fd4e4e9b6da6a7a424b497bed GIT binary patch literal 26406 zcmeHweSB2K`R|=-LENor~5D;`XBygeuA_T=EZZ^A{WM#7(_k|Zr z5nbTA#wfMg+Wx#P_2+G^?QLoGdLuszK@hN7jkdM?YG3$SrJF_+MJUn zpSJh&x&PcxN3+j7-+7*yXWr+WnKRr`-?-eQC`>vNyP6TVx6r{M{g<&`jk5x)VWXLY z+1NCe2P7AN4jw{O_epwQL@lXB$eBTN@K)T5%xY%iax4W$`5TWvY6BEL z_Qc{Bp1-VO!7DTUGn!i7-!Z4(Q9xmr;g90r`BGH2Q?Z%|yBvSyW?y#irETln)wI6jal&jkp(Y6#zwOLL>Bq6S>!Lt zBL5`tv1~GPENp>~G1)J-!%w)Df&X6MO&K_Ix!OBJL02T|4o6)shVJR1-nf88LY_^& zC~IpA#3CIm5)FI0wn4fp><>oUT%L|i%(vB#@KBd82;2|(MT=aKh{qjlW1dhj=<`Hb z#NQrt2Uu4u8i5QF@oXYhSDV`(K%8EGkYbL80<5jw$7Ousa4_Twggox3KNMtPpW6$~ zHbb&d3&o-UJAIv7T1k~5E?;mnC4lIdJKzp?64nulL|eB7-JL#N z8#&_2o{N ztFq6hdNQT{GpBqymcz$4^5?=QF%w2H$PIo*`_{bOjPTZr~U*d)&9GN<69 zll_>Xa@ci(AJ4_)-IE}?J}bAu;$s=S3$K6i1S{v+EN&7m}wN+;VH;c|SXFxk!s zpGtsq6)oI13cn&r&RYz)m^wIaHQ+S1OIK>Z}13t-s?>FEy$4l31z$Z%(w9kOk*eKlz z13pE9p#28iIN59QcPzVS{<4vJ~u)DT?RIO3_v z4)k+ApLlAj1AUw~5l>BYU_a+SwSmteejn#QAfB4!z+TS(g?MU;13NkYCh^n+2f8@_ zTjHtd4YY9nHR7qs4K#87=fqP}8*p&`IpV2_4ODRc0P)nc22{@flz3`V16IyIK|D33 z0mk`9iKiwsaQ1Hi%DzcF4JiYsIR60g)RYGLIe!oF)Px55IDZ%MCB*ON{O!b3lNs2@ z`7rU+R0j5P{#N3ti45%Id@J$PGzPjj|3%`dNer}behu-|6b70&e=YIU1O^=7E6+3} zUcE(2ys5?CI@{FTaJ+BdbO+OpAGUIGeBT%cOa5;Nez*5n8H3Jw>QE#Ieu$)Y_r;uA_jM?nl7mkp@DR23fJfjwioEaqUD)KlC_-Jx5{J z8N<93b_R(gze{1|BJ3s7(f*>EJ)1gMQ1WH!iOi$082lABycIy73WTZ_Fg7q)sP)`z%h7rQw$i~j5Xr0!8;>B8Qmv=ahOlOv z<=`u24&936URW4EuiTNF>_^)1?KaD(ElaxVY?dM0^Ib5h_Z5`H;8ndxVEkZpFU_Na zb9;9anc4d?g-z{!g2GCBR}eThc{k$WIULOGrIo@}b+$s-cpG3CQ%a^-68*E!CJrAS zn5vw3^?XlZ#iCDk6!u&{lstt7rSuI>;QEU``Ep^;ZA$V*fIW3g;pLGvBgZdLMoh6$ zl!v0txk*~$9H24hApTf4(Bz$n2@Q`#3K?wrJ%&(j6BV+mB`$ci?wqn&5Z4lQw$jSJ ztBV|BKP z?BFfHwVv%ZYjQK9K%JH(Lx`bxY8|2(rI*i7H57EISDUA&34>}sMXQe=RW}@Q-r!v4 zZ05D!)Ik0Fbn<%WHzZCwpQZdXCeAp!>sdUh#LwpZee`?)UEpfdCv0D&(G*?T!Iyk5uuccnjeujq2wC-h=Znnt$<=kW=4Ar_f zSmI}tSP})%v|*$3X6HudExgreyN9A*=$^FbgB@eE?mH~Wq~2OC(_702(eXg7$=5`4 zLGy!;iqmprZSn@he1K*!o;&KQn?Iq^=tz%aXlW9KhcbK_8A<%%&{<65$$O!S=7c(- z>>aA1-nr{MdhZ#`7EE4Ak~DK9K0WwAdL-|W5Fa9QA++-v799sEE&iN>PIZ3gVir4h zPMhg7J<;V@i&2kG#!gX&2STuBhp z4q__YI~`^(%Kbh_Z2X~LQ^NJBgs(#^ht3hE03*}$4^g(0Rb)|j?pjh#e>n_dKWdRHK+qqnM8IVoLl~FU;eIVc5_IKhpmCsumwm;-9SA zvHZ~ADEXfvqVC+!rm3u_Nl8pN2aoo!wyCd4J9OohS4P9JAg1wN9@!yx)aL~V!+P&V zB_wI3h1fLD3q0u@Bz-F9*e->n88ycVk5P1qv%CkQl(wdgt{s(q@uhb{A}@AJBL)ns zVS1W86D_H$28p~61LNn-vC4zff$0Nk8P)(Oi^~t4r!M#2hbRk`GV?ZkdU1`xq;_aM zVXp$CQMSW4%KnbP_|dI$2BsQ(hQS@!ibM`lyGA#CU6rN(EEPAQ$p_$b-e?$`YZ?+C zV_3A6YVl8%;yo{rYT|W(@k)yQJb;M9Q zcfQlHkBZ}SXW}C&BlM|8Tj|Qg@y5i9jonY#_94{JBzD=>1E}mfUT2$w@?dO_5N z1YD`}_;QtAG_}EFi?UwI&cLWVvhls-!gG2T+mwpDjz_*~t?G|ti9GC!gaVs=lvJtK z8}WrV`@*UloQf1?dA(tt)SO7fd2G3z)g}I%yz>LJQJ(JonEEv2wSw|Wo*MGB5n@7T zZo*{dz>;mdt@;^yu+q9Kl8-^T&3X72mbSV?z*cpDrV5&7D=6ksupec!F=hTbZhlY{ z2aH15sN!82IFt>QQnW)ipUQ?Zz{|!LhQTwr!Ts+`ga432c0NbOYl%PVBTM2{eN;)j ztYLwL3I^YhI6(|XRXwmF@j_z)D&SVmKHM<-1uPFXf8Nkjr+i6UN}XeKBxUm&ZnG~E z3q;jORJR%L0NY_{NZ5?`YwbR}DDs9N)o;XyFctY(yRLR+Lo*^-K1=I$t#q!hUAG)d zrsceV@=`e&PdVv%(B?qm&(JbaWac;Lv>zaAc#xw^rpC+NFBI?k+>9}8Kxym=6ewEa z*L9c}ojcE88J*$mar|XhD1Leu zM-V4@od~?UUO_VE;-??9)e^hTL=$b}qQT-_wJ=>vJU^iEiuXiT8MOzoR&L zAAA^zV&n8uP@dOjABnxba`%~Su2jAJ{eH$@Ric_u+UN?rS)n;my--&`zu>LuE~KS5 z|Gii!)FmF{`8dAIRtKZWX+67aO*_fpT{aDrkDk=V9hxYH~wt^aHhAlrHo;9Yfu@=X<_^&;g9nJ->q2)$3wb{WL0Bt{=TCvfyXbj$;A7;U8YYbwe1X`QSYm7J#$?urTDCsZj|%147yUKW5S~P` z!|ft-Txm%BqIlPNELF6`i}bYa7}!XRoZGUFg&4z80vNxe*dvIjZsMrV`2zu8yE~wl zl^P0T((0lXkFvrx3ZDnSRbWo+aEINVD7F6@YUz%!9kpJ|YyH%qto3*41i}@2$LsZF!14Oj zDj*;Ae5eK8I9ZM)X{p_jioH&cT`mMhid`-QDE8rn066t{y}k}OUXNwKv3fg8{4u%x zFS3lkiacw_b8H}d4M2lF)&M!S^d&$}Y6p|yZS;ad-V5*y`~+mMVx~7q z^r{3C{fl_Dcm*Du4sJzahG*O+ZlD>FEfbLqUd^A|=}C2_mMF9}B;I%SzB3&rCO$cE zKeP`9uabp-5bNu~qPF8keWYtmf8f@z`Z?K{@Y+skJ#+t9pkin(>n8#{*@$)V*~Y|n z+j%WuJ3}9K^?WL|Bu&IsRQQNFWtZph`RSjO2?xYGkhX)CIh5$yd_c3Oe zSeTVX7OQfZ8j1zH!7HLF?O&>8k$ko;g28Mtyy}J}{vft2U2Xn=@9K^DthvJ-y&|Fp zW1X#7Ojg-d^*U@7s_h{xgQhXf9cbI)-bV9l*f))>2!*`rmQZ-pG*w+4lmZ)?SR%KEI$Q1PO`(|D;l>(vf!fu9l~hFC;*WMv zt{B_W;rDbR)ceDN!WfBwVXk;%Xv;Lp;1#e{*u)Kq_%IsK0uyyGjkN`~VKS69 z5#3(w;OsMk#s$4c(60#ku%O=-^t*y~y1g+!;taNhqMKW{1w=lPso*A_V{BU^^-veL zhU$SAy6TCB19LrdR4*@=YuGX>@W>oep)9n8VnMGl1H8ge^tCA9Ha{vC3uS*46M|Qz z=Mu?=ed=v7Y$U5*e_I=xO^`PZwJtET_YMAv8v`#NC)Y^-06r!y)S z+NfW###vYIs$IRZRth#yFG1T4QhN@m0oX2Mjj+0K{bp?Px6{KOT5Z&4_j@9C`oA+~ z_jzN?9c=dnBAE9!WrlRRH-$zFz5qo(U4imz&|$)U@6xi! z%z(R<2&NP~1(8n|TdEV4QYo*rSB%LYqo6Z8k5kAp72(Ax(Z1w9G+bI`M(H)Dpe;+Y_T z`C~ok6QEt77ED?6tZ)nHTfwJK8zM_KkFPd4DR4{Uu?&oe8sE-xy*wzy!6WhcAllB=$qXPZu{ zBvXgK-nWK^Xvc&(i>z^zdA?G_*8@C$FW{4J4-N5s<+>v4jR>Rox8v`3z*m5h-X4>) zs5EY_D{|~8Dh2O^9NG66{w_eSo8;<>RMVa!3*pb=FNiw3TF0&1g#53-KM4E=9al}) z7g;FnckuTb@COLzcGeYDn7VmFl!rptUx&K3Qa);ntoNB}i%NUUwMFW^InJV4dvcvc z74f{fqMeHALQw?}XORjCNY;wn>gCxC{X(=2qg|AK0C*Mf>*3eaH?5Y6l%IPM-i2^s zH@za!^AG$-z{?0g`APg);Qs-fR-e+%f#+Ai`+(m{AgsHW%5{$!*2Z&8t-NSc22;8@ zXp5ghzLew<|5{OwmkJyt<*44O0lWqIrGy&mO^v4Njq-al_lcgXDWd~HYg zCFncTDcq2+2Z7sw*Xp?XWoS`+KLoxC_)O%F+G z<(VFNj(Um+*GE_MAHg$w3-?ibAt%E>`rA;5_=imnA~+SNyA!z%?!g;m?oOB-oXUB* zQy41GV)3y762>!3q=2TxU9!A|Q`r{o79MIRuLySKv(<;Z;JgOW^x6!Y9gb?CF!M5R^0cnJYZ~LT_(IxNPrd zMR-$2_$Hxm75M&)@L4jUEL66`EWyl^EkNKi{!X~;FWJOof6EqLo-IJ&1F}PBk!wT- zDUYW_xjYU(b@j7?e+2qGig_(S8G90em?oH2@bn^@#voPj{{dds3CU-=*)ts+S|;d5 zK{Mt4#s8}W{#641|CPXsWy=<;v(~l7g3*{-ZLhIc&aH}Zu5w3ZmA#^RwvIBRV0oiI z=njVvvcNuXZlx|ipCrLES~Baa6MZtGBd_H6<16>2|9l%`E)8Lryp-!{`1=C1TfvT` zXrck!{Hq%JwTxO$M6nD(%WN7|K_q9?bsWr75R2KAI|d{tCl|XMP{`ejFcXdOIX!;z zUQMC*kr%P`K|j}$XQAgCvyw-jjG0aoR{1?3quzw~WZqcC4&3rAki2n9D+sd`6EjJ< zpZt~|6I03=t3`us-ek^{THYe&63(cWOA%Y%6wb`DygQv{cBriQ;W&byp5 z4$CqUQ#qqqeonDX<4luvR>HvImakC+HOgIJ?zX%`Ax`B> zAbTx-(z#aY0rRkhUe)AX$C-VWEyOf(=5fmoVpeiyzhyTus}x#b^jaRHsGGQLeU^JE zWQ{^g-lJ^vZz$;LeEP7dH1Ao;WC4AInfEjDvVtoq_#kE1Qt&?cpKAqdWqFqQB*lxM zkZPFB915pNBaTzWZzHsS=K>Sm_)RzhBeh}DB1Q#+}SW#j$` zqS#synAv`nNAAZ|T=LtL0L4@C5N9cbbjDW^JCmBykMK9)Cty#Galp%%T$?Ei-B>b;lz)FNEX+f^zkDWh6IKB*jI#czPtioUWt7 zlFNmVe2P)(-$W#n$&yL4MA(1nR*W{+%t+If;VIqam!sF~x>cFFThn#%%8HRo>8|`@ zN_SPJE}iDq9nW}6rf&1sQo6Th>YkaNrn@~;cf)Hb-94GQbQ)ZDJl%&gb=^f+nCba_ zG*g#OiyL&G%G7PYHl=$oQ+X`5L?wTUI`Bh-H-x9Ai||Wi8<>C*a3>F5r_``Z zCW{ye{(1_YA}jj}z*80q89Oo82xbv6vTm*=X01_dgJ7vR&!zIz@iIDvKRS;}P5?h8U=)>+01gmfq0-QSna>e0T4$ItRw*kgDKHmJDH^Mc z8)d~HVw%XzMT-lrDrhLdFlb{11y>^+v#Ic6?$0d-it-^sQlm-~b5TJ7lyViYmN9w^ zxeX;X5F0HcL>5wl1teG?1Q7`d7Ai_Z3E^X=v4)azAVo9b!MJQ!u9>VGb;aa{61AXu zGKpDp4VI3j7ail$1u098(y!NY>5^e-6S6tJI;BkPgv*r55|UqEa1*y}VlJyJp^!<5 zyA%{tB@!&X=PqpXmVTucX-%eZyhf6tWY82aOc%X$IQnZQFTu;G%Zz{t5nP^b>k@9{ z)LfonbvP_oL|N8Dr={TBVQ{(;)a7Q_*>HJL;x;2du`yPbQY*Lu29o(R(;<}SMl@p+ z`xAVMa-nDpe))|IK$Y@XBwX$fdIB-8uN)uQyB1W7FYeoevGP_wzP05d_`J2e-Q&4f z1Zz^MuS<%^(3fbF+Ji(H?F)vg>>c#v3_tdB;Ya(WFL5I&*dKxy(-o4E-X*Oue;_*7 zALLsJP(_$7q;Gh`PtnJ^x1UlTh_y0`7L;F zu(Ul2|IGF9w^)|kgslPd<-~M+i~A>%KcxGM$sg1Gqv8JsNo>eb_T3b}1*=s>(Z2-7 zH^HH{HWxlQZdmQ2V{5LiXqe&4Vfr38;=kQTL6Hua+8S%)LZGfzY`int66O1%IQT=~ zLSy@pR>V9K+BfAzTT$MDBLU^!aHyjkd!+Nq{hj65ag3BxNyAef3407NQ3Sl0Tw(*A z@q-G%(6D_tRRA#HZpT;Gu$j!^kS7*)c|w6$Cw;MP{LDEN@KPQl_~6?gq+<^t{-_@t z%E%p=!Q<(~UM)@y>f6B-F+X9bmqvv0&I=(ut0We|$ppPTaBYLSOnypA%r@&z1`cY&Rt!p&TZqLjnC~0hobnTJcN?RC*GSx{;HU(GvuZ3 zxp|ZF2VMMIbC^iqh*RZIW8~KB#`1E2O%#Wy(&Y_}_3}IRt`Le$&u4_C>WofjiOf;y zyEgNqTe8IXckrTD@Pi}FMdvE?X0xE$*l>8GNEHdU#nskHqFruprB09~;^yh3S|{_F zD;A^^990a5Z8wVsP$_7Ypz{Q+7IeO#3-o4yukT}BdPN`-591%S57#3%jyfK>={iBz zUMIaY1Cq;O=ahBdmYh!qNl<#_6Q?dH!Y?A1rxcr|cUuZtE4{|Jn!lYH$=3z&t(0QZ zlfui-sKKwWrdI^?`mofX@P051jlw8Ku1HWQ&JbRDxFH8f_YD8m2(K)Te3p6wxX4;5 zBl8AXxzN8zmf0iQI?>EPaX|v79nyz3=nHo-dk{Us?yPN?i&Ha#!{~0Op5UG9_cA+i zIP}rM?A~ob#HUjXUOWWnb0T!df{}3{j1KjXg79?(qRdXi0kcP`S=({0#gDL%*Bx~; zyRXC5h7%b+SBDq6lG8O@?r_+>P1lhATRjj%?Cws#2T6wzA%1Y+0v7#urY7Cg=xT`Ta z1mz@k?~u;vveHj<2L7N~d@K2_G z9fI(EQ%KtXu*t!NX~j&gLMQxPHhJ||Ndg2}g+HwPQud!PIlwV?LPm&*o*Y)zyqu(d zDMuNjGXNwa#pQn82|WLhllyZzcX9dMf&khZllpQ$YylMtoP+;j4J@dXlXMes+G~@% z+;7_|^jm~pru_nDx5GnaD)r_5-pLGonSN&ecV+0y{lXd{NH1H+k$xfmGWG8RM(vO6 zBiEPj5R?;!CxJAVS^o)y8uj~ye!qCc@1sD2vkJeY4}v%9%lp3elCf~(<;xPCP3;E@ zmVFZ*qyA&l9X#l<>71nYMRiUuYw0Jt4}YXD%YXlL2RO#|3;nkQjs_^6IVH!<8Nri*0CXYwyWtk|G0 z_s5z2AJabxG0LJ$pKcH!XZZ*9e-Bw|ds1KS56gSb`bGK4_9^X`^>7-x#`NWVGpEWC z04L>jZkU%i&D%zOxj&y2`e&u0pi)oL4>R;nRkU!)Qx&>Gi!@wknJTCxpTa|N$^1JO zw(uawLQYu!-_aj}7}+n9)0OZm_1C5l-9xhEB(=aJ{d$Q0`&E&CX1tlQld|X^5&Hiw z#xWUprarBRGBJ{EyGGZTDm$i#AXBz7i~eq>t|0Fr66zPFwN&V5=JRx|u5m6)`qB<9 zOZxv=uj}6}1%&|_EM7DZ*S!$o#Jxi2)@CSVuslB*CUV8z>vjEJF@Vniy9j@>-OBlM zG%(rrbPfHtt3{_zXSBb}^o=^1elx7AF*!0}q-RRqKWGdzBSfx0((#`z_P) zA|~gtbi5ezlEVmbzZtWloOg_YX0$FjpQPjCQu9PQUcyr2zahYkQ;2e0H^8W^3Am54 z#Rze~89N+u95x1;ajHpi%pLw3H9k_yf{ML*4MfT&(9KX2U|GS7sp3eiz-S_dU;3h(O&Q8GW1Uw_< z>y<3HzHUH!wmEndR{qQQ%g2%8IfHP@*S>MOJgxi5eS*J{pOBqh8FpToMSh8hU*01q z?OB~gz7@C?{ZX#FWbSC^o6@bQYT=M9pH6}A&A@LHcvA)*6ZrlNd>im_Sh;78^LKDu zS}{!jjmI;YwTS*J9}E5`mmkAgtqv~yfKd5g0zXiq<6yaaQQ*%CoS#ic$m;_C;Uou_ z<7cwr`-8xj73+9655+lffu9mvZt^_sy8{1M^wTmS|Czvhr|R+WGuQ~D?>a`R_bFL$ zJ8-I(v!XoZxKW)&et8z$mj&O-@iA=ic-_wF!v5XBDc$~zbi09DfoINN^c~7b`TAiN z{J4l;p8u2i`b8Fby3S~%`00WHRoHAKV}Xw(U&iq_JM&dZ;L zgyV^E|8xh3z;d^oE~ea¥asILc66=7|`1Z1BS2EoVLY^*YA}8ay zMaWMP?e;PricKJaTck4jWOu{9|EUzZ_XIEpUNWt0?DJ_WzI*x&LV#n zxO#E2EFbeK)uTLrY!xzAfiuw`B|Z`OxDn!+E#%bE>xCfwY3X7wxbCJ^&Xo87*tnK8(!6pR zRZ%nD3_%;q*tJcUr!67<{%veY(?|K()WKKO5eU*)G_+D^2 zb@{LDRc7r&W`VM{-_3B`-u zfAO`kC`7q?TM0$}Ew_tD#G`TP?LfcFd^mNg0e*XVIuyi~_&k2fARWKxI`i~keg}Ix z2T=^z$~IozJ}f{Nr}H3jFMDQ4+C}xW7a9r- zi%?0l#exgTyhuoNAHMC)tKUU?=PX!N#pn`v7vH}pc@OHZlG+m5lq=v1w&S7&L))j` zBCfzsPb%ZW`{BTaEI1Ew&ciM~-`>|dnSQ-Nsy_J%3lyC@5bjL%blx-RyLLLcfb$HI zh-mlvHof7z#&Bv>WWj2rSv?Pbm4<^Q!Rq-UTM-xbiCy>xo-X32>mXd!`e}#ZXofp7 z?)~@R{s9k4;o8lvHDV}T7H~&!?SUAKTsR~lkDyfXe+3{tCK}^h*nSolo23W3TYw^n#=#cj hzZ@_e*E|}HFpv!+6nomg4lo=<7VH0B!Z1eS{|Cp=Z_WS! literal 0 HcmV?d00001 diff --git a/labs/bomb_lab/bomb.c b/labs/bomb_lab/bomb.c new file mode 100644 index 0000000..5a39ab4 --- /dev/null +++ b/labs/bomb_lab/bomb.c @@ -0,0 +1,115 @@ +/*************************************************************************** + * Dr. Evil's Insidious Bomb, Version 1.1 + * Copyright 2011, Dr. Evil Incorporated. All rights reserved. + * + * LICENSE: + * + * Dr. Evil Incorporated (the PERPETRATOR) hereby grants you (the + * VICTIM) explicit permission to use this bomb (the BOMB). This is a + * time limited license, which expires on the death of the VICTIM. + * The PERPETRATOR takes no responsibility for damage, frustration, + * insanity, bug-eyes, carpal-tunnel syndrome, loss of sleep, or other + * harm to the VICTIM. Unless the PERPETRATOR wants to take credit, + * that is. The VICTIM may not distribute this bomb source code to + * any enemies of the PERPETRATOR. No VICTIM may debug, + * reverse-engineer, run "strings" on, decompile, decrypt, or use any + * other technique to gain knowledge of and defuse the BOMB. BOMB + * proof clothing may not be worn when handling this program. The + * PERPETRATOR will not apologize for the PERPETRATOR's poor sense of + * humor. This license is null and void where the BOMB is prohibited + * by law. + ***************************************************************************/ + +#include +#include +#include "support.h" +#include "phases.h" + +/* + * Note to self: Remember to erase this file so my victims will have no + * idea what is going on, and so they will all blow up in a + * spectaculary fiendish explosion. -- Dr. Evil + */ + +FILE *infile; + +int main(int argc, char *argv[]) +{ + char *input; + + /* Note to self: remember to port this bomb to Windows and put a + * fantastic GUI on it. */ + + /* When run with no arguments, the bomb reads its input lines + * from standard input. */ + if (argc == 1) { + infile = stdin; + } + + /* When run with one argument , the bomb reads from + * until EOF, and then switches to standard input. Thus, as you + * defuse each phase, you can add its defusing string to and + * avoid having to retype it. */ + else if (argc == 2) { + if (!(infile = fopen(argv[1], "r"))) { + printf("%s: Error: Couldn't open %s\n", argv[0], argv[1]); + exit(8); + } + } + + /* You can't call the bomb with more than 1 command line argument. */ + else { + printf("Usage: %s []\n", argv[0]); + exit(8); + } + + /* Do all sorts of secret stuff that makes the bomb harder to defuse. */ + initialize_bomb(); + + printf("Welcome to my fiendish little bomb. You have 6 phases with\n"); + printf("which to blow yourself up. Have a nice day!\n"); + + /* Hmm... Six phases must be more secure than one phase! */ + input = read_line(); /* Get input */ + phase_1(input); /* Run the phase */ + phase_defused(); /* Drat! They figured it out! + * Let me know how they did it. */ + printf("Phase 1 defused. How about the next one?\n"); + + /* The second phase is harder. No one will ever figure out + * how to defuse this... */ + input = read_line(); + phase_2(input); + phase_defused(); + printf("That's number 2. Keep going!\n"); + + /* I guess this is too easy so far. Some more complex code will + * confuse people. */ + input = read_line(); + phase_3(input); + phase_defused(); + printf("Halfway there!\n"); + + /* Oh yeah? Well, how good is your math? Try on this saucy problem! */ + input = read_line(); + phase_4(input); + phase_defused(); + printf("So you got that one. Try this one.\n"); + + /* Round and 'round in memory we go, where we stop, the bomb blows! */ + input = read_line(); + phase_5(input); + phase_defused(); + printf("Good work! On to the next...\n"); + + /* This phase will never be used, since no one will get past the + * earlier ones. But just in case, make this one extra hard. */ + input = read_line(); + phase_6(input); + phase_defused(); + + /* Wow, they got it! But isn't something... missing? Perhaps + * something they overlooked? Mua ha ha ha ha! */ + + return 0; +} diff --git a/labs/bomb_lab/bomb.s b/labs/bomb_lab/bomb.s new file mode 100644 index 0000000..503e835 --- /dev/null +++ b/labs/bomb_lab/bomb.s @@ -0,0 +1,1741 @@ + +bomb: file format elf64-x86-64 + + +Disassembly of section .init: + +0000000000400ac0 <_init>: + 400ac0: 48 83 ec 08 sub $0x8,%rsp + 400ac4: e8 f3 01 00 00 callq 400cbc + 400ac9: 48 83 c4 08 add $0x8,%rsp + 400acd: c3 retq + +Disassembly of section .plt: + +0000000000400ad0 <.plt>: + 400ad0: ff 35 1a 25 20 00 pushq 0x20251a(%rip) # 602ff0 <_GLOBAL_OFFSET_TABLE_+0x8> + 400ad6: ff 25 1c 25 20 00 jmpq *0x20251c(%rip) # 602ff8 <_GLOBAL_OFFSET_TABLE_+0x10> + 400adc: 0f 1f 40 00 nopl 0x0(%rax) + +0000000000400ae0 : + 400ae0: ff 25 1a 25 20 00 jmpq *0x20251a(%rip) # 603000 + 400ae6: 68 00 00 00 00 pushq $0x0 + 400aeb: e9 e0 ff ff ff jmpq 400ad0 <.plt> + +0000000000400af0 <__errno_location@plt>: + 400af0: ff 25 12 25 20 00 jmpq *0x202512(%rip) # 603008 <__errno_location@GLIBC_2.2.5> + 400af6: 68 01 00 00 00 pushq $0x1 + 400afb: e9 d0 ff ff ff jmpq 400ad0 <.plt> + +0000000000400b00 : + 400b00: ff 25 0a 25 20 00 jmpq *0x20250a(%rip) # 603010 + 400b06: 68 02 00 00 00 pushq $0x2 + 400b0b: e9 c0 ff ff ff jmpq 400ad0 <.plt> + +0000000000400b10 : + 400b10: ff 25 02 25 20 00 jmpq *0x202502(%rip) # 603018 + 400b16: 68 03 00 00 00 pushq $0x3 + 400b1b: e9 b0 ff ff ff jmpq 400ad0 <.plt> + +0000000000400b20 : + 400b20: ff 25 fa 24 20 00 jmpq *0x2024fa(%rip) # 603020 + 400b26: 68 04 00 00 00 pushq $0x4 + 400b2b: e9 a0 ff ff ff jmpq 400ad0 <.plt> + +0000000000400b30 <__stack_chk_fail@plt>: + 400b30: ff 25 f2 24 20 00 jmpq *0x2024f2(%rip) # 603028 <__stack_chk_fail@GLIBC_2.4> + 400b36: 68 05 00 00 00 pushq $0x5 + 400b3b: e9 90 ff ff ff jmpq 400ad0 <.plt> + +0000000000400b40 : + 400b40: ff 25 ea 24 20 00 jmpq *0x2024ea(%rip) # 603030 + 400b46: 68 06 00 00 00 pushq $0x6 + 400b4b: e9 80 ff ff ff jmpq 400ad0 <.plt> + +0000000000400b50 : + 400b50: ff 25 e2 24 20 00 jmpq *0x2024e2(%rip) # 603038 + 400b56: 68 07 00 00 00 pushq $0x7 + 400b5b: e9 70 ff ff ff jmpq 400ad0 <.plt> + +0000000000400b60 : + 400b60: ff 25 da 24 20 00 jmpq *0x2024da(%rip) # 603040 + 400b66: 68 08 00 00 00 pushq $0x8 + 400b6b: e9 60 ff ff ff jmpq 400ad0 <.plt> + +0000000000400b70 <__libc_start_main@plt>: + 400b70: ff 25 d2 24 20 00 jmpq *0x2024d2(%rip) # 603048 <__libc_start_main@GLIBC_2.2.5> + 400b76: 68 09 00 00 00 pushq $0x9 + 400b7b: e9 50 ff ff ff jmpq 400ad0 <.plt> + +0000000000400b80 : + 400b80: ff 25 ca 24 20 00 jmpq *0x2024ca(%rip) # 603050 + 400b86: 68 0a 00 00 00 pushq $0xa + 400b8b: e9 40 ff ff ff jmpq 400ad0 <.plt> + +0000000000400b90 : + 400b90: ff 25 c2 24 20 00 jmpq *0x2024c2(%rip) # 603058 + 400b96: 68 0b 00 00 00 pushq $0xb + 400b9b: e9 30 ff ff ff jmpq 400ad0 <.plt> + +0000000000400ba0 : + 400ba0: ff 25 ba 24 20 00 jmpq *0x2024ba(%rip) # 603060 + 400ba6: 68 0c 00 00 00 pushq $0xc + 400bab: e9 20 ff ff ff jmpq 400ad0 <.plt> + +0000000000400bb0 <__memmove_chk@plt>: + 400bb0: ff 25 b2 24 20 00 jmpq *0x2024b2(%rip) # 603068 <__memmove_chk@GLIBC_2.3.4> + 400bb6: 68 0d 00 00 00 pushq $0xd + 400bbb: e9 10 ff ff ff jmpq 400ad0 <.plt> + +0000000000400bc0 <__memcpy_chk@plt>: + 400bc0: ff 25 aa 24 20 00 jmpq *0x2024aa(%rip) # 603070 <__memcpy_chk@GLIBC_2.3.4> + 400bc6: 68 0e 00 00 00 pushq $0xe + 400bcb: e9 00 ff ff ff jmpq 400ad0 <.plt> + +0000000000400bd0 : + 400bd0: ff 25 a2 24 20 00 jmpq *0x2024a2(%rip) # 603078 + 400bd6: 68 0f 00 00 00 pushq $0xf + 400bdb: e9 f0 fe ff ff jmpq 400ad0 <.plt> + +0000000000400be0 : + 400be0: ff 25 9a 24 20 00 jmpq *0x20249a(%rip) # 603080 + 400be6: 68 10 00 00 00 pushq $0x10 + 400beb: e9 e0 fe ff ff jmpq 400ad0 <.plt> + +0000000000400bf0 <__isoc99_sscanf@plt>: + 400bf0: ff 25 92 24 20 00 jmpq *0x202492(%rip) # 603088 <__isoc99_sscanf@GLIBC_2.7> + 400bf6: 68 11 00 00 00 pushq $0x11 + 400bfb: e9 d0 fe ff ff jmpq 400ad0 <.plt> + +0000000000400c00 <__printf_chk@plt>: + 400c00: ff 25 8a 24 20 00 jmpq *0x20248a(%rip) # 603090 <__printf_chk@GLIBC_2.3.4> + 400c06: 68 12 00 00 00 pushq $0x12 + 400c0b: e9 c0 fe ff ff jmpq 400ad0 <.plt> + +0000000000400c10 : + 400c10: ff 25 82 24 20 00 jmpq *0x202482(%rip) # 603098 + 400c16: 68 13 00 00 00 pushq $0x13 + 400c1b: e9 b0 fe ff ff jmpq 400ad0 <.plt> + +0000000000400c20 : + 400c20: ff 25 7a 24 20 00 jmpq *0x20247a(%rip) # 6030a0 + 400c26: 68 14 00 00 00 pushq $0x14 + 400c2b: e9 a0 fe ff ff jmpq 400ad0 <.plt> + +0000000000400c30 : + 400c30: ff 25 72 24 20 00 jmpq *0x202472(%rip) # 6030a8 + 400c36: 68 15 00 00 00 pushq $0x15 + 400c3b: e9 90 fe ff ff jmpq 400ad0 <.plt> + +0000000000400c40 <__fprintf_chk@plt>: + 400c40: ff 25 6a 24 20 00 jmpq *0x20246a(%rip) # 6030b0 <__fprintf_chk@GLIBC_2.3.4> + 400c46: 68 16 00 00 00 pushq $0x16 + 400c4b: e9 80 fe ff ff jmpq 400ad0 <.plt> + +0000000000400c50 : + 400c50: ff 25 62 24 20 00 jmpq *0x202462(%rip) # 6030b8 + 400c56: 68 17 00 00 00 pushq $0x17 + 400c5b: e9 70 fe ff ff jmpq 400ad0 <.plt> + +0000000000400c60 <__ctype_b_loc@plt>: + 400c60: ff 25 5a 24 20 00 jmpq *0x20245a(%rip) # 6030c0 <__ctype_b_loc@GLIBC_2.3> + 400c66: 68 18 00 00 00 pushq $0x18 + 400c6b: e9 60 fe ff ff jmpq 400ad0 <.plt> + +0000000000400c70 <__sprintf_chk@plt>: + 400c70: ff 25 52 24 20 00 jmpq *0x202452(%rip) # 6030c8 <__sprintf_chk@GLIBC_2.3.4> + 400c76: 68 19 00 00 00 pushq $0x19 + 400c7b: e9 50 fe ff ff jmpq 400ad0 <.plt> + +0000000000400c80 : + 400c80: ff 25 4a 24 20 00 jmpq *0x20244a(%rip) # 6030d0 + 400c86: 68 1a 00 00 00 pushq $0x1a + 400c8b: e9 40 fe ff ff jmpq 400ad0 <.plt> + +Disassembly of section .text: + +0000000000400c90 <_start>: + 400c90: 31 ed xor %ebp,%ebp + 400c92: 49 89 d1 mov %rdx,%r9 + 400c95: 5e pop %rsi + 400c96: 48 89 e2 mov %rsp,%rdx + 400c99: 48 83 e4 f0 and $0xfffffffffffffff0,%rsp + 400c9d: 50 push %rax + 400c9e: 54 push %rsp + 400c9f: 49 c7 c0 a0 22 40 00 mov $0x4022a0,%r8 + 400ca6: 48 c7 c1 10 22 40 00 mov $0x402210,%rcx + 400cad: 48 c7 c7 a0 0d 40 00 mov $0x400da0,%rdi + 400cb4: e8 b7 fe ff ff callq 400b70 <__libc_start_main@plt> + 400cb9: f4 hlt + 400cba: 90 nop + 400cbb: 90 nop + +0000000000400cbc : + 400cbc: 48 83 ec 08 sub $0x8,%rsp + 400cc0: 48 8b 05 19 23 20 00 mov 0x202319(%rip),%rax # 602fe0 <__gmon_start__> + 400cc7: 48 85 c0 test %rax,%rax + 400cca: 74 02 je 400cce + 400ccc: ff d0 callq *%rax + 400cce: 48 83 c4 08 add $0x8,%rsp + 400cd2: c3 retq + 400cd3: 90 nop + 400cd4: 90 nop + 400cd5: 90 nop + 400cd6: 90 nop + 400cd7: 90 nop + 400cd8: 90 nop + 400cd9: 90 nop + 400cda: 90 nop + 400cdb: 90 nop + 400cdc: 90 nop + 400cdd: 90 nop + 400cde: 90 nop + 400cdf: 90 nop + +0000000000400ce0 : + 400ce0: b8 47 37 60 00 mov $0x603747,%eax + 400ce5: 55 push %rbp + 400ce6: 48 2d 40 37 60 00 sub $0x603740,%rax + 400cec: 48 83 f8 0e cmp $0xe,%rax + 400cf0: 48 89 e5 mov %rsp,%rbp + 400cf3: 77 02 ja 400cf7 + 400cf5: 5d pop %rbp + 400cf6: c3 retq + 400cf7: b8 00 00 00 00 mov $0x0,%eax + 400cfc: 48 85 c0 test %rax,%rax + 400cff: 74 f4 je 400cf5 + 400d01: 5d pop %rbp + 400d02: bf 40 37 60 00 mov $0x603740,%edi + 400d07: ff e0 jmpq *%rax + 400d09: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) + +0000000000400d10 : + 400d10: b8 40 37 60 00 mov $0x603740,%eax + 400d15: 55 push %rbp + 400d16: 48 2d 40 37 60 00 sub $0x603740,%rax + 400d1c: 48 c1 f8 03 sar $0x3,%rax + 400d20: 48 89 e5 mov %rsp,%rbp + 400d23: 48 89 c2 mov %rax,%rdx + 400d26: 48 c1 ea 3f shr $0x3f,%rdx + 400d2a: 48 01 d0 add %rdx,%rax + 400d2d: 48 d1 f8 sar %rax + 400d30: 75 02 jne 400d34 + 400d32: 5d pop %rbp + 400d33: c3 retq + 400d34: ba 00 00 00 00 mov $0x0,%edx + 400d39: 48 85 d2 test %rdx,%rdx + 400d3c: 74 f4 je 400d32 + 400d3e: 5d pop %rbp + 400d3f: 48 89 c6 mov %rax,%rsi + 400d42: bf 40 37 60 00 mov $0x603740,%edi + 400d47: ff e2 jmpq *%rdx + 400d49: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) + +0000000000400d50 <__do_global_dtors_aux>: + 400d50: 80 3d 01 2a 20 00 00 cmpb $0x0,0x202a01(%rip) # 603758 + 400d57: 75 11 jne 400d6a <__do_global_dtors_aux+0x1a> + 400d59: 55 push %rbp + 400d5a: 48 89 e5 mov %rsp,%rbp + 400d5d: e8 7e ff ff ff callq 400ce0 + 400d62: 5d pop %rbp + 400d63: c6 05 ee 29 20 00 01 movb $0x1,0x2029ee(%rip) # 603758 + 400d6a: f3 c3 repz retq + 400d6c: 0f 1f 40 00 nopl 0x0(%rax) + +0000000000400d70 : + 400d70: 48 83 3d 90 20 20 00 cmpq $0x0,0x202090(%rip) # 602e08 <__JCR_END__> + 400d77: 00 + 400d78: 74 1e je 400d98 + 400d7a: b8 00 00 00 00 mov $0x0,%eax + 400d7f: 48 85 c0 test %rax,%rax + 400d82: 74 14 je 400d98 + 400d84: 55 push %rbp + 400d85: bf 08 2e 60 00 mov $0x602e08,%edi + 400d8a: 48 89 e5 mov %rsp,%rbp + 400d8d: ff d0 callq *%rax + 400d8f: 5d pop %rbp + 400d90: e9 7b ff ff ff jmpq 400d10 + 400d95: 0f 1f 00 nopl (%rax) + 400d98: e9 73 ff ff ff jmpq 400d10 + 400d9d: 90 nop + 400d9e: 90 nop + 400d9f: 90 nop + +0000000000400da0
: + 400da0: 53 push %rbx + 400da1: 83 ff 01 cmp $0x1,%edi + 400da4: 75 10 jne 400db6 + 400da6: 48 8b 05 9b 29 20 00 mov 0x20299b(%rip),%rax # 603748 + 400dad: 48 89 05 b4 29 20 00 mov %rax,0x2029b4(%rip) # 603768 + 400db4: eb 63 jmp 400e19 + 400db6: 48 89 f3 mov %rsi,%rbx + 400db9: 83 ff 02 cmp $0x2,%edi + 400dbc: 75 3a jne 400df8 + 400dbe: 48 8b 7e 08 mov 0x8(%rsi),%rdi + 400dc2: be b4 22 40 00 mov $0x4022b4,%esi + 400dc7: e8 44 fe ff ff callq 400c10 + 400dcc: 48 89 05 95 29 20 00 mov %rax,0x202995(%rip) # 603768 + 400dd3: 48 85 c0 test %rax,%rax + 400dd6: 75 41 jne 400e19 + 400dd8: 48 8b 4b 08 mov 0x8(%rbx),%rcx + 400ddc: 48 8b 13 mov (%rbx),%rdx + 400ddf: be b6 22 40 00 mov $0x4022b6,%esi + 400de4: bf 01 00 00 00 mov $0x1,%edi + 400de9: e8 12 fe ff ff callq 400c00 <__printf_chk@plt> + 400dee: bf 08 00 00 00 mov $0x8,%edi + 400df3: e8 28 fe ff ff callq 400c20 + 400df8: 48 8b 16 mov (%rsi),%rdx + 400dfb: be d3 22 40 00 mov $0x4022d3,%esi + 400e00: bf 01 00 00 00 mov $0x1,%edi + 400e05: b8 00 00 00 00 mov $0x0,%eax + 400e0a: e8 f1 fd ff ff callq 400c00 <__printf_chk@plt> + 400e0f: bf 08 00 00 00 mov $0x8,%edi + 400e14: e8 07 fe ff ff callq 400c20 + 400e19: e8 84 05 00 00 callq 4013a2 + 400e1e: bf 38 23 40 00 mov $0x402338,%edi + 400e23: e8 e8 fc ff ff callq 400b10 + 400e28: bf 78 23 40 00 mov $0x402378,%edi + 400e2d: e8 de fc ff ff callq 400b10 + 400e32: e8 67 06 00 00 callq 40149e + 400e37: 48 89 c7 mov %rax,%rdi + 400e3a: e8 a1 00 00 00 callq 400ee0 + 400e3f: e8 80 07 00 00 callq 4015c4 + 400e44: bf a8 23 40 00 mov $0x4023a8,%edi + 400e49: e8 c2 fc ff ff callq 400b10 + 400e4e: e8 4b 06 00 00 callq 40149e + 400e53: 48 89 c7 mov %rax,%rdi + 400e56: e8 a1 00 00 00 callq 400efc + 400e5b: e8 64 07 00 00 callq 4015c4 + 400e60: bf ed 22 40 00 mov $0x4022ed,%edi + 400e65: e8 a6 fc ff ff callq 400b10 + 400e6a: e8 2f 06 00 00 callq 40149e + 400e6f: 48 89 c7 mov %rax,%rdi + 400e72: e8 cc 00 00 00 callq 400f43 + 400e77: e8 48 07 00 00 callq 4015c4 + 400e7c: bf 0b 23 40 00 mov $0x40230b,%edi + 400e81: e8 8a fc ff ff callq 400b10 + 400e86: e8 13 06 00 00 callq 40149e + 400e8b: 48 89 c7 mov %rax,%rdi + 400e8e: e8 79 01 00 00 callq 40100c + 400e93: e8 2c 07 00 00 callq 4015c4 + 400e98: bf d8 23 40 00 mov $0x4023d8,%edi + 400e9d: e8 6e fc ff ff callq 400b10 + 400ea2: e8 f7 05 00 00 callq 40149e + 400ea7: 48 89 c7 mov %rax,%rdi + 400eaa: e8 b3 01 00 00 callq 401062 + 400eaf: e8 10 07 00 00 callq 4015c4 + 400eb4: bf 1a 23 40 00 mov $0x40231a,%edi + 400eb9: e8 52 fc ff ff callq 400b10 + 400ebe: e8 db 05 00 00 callq 40149e + 400ec3: 48 89 c7 mov %rax,%rdi + 400ec6: e8 29 02 00 00 callq 4010f4 + 400ecb: e8 f4 06 00 00 callq 4015c4 + 400ed0: b8 00 00 00 00 mov $0x0,%eax + 400ed5: 5b pop %rbx + 400ed6: c3 retq + 400ed7: 90 nop + 400ed8: 90 nop + 400ed9: 90 nop + 400eda: 90 nop + 400edb: 90 nop + 400edc: 90 nop + 400edd: 90 nop + 400ede: 90 nop + 400edf: 90 nop + +0000000000400ee0 : + 400ee0: 48 83 ec 08 sub $0x8,%rsp + 400ee4: be 00 24 40 00 mov $0x402400,%esi + 400ee9: e8 4a 04 00 00 callq 401338 + 400eee: 85 c0 test %eax,%eax + 400ef0: 74 05 je 400ef7 + 400ef2: e8 43 05 00 00 callq 40143a + 400ef7: 48 83 c4 08 add $0x8,%rsp + 400efb: c3 retq + +0000000000400efc : + 400efc: 55 push %rbp + 400efd: 53 push %rbx + 400efe: 48 83 ec 28 sub $0x28,%rsp + 400f02: 48 89 e6 mov %rsp,%rsi + 400f05: e8 52 05 00 00 callq 40145c + 400f0a: 83 3c 24 01 cmpl $0x1,(%rsp) + 400f0e: 74 20 je 400f30 + 400f10: e8 25 05 00 00 callq 40143a + 400f15: eb 19 jmp 400f30 + 400f17: 8b 43 fc mov -0x4(%rbx),%eax + 400f1a: 01 c0 add %eax,%eax + 400f1c: 39 03 cmp %eax,(%rbx) + 400f1e: 74 05 je 400f25 + 400f20: e8 15 05 00 00 callq 40143a + 400f25: 48 83 c3 04 add $0x4,%rbx + 400f29: 48 39 eb cmp %rbp,%rbx + 400f2c: 75 e9 jne 400f17 + 400f2e: eb 0c jmp 400f3c + 400f30: 48 8d 5c 24 04 lea 0x4(%rsp),%rbx + 400f35: 48 8d 6c 24 18 lea 0x18(%rsp),%rbp + 400f3a: eb db jmp 400f17 + 400f3c: 48 83 c4 28 add $0x28,%rsp + 400f40: 5b pop %rbx + 400f41: 5d pop %rbp + 400f42: c3 retq + +0000000000400f43 : + 400f43: 48 83 ec 18 sub $0x18,%rsp + 400f47: 48 8d 4c 24 0c lea 0xc(%rsp),%rcx + 400f4c: 48 8d 54 24 08 lea 0x8(%rsp),%rdx + 400f51: be cf 25 40 00 mov $0x4025cf,%esi + 400f56: b8 00 00 00 00 mov $0x0,%eax + 400f5b: e8 90 fc ff ff callq 400bf0 <__isoc99_sscanf@plt> + 400f60: 83 f8 01 cmp $0x1,%eax + 400f63: 7f 05 jg 400f6a + 400f65: e8 d0 04 00 00 callq 40143a + 400f6a: 83 7c 24 08 07 cmpl $0x7,0x8(%rsp) + 400f6f: 77 3c ja 400fad + 400f71: 8b 44 24 08 mov 0x8(%rsp),%eax + 400f75: ff 24 c5 70 24 40 00 jmpq *0x402470(,%rax,8) + 400f7c: b8 cf 00 00 00 mov $0xcf,%eax + 400f81: eb 3b jmp 400fbe + 400f83: b8 c3 02 00 00 mov $0x2c3,%eax + 400f88: eb 34 jmp 400fbe + 400f8a: b8 00 01 00 00 mov $0x100,%eax + 400f8f: eb 2d jmp 400fbe + 400f91: b8 85 01 00 00 mov $0x185,%eax + 400f96: eb 26 jmp 400fbe + 400f98: b8 ce 00 00 00 mov $0xce,%eax + 400f9d: eb 1f jmp 400fbe + 400f9f: b8 aa 02 00 00 mov $0x2aa,%eax + 400fa4: eb 18 jmp 400fbe + 400fa6: b8 47 01 00 00 mov $0x147,%eax + 400fab: eb 11 jmp 400fbe + 400fad: e8 88 04 00 00 callq 40143a + 400fb2: b8 00 00 00 00 mov $0x0,%eax + 400fb7: eb 05 jmp 400fbe + 400fb9: b8 37 01 00 00 mov $0x137,%eax + 400fbe: 3b 44 24 0c cmp 0xc(%rsp),%eax + 400fc2: 74 05 je 400fc9 + 400fc4: e8 71 04 00 00 callq 40143a + 400fc9: 48 83 c4 18 add $0x18,%rsp + 400fcd: c3 retq + +0000000000400fce : + 400fce: 48 83 ec 08 sub $0x8,%rsp + 400fd2: 89 d0 mov %edx,%eax + 400fd4: 29 f0 sub %esi,%eax + 400fd6: 89 c1 mov %eax,%ecx + 400fd8: c1 e9 1f shr $0x1f,%ecx + 400fdb: 01 c8 add %ecx,%eax + 400fdd: d1 f8 sar %eax + 400fdf: 8d 0c 30 lea (%rax,%rsi,1),%ecx + 400fe2: 39 f9 cmp %edi,%ecx + 400fe4: 7e 0c jle 400ff2 + 400fe6: 8d 51 ff lea -0x1(%rcx),%edx + 400fe9: e8 e0 ff ff ff callq 400fce + 400fee: 01 c0 add %eax,%eax + 400ff0: eb 15 jmp 401007 + 400ff2: b8 00 00 00 00 mov $0x0,%eax + 400ff7: 39 f9 cmp %edi,%ecx + 400ff9: 7d 0c jge 401007 + 400ffb: 8d 71 01 lea 0x1(%rcx),%esi + 400ffe: e8 cb ff ff ff callq 400fce + 401003: 8d 44 00 01 lea 0x1(%rax,%rax,1),%eax + 401007: 48 83 c4 08 add $0x8,%rsp + 40100b: c3 retq + +000000000040100c : + 40100c: 48 83 ec 18 sub $0x18,%rsp + 401010: 48 8d 4c 24 0c lea 0xc(%rsp),%rcx + 401015: 48 8d 54 24 08 lea 0x8(%rsp),%rdx + 40101a: be cf 25 40 00 mov $0x4025cf,%esi + 40101f: b8 00 00 00 00 mov $0x0,%eax + 401024: e8 c7 fb ff ff callq 400bf0 <__isoc99_sscanf@plt> + 401029: 83 f8 02 cmp $0x2,%eax + 40102c: 75 07 jne 401035 + 40102e: 83 7c 24 08 0e cmpl $0xe,0x8(%rsp) + 401033: 76 05 jbe 40103a + 401035: e8 00 04 00 00 callq 40143a + 40103a: ba 0e 00 00 00 mov $0xe,%edx + 40103f: be 00 00 00 00 mov $0x0,%esi + 401044: 8b 7c 24 08 mov 0x8(%rsp),%edi + 401048: e8 81 ff ff ff callq 400fce + 40104d: 85 c0 test %eax,%eax + 40104f: 75 07 jne 401058 + 401051: 83 7c 24 0c 00 cmpl $0x0,0xc(%rsp) + 401056: 74 05 je 40105d + 401058: e8 dd 03 00 00 callq 40143a + 40105d: 48 83 c4 18 add $0x18,%rsp + 401061: c3 retq + +0000000000401062 : + 401062: 53 push %rbx + 401063: 48 83 ec 20 sub $0x20,%rsp + 401067: 48 89 fb mov %rdi,%rbx + 40106a: 64 48 8b 04 25 28 00 mov %fs:0x28,%rax + 401071: 00 00 + 401073: 48 89 44 24 18 mov %rax,0x18(%rsp) + 401078: 31 c0 xor %eax,%eax + 40107a: e8 9c 02 00 00 callq 40131b + 40107f: 83 f8 06 cmp $0x6,%eax + 401082: 74 4e je 4010d2 + 401084: e8 b1 03 00 00 callq 40143a + 401089: eb 47 jmp 4010d2 + 40108b: 0f b6 0c 03 movzbl (%rbx,%rax,1),%ecx + 40108f: 88 0c 24 mov %cl,(%rsp) + 401092: 48 8b 14 24 mov (%rsp),%rdx + 401096: 83 e2 0f and $0xf,%edx + 401099: 0f b6 92 b0 24 40 00 movzbl 0x4024b0(%rdx),%edx + 4010a0: 88 54 04 10 mov %dl,0x10(%rsp,%rax,1) + 4010a4: 48 83 c0 01 add $0x1,%rax + 4010a8: 48 83 f8 06 cmp $0x6,%rax + 4010ac: 75 dd jne 40108b + 4010ae: c6 44 24 16 00 movb $0x0,0x16(%rsp) + 4010b3: be 5e 24 40 00 mov $0x40245e,%esi + 4010b8: 48 8d 7c 24 10 lea 0x10(%rsp),%rdi + 4010bd: e8 76 02 00 00 callq 401338 + 4010c2: 85 c0 test %eax,%eax + 4010c4: 74 13 je 4010d9 + 4010c6: e8 6f 03 00 00 callq 40143a + 4010cb: 0f 1f 44 00 00 nopl 0x0(%rax,%rax,1) + 4010d0: eb 07 jmp 4010d9 + 4010d2: b8 00 00 00 00 mov $0x0,%eax + 4010d7: eb b2 jmp 40108b + 4010d9: 48 8b 44 24 18 mov 0x18(%rsp),%rax + 4010de: 64 48 33 04 25 28 00 xor %fs:0x28,%rax + 4010e5: 00 00 + 4010e7: 74 05 je 4010ee + 4010e9: e8 42 fa ff ff callq 400b30 <__stack_chk_fail@plt> + 4010ee: 48 83 c4 20 add $0x20,%rsp + 4010f2: 5b pop %rbx + 4010f3: c3 retq + +00000000004010f4 : + 4010f4: 41 56 push %r14 + 4010f6: 41 55 push %r13 + 4010f8: 41 54 push %r12 + 4010fa: 55 push %rbp + 4010fb: 53 push %rbx + 4010fc: 48 83 ec 50 sub $0x50,%rsp + 401100: 49 89 e5 mov %rsp,%r13 + 401103: 48 89 e6 mov %rsp,%rsi + 401106: e8 51 03 00 00 callq 40145c + 40110b: 49 89 e6 mov %rsp,%r14 + 40110e: 41 bc 00 00 00 00 mov $0x0,%r12d + 401114: 4c 89 ed mov %r13,%rbp + 401117: 41 8b 45 00 mov 0x0(%r13),%eax + 40111b: 83 e8 01 sub $0x1,%eax + 40111e: 83 f8 05 cmp $0x5,%eax + 401121: 76 05 jbe 401128 + 401123: e8 12 03 00 00 callq 40143a + 401128: 41 83 c4 01 add $0x1,%r12d + 40112c: 41 83 fc 06 cmp $0x6,%r12d + 401130: 74 21 je 401153 + 401132: 44 89 e3 mov %r12d,%ebx + 401135: 48 63 c3 movslq %ebx,%rax + 401138: 8b 04 84 mov (%rsp,%rax,4),%eax + 40113b: 39 45 00 cmp %eax,0x0(%rbp) + 40113e: 75 05 jne 401145 + 401140: e8 f5 02 00 00 callq 40143a + 401145: 83 c3 01 add $0x1,%ebx + 401148: 83 fb 05 cmp $0x5,%ebx + 40114b: 7e e8 jle 401135 + 40114d: 49 83 c5 04 add $0x4,%r13 + 401151: eb c1 jmp 401114 + 401153: 48 8d 74 24 18 lea 0x18(%rsp),%rsi + 401158: 4c 89 f0 mov %r14,%rax + 40115b: b9 07 00 00 00 mov $0x7,%ecx + 401160: 89 ca mov %ecx,%edx + 401162: 2b 10 sub (%rax),%edx + 401164: 89 10 mov %edx,(%rax) + 401166: 48 83 c0 04 add $0x4,%rax + 40116a: 48 39 f0 cmp %rsi,%rax + 40116d: 75 f1 jne 401160 + 40116f: be 00 00 00 00 mov $0x0,%esi + 401174: eb 21 jmp 401197 + 401176: 48 8b 52 08 mov 0x8(%rdx),%rdx + 40117a: 83 c0 01 add $0x1,%eax + 40117d: 39 c8 cmp %ecx,%eax + 40117f: 75 f5 jne 401176 + 401181: eb 05 jmp 401188 + 401183: ba d0 32 60 00 mov $0x6032d0,%edx + 401188: 48 89 54 74 20 mov %rdx,0x20(%rsp,%rsi,2) + 40118d: 48 83 c6 04 add $0x4,%rsi + 401191: 48 83 fe 18 cmp $0x18,%rsi + 401195: 74 14 je 4011ab + 401197: 8b 0c 34 mov (%rsp,%rsi,1),%ecx + 40119a: 83 f9 01 cmp $0x1,%ecx + 40119d: 7e e4 jle 401183 + 40119f: b8 01 00 00 00 mov $0x1,%eax + 4011a4: ba d0 32 60 00 mov $0x6032d0,%edx + 4011a9: eb cb jmp 401176 + 4011ab: 48 8b 5c 24 20 mov 0x20(%rsp),%rbx + 4011b0: 48 8d 44 24 28 lea 0x28(%rsp),%rax + 4011b5: 48 8d 74 24 50 lea 0x50(%rsp),%rsi + 4011ba: 48 89 d9 mov %rbx,%rcx + 4011bd: 48 8b 10 mov (%rax),%rdx + 4011c0: 48 89 51 08 mov %rdx,0x8(%rcx) + 4011c4: 48 83 c0 08 add $0x8,%rax + 4011c8: 48 39 f0 cmp %rsi,%rax + 4011cb: 74 05 je 4011d2 + 4011cd: 48 89 d1 mov %rdx,%rcx + 4011d0: eb eb jmp 4011bd + 4011d2: 48 c7 42 08 00 00 00 movq $0x0,0x8(%rdx) + 4011d9: 00 + 4011da: bd 05 00 00 00 mov $0x5,%ebp + 4011df: 48 8b 43 08 mov 0x8(%rbx),%rax + 4011e3: 8b 00 mov (%rax),%eax + 4011e5: 39 03 cmp %eax,(%rbx) + 4011e7: 7d 05 jge 4011ee + 4011e9: e8 4c 02 00 00 callq 40143a + 4011ee: 48 8b 5b 08 mov 0x8(%rbx),%rbx + 4011f2: 83 ed 01 sub $0x1,%ebp + 4011f5: 75 e8 jne 4011df + 4011f7: 48 83 c4 50 add $0x50,%rsp + 4011fb: 5b pop %rbx + 4011fc: 5d pop %rbp + 4011fd: 41 5c pop %r12 + 4011ff: 41 5d pop %r13 + 401201: 41 5e pop %r14 + 401203: c3 retq + +0000000000401204 : + 401204: 48 83 ec 08 sub $0x8,%rsp + 401208: 48 85 ff test %rdi,%rdi + 40120b: 74 2b je 401238 + 40120d: 8b 17 mov (%rdi),%edx + 40120f: 39 f2 cmp %esi,%edx + 401211: 7e 0d jle 401220 + 401213: 48 8b 7f 08 mov 0x8(%rdi),%rdi + 401217: e8 e8 ff ff ff callq 401204 + 40121c: 01 c0 add %eax,%eax + 40121e: eb 1d jmp 40123d + 401220: b8 00 00 00 00 mov $0x0,%eax + 401225: 39 f2 cmp %esi,%edx + 401227: 74 14 je 40123d + 401229: 48 8b 7f 10 mov 0x10(%rdi),%rdi + 40122d: e8 d2 ff ff ff callq 401204 + 401232: 8d 44 00 01 lea 0x1(%rax,%rax,1),%eax + 401236: eb 05 jmp 40123d + 401238: b8 ff ff ff ff mov $0xffffffff,%eax + 40123d: 48 83 c4 08 add $0x8,%rsp + 401241: c3 retq + +0000000000401242 : + 401242: 53 push %rbx + 401243: e8 56 02 00 00 callq 40149e + 401248: ba 0a 00 00 00 mov $0xa,%edx + 40124d: be 00 00 00 00 mov $0x0,%esi + 401252: 48 89 c7 mov %rax,%rdi + 401255: e8 76 f9 ff ff callq 400bd0 + 40125a: 48 89 c3 mov %rax,%rbx + 40125d: 8d 40 ff lea -0x1(%rax),%eax + 401260: 3d e8 03 00 00 cmp $0x3e8,%eax + 401265: 76 05 jbe 40126c + 401267: e8 ce 01 00 00 callq 40143a + 40126c: 89 de mov %ebx,%esi + 40126e: bf f0 30 60 00 mov $0x6030f0,%edi + 401273: e8 8c ff ff ff callq 401204 + 401278: 83 f8 02 cmp $0x2,%eax + 40127b: 74 05 je 401282 + 40127d: e8 b8 01 00 00 callq 40143a + 401282: bf 38 24 40 00 mov $0x402438,%edi + 401287: e8 84 f8 ff ff callq 400b10 + 40128c: e8 33 03 00 00 callq 4015c4 + 401291: 5b pop %rbx + 401292: c3 retq + 401293: 90 nop + 401294: 90 nop + 401295: 90 nop + 401296: 90 nop + 401297: 90 nop + 401298: 90 nop + 401299: 90 nop + 40129a: 90 nop + 40129b: 90 nop + 40129c: 90 nop + 40129d: 90 nop + 40129e: 90 nop + 40129f: 90 nop + +00000000004012a0 : + 4012a0: 48 83 ec 08 sub $0x8,%rsp + 4012a4: bf c0 24 40 00 mov $0x4024c0,%edi + 4012a9: e8 62 f8 ff ff callq 400b10 + 4012ae: bf 03 00 00 00 mov $0x3,%edi + 4012b3: e8 98 f9 ff ff callq 400c50 + 4012b8: be 82 25 40 00 mov $0x402582,%esi + 4012bd: bf 01 00 00 00 mov $0x1,%edi + 4012c2: b8 00 00 00 00 mov $0x0,%eax + 4012c7: e8 34 f9 ff ff callq 400c00 <__printf_chk@plt> + 4012cc: 48 8b 3d 6d 24 20 00 mov 0x20246d(%rip),%rdi # 603740 + 4012d3: e8 08 f9 ff ff callq 400be0 + 4012d8: bf 01 00 00 00 mov $0x1,%edi + 4012dd: e8 6e f9 ff ff callq 400c50 + 4012e2: bf 8a 25 40 00 mov $0x40258a,%edi + 4012e7: e8 24 f8 ff ff callq 400b10 + 4012ec: bf 10 00 00 00 mov $0x10,%edi + 4012f1: e8 2a f9 ff ff callq 400c20 + +00000000004012f6 : + 4012f6: 48 83 ec 08 sub $0x8,%rsp + 4012fa: 48 89 fa mov %rdi,%rdx + 4012fd: be 92 25 40 00 mov $0x402592,%esi + 401302: bf 01 00 00 00 mov $0x1,%edi + 401307: b8 00 00 00 00 mov $0x0,%eax + 40130c: e8 ef f8 ff ff callq 400c00 <__printf_chk@plt> + 401311: bf 08 00 00 00 mov $0x8,%edi + 401316: e8 05 f9 ff ff callq 400c20 + +000000000040131b : + 40131b: 80 3f 00 cmpb $0x0,(%rdi) + 40131e: 74 12 je 401332 + 401320: 48 89 fa mov %rdi,%rdx + 401323: 48 83 c2 01 add $0x1,%rdx + 401327: 89 d0 mov %edx,%eax + 401329: 29 f8 sub %edi,%eax + 40132b: 80 3a 00 cmpb $0x0,(%rdx) + 40132e: 75 f3 jne 401323 + 401330: f3 c3 repz retq + 401332: b8 00 00 00 00 mov $0x0,%eax + 401337: c3 retq + +0000000000401338 : + 401338: 41 54 push %r12 + 40133a: 55 push %rbp + 40133b: 53 push %rbx + 40133c: 48 89 fb mov %rdi,%rbx + 40133f: 48 89 f5 mov %rsi,%rbp + 401342: e8 d4 ff ff ff callq 40131b + 401347: 41 89 c4 mov %eax,%r12d + 40134a: 48 89 ef mov %rbp,%rdi + 40134d: e8 c9 ff ff ff callq 40131b + 401352: ba 01 00 00 00 mov $0x1,%edx + 401357: 41 39 c4 cmp %eax,%r12d + 40135a: 75 3f jne 40139b + 40135c: 0f b6 03 movzbl (%rbx),%eax + 40135f: 84 c0 test %al,%al + 401361: 74 25 je 401388 + 401363: 3a 45 00 cmp 0x0(%rbp),%al + 401366: 74 0a je 401372 + 401368: eb 25 jmp 40138f + 40136a: 3a 45 00 cmp 0x0(%rbp),%al + 40136d: 0f 1f 00 nopl (%rax) + 401370: 75 24 jne 401396 + 401372: 48 83 c3 01 add $0x1,%rbx + 401376: 48 83 c5 01 add $0x1,%rbp + 40137a: 0f b6 03 movzbl (%rbx),%eax + 40137d: 84 c0 test %al,%al + 40137f: 75 e9 jne 40136a + 401381: ba 00 00 00 00 mov $0x0,%edx + 401386: eb 13 jmp 40139b + 401388: ba 00 00 00 00 mov $0x0,%edx + 40138d: eb 0c jmp 40139b + 40138f: ba 01 00 00 00 mov $0x1,%edx + 401394: eb 05 jmp 40139b + 401396: ba 01 00 00 00 mov $0x1,%edx + 40139b: 89 d0 mov %edx,%eax + 40139d: 5b pop %rbx + 40139e: 5d pop %rbp + 40139f: 41 5c pop %r12 + 4013a1: c3 retq + +00000000004013a2 : + 4013a2: 48 83 ec 08 sub $0x8,%rsp + 4013a6: be a0 12 40 00 mov $0x4012a0,%esi + 4013ab: bf 02 00 00 00 mov $0x2,%edi + 4013b0: e8 db f7 ff ff callq 400b90 + 4013b5: 48 83 c4 08 add $0x8,%rsp + 4013b9: c3 retq + +00000000004013ba : + 4013ba: f3 c3 repz retq + +00000000004013bc : + 4013bc: 55 push %rbp + 4013bd: 53 push %rbx + 4013be: 48 83 ec 08 sub $0x8,%rsp + 4013c2: 48 89 fb mov %rdi,%rbx + 4013c5: eb 17 jmp 4013de + 4013c7: e8 94 f8 ff ff callq 400c60 <__ctype_b_loc@plt> + 4013cc: 48 83 c3 01 add $0x1,%rbx + 4013d0: 48 0f be ed movsbq %bpl,%rbp + 4013d4: 48 8b 00 mov (%rax),%rax + 4013d7: f6 44 68 01 20 testb $0x20,0x1(%rax,%rbp,2) + 4013dc: 74 0f je 4013ed + 4013de: 0f b6 2b movzbl (%rbx),%ebp + 4013e1: 40 84 ed test %bpl,%bpl + 4013e4: 75 e1 jne 4013c7 + 4013e6: b8 01 00 00 00 mov $0x1,%eax + 4013eb: eb 05 jmp 4013f2 + 4013ed: b8 00 00 00 00 mov $0x0,%eax + 4013f2: 48 83 c4 08 add $0x8,%rsp + 4013f6: 5b pop %rbx + 4013f7: 5d pop %rbp + 4013f8: c3 retq + +00000000004013f9 : + 4013f9: 53 push %rbx + 4013fa: 48 63 05 5f 23 20 00 movslq 0x20235f(%rip),%rax # 603760 + 401401: 48 8d 3c 80 lea (%rax,%rax,4),%rdi + 401405: 48 c1 e7 04 shl $0x4,%rdi + 401409: 48 81 c7 80 37 60 00 add $0x603780,%rdi + 401410: 48 8b 15 51 23 20 00 mov 0x202351(%rip),%rdx # 603768 + 401417: be 50 00 00 00 mov $0x50,%esi + 40141c: e8 5f f7 ff ff callq 400b80 + 401421: 48 89 c3 mov %rax,%rbx + 401424: 48 85 c0 test %rax,%rax + 401427: 74 0c je 401435 + 401429: 48 89 c7 mov %rax,%rdi + 40142c: e8 8b ff ff ff callq 4013bc + 401431: 85 c0 test %eax,%eax + 401433: 75 c5 jne 4013fa + 401435: 48 89 d8 mov %rbx,%rax + 401438: 5b pop %rbx + 401439: c3 retq + +000000000040143a : + 40143a: 48 83 ec 08 sub $0x8,%rsp + 40143e: bf a3 25 40 00 mov $0x4025a3,%edi + 401443: e8 c8 f6 ff ff callq 400b10 + 401448: bf ac 25 40 00 mov $0x4025ac,%edi + 40144d: e8 be f6 ff ff callq 400b10 + 401452: bf 08 00 00 00 mov $0x8,%edi + 401457: e8 c4 f7 ff ff callq 400c20 + +000000000040145c : + 40145c: 48 83 ec 18 sub $0x18,%rsp + 401460: 48 89 f2 mov %rsi,%rdx + 401463: 48 8d 4e 04 lea 0x4(%rsi),%rcx + 401467: 48 8d 46 14 lea 0x14(%rsi),%rax + 40146b: 48 89 44 24 08 mov %rax,0x8(%rsp) + 401470: 48 8d 46 10 lea 0x10(%rsi),%rax + 401474: 48 89 04 24 mov %rax,(%rsp) + 401478: 4c 8d 4e 0c lea 0xc(%rsi),%r9 + 40147c: 4c 8d 46 08 lea 0x8(%rsi),%r8 + 401480: be c3 25 40 00 mov $0x4025c3,%esi + 401485: b8 00 00 00 00 mov $0x0,%eax + 40148a: e8 61 f7 ff ff callq 400bf0 <__isoc99_sscanf@plt> + 40148f: 83 f8 05 cmp $0x5,%eax + 401492: 7f 05 jg 401499 + 401494: e8 a1 ff ff ff callq 40143a + 401499: 48 83 c4 18 add $0x18,%rsp + 40149d: c3 retq + +000000000040149e : + 40149e: 48 83 ec 08 sub $0x8,%rsp + 4014a2: b8 00 00 00 00 mov $0x0,%eax + 4014a7: e8 4d ff ff ff callq 4013f9 + 4014ac: 48 85 c0 test %rax,%rax + 4014af: 75 6e jne 40151f + 4014b1: 48 8b 05 90 22 20 00 mov 0x202290(%rip),%rax # 603748 + 4014b8: 48 39 05 a9 22 20 00 cmp %rax,0x2022a9(%rip) # 603768 + 4014bf: 75 14 jne 4014d5 + 4014c1: bf d5 25 40 00 mov $0x4025d5,%edi + 4014c6: e8 45 f6 ff ff callq 400b10 + 4014cb: bf 08 00 00 00 mov $0x8,%edi + 4014d0: e8 4b f7 ff ff callq 400c20 + 4014d5: bf f3 25 40 00 mov $0x4025f3,%edi + 4014da: e8 01 f6 ff ff callq 400ae0 + 4014df: 48 85 c0 test %rax,%rax + 4014e2: 74 0a je 4014ee + 4014e4: bf 00 00 00 00 mov $0x0,%edi + 4014e9: e8 32 f7 ff ff callq 400c20 + 4014ee: 48 8b 05 53 22 20 00 mov 0x202253(%rip),%rax # 603748 + 4014f5: 48 89 05 6c 22 20 00 mov %rax,0x20226c(%rip) # 603768 + 4014fc: b8 00 00 00 00 mov $0x0,%eax + 401501: e8 f3 fe ff ff callq 4013f9 + 401506: 48 85 c0 test %rax,%rax + 401509: 75 14 jne 40151f + 40150b: bf d5 25 40 00 mov $0x4025d5,%edi + 401510: e8 fb f5 ff ff callq 400b10 + 401515: bf 00 00 00 00 mov $0x0,%edi + 40151a: e8 01 f7 ff ff callq 400c20 + 40151f: 8b 15 3b 22 20 00 mov 0x20223b(%rip),%edx # 603760 + 401525: 48 63 c2 movslq %edx,%rax + 401528: 48 8d 34 80 lea (%rax,%rax,4),%rsi + 40152c: 48 c1 e6 04 shl $0x4,%rsi + 401530: 48 81 c6 80 37 60 00 add $0x603780,%rsi + 401537: 48 89 f7 mov %rsi,%rdi + 40153a: b8 00 00 00 00 mov $0x0,%eax + 40153f: 48 c7 c1 ff ff ff ff mov $0xffffffffffffffff,%rcx + 401546: f2 ae repnz scas %es:(%rdi),%al + 401548: 48 f7 d1 not %rcx + 40154b: 48 83 e9 01 sub $0x1,%rcx + 40154f: 83 f9 4e cmp $0x4e,%ecx + 401552: 7e 46 jle 40159a + 401554: bf fe 25 40 00 mov $0x4025fe,%edi + 401559: e8 b2 f5 ff ff callq 400b10 + 40155e: 8b 05 fc 21 20 00 mov 0x2021fc(%rip),%eax # 603760 + 401564: 8d 50 01 lea 0x1(%rax),%edx + 401567: 89 15 f3 21 20 00 mov %edx,0x2021f3(%rip) # 603760 + 40156d: 48 98 cltq + 40156f: 48 6b c0 50 imul $0x50,%rax,%rax + 401573: 48 bf 2a 2a 2a 74 72 movabs $0x636e7572742a2a2a,%rdi + 40157a: 75 6e 63 + 40157d: 48 89 b8 80 37 60 00 mov %rdi,0x603780(%rax) + 401584: 48 bf 61 74 65 64 2a movabs $0x2a2a2a64657461,%rdi + 40158b: 2a 2a 00 + 40158e: 48 89 b8 88 37 60 00 mov %rdi,0x603788(%rax) + 401595: e8 a0 fe ff ff callq 40143a + 40159a: 83 e9 01 sub $0x1,%ecx + 40159d: 48 63 c9 movslq %ecx,%rcx + 4015a0: 48 63 c2 movslq %edx,%rax + 4015a3: 48 8d 04 80 lea (%rax,%rax,4),%rax + 4015a7: 48 c1 e0 04 shl $0x4,%rax + 4015ab: c6 84 01 80 37 60 00 movb $0x0,0x603780(%rcx,%rax,1) + 4015b2: 00 + 4015b3: 83 c2 01 add $0x1,%edx + 4015b6: 89 15 a4 21 20 00 mov %edx,0x2021a4(%rip) # 603760 + 4015bc: 48 89 f0 mov %rsi,%rax + 4015bf: 48 83 c4 08 add $0x8,%rsp + 4015c3: c3 retq + +00000000004015c4 : + 4015c4: 48 83 ec 78 sub $0x78,%rsp + 4015c8: 64 48 8b 04 25 28 00 mov %fs:0x28,%rax + 4015cf: 00 00 + 4015d1: 48 89 44 24 68 mov %rax,0x68(%rsp) + 4015d6: 31 c0 xor %eax,%eax + 4015d8: 83 3d 81 21 20 00 06 cmpl $0x6,0x202181(%rip) # 603760 + 4015df: 75 5e jne 40163f + 4015e1: 4c 8d 44 24 10 lea 0x10(%rsp),%r8 + 4015e6: 48 8d 4c 24 0c lea 0xc(%rsp),%rcx + 4015eb: 48 8d 54 24 08 lea 0x8(%rsp),%rdx + 4015f0: be 19 26 40 00 mov $0x402619,%esi + 4015f5: bf 70 38 60 00 mov $0x603870,%edi + 4015fa: e8 f1 f5 ff ff callq 400bf0 <__isoc99_sscanf@plt> + 4015ff: 83 f8 03 cmp $0x3,%eax + 401602: 75 31 jne 401635 + 401604: be 22 26 40 00 mov $0x402622,%esi + 401609: 48 8d 7c 24 10 lea 0x10(%rsp),%rdi + 40160e: e8 25 fd ff ff callq 401338 + 401613: 85 c0 test %eax,%eax + 401615: 75 1e jne 401635 + 401617: bf f8 24 40 00 mov $0x4024f8,%edi + 40161c: e8 ef f4 ff ff callq 400b10 + 401621: bf 20 25 40 00 mov $0x402520,%edi + 401626: e8 e5 f4 ff ff callq 400b10 + 40162b: b8 00 00 00 00 mov $0x0,%eax + 401630: e8 0d fc ff ff callq 401242 + 401635: bf 58 25 40 00 mov $0x402558,%edi + 40163a: e8 d1 f4 ff ff callq 400b10 + 40163f: 48 8b 44 24 68 mov 0x68(%rsp),%rax + 401644: 64 48 33 04 25 28 00 xor %fs:0x28,%rax + 40164b: 00 00 + 40164d: 74 05 je 401654 + 40164f: e8 dc f4 ff ff callq 400b30 <__stack_chk_fail@plt> + 401654: 48 83 c4 78 add $0x78,%rsp + 401658: c3 retq + 401659: 90 nop + 40165a: 90 nop + 40165b: 90 nop + 40165c: 90 nop + 40165d: 90 nop + 40165e: 90 nop + 40165f: 90 nop + +0000000000401660 : + 401660: 48 83 ec 08 sub $0x8,%rsp + 401664: b9 00 00 00 00 mov $0x0,%ecx + 401669: ba 78 26 40 00 mov $0x402678,%edx + 40166e: be 01 00 00 00 mov $0x1,%esi + 401673: 48 8b 3d d6 20 20 00 mov 0x2020d6(%rip),%rdi # 603750 + 40167a: b8 00 00 00 00 mov $0x0,%eax + 40167f: e8 bc f5 ff ff callq 400c40 <__fprintf_chk@plt> + 401684: bf 01 00 00 00 mov $0x1,%edi + 401689: e8 92 f5 ff ff callq 400c20 + +000000000040168e : + 40168e: 41 57 push %r15 + 401690: 41 56 push %r14 + 401692: 41 55 push %r13 + 401694: 41 54 push %r12 + 401696: 55 push %rbp + 401697: 53 push %rbx + 401698: 48 83 ec 38 sub $0x38,%rsp + 40169c: 49 89 f6 mov %rsi,%r14 + 40169f: 48 89 54 24 18 mov %rdx,0x18(%rsp) + 4016a4: 48 83 fa 01 cmp $0x1,%rdx + 4016a8: 0f 86 c9 00 00 00 jbe 401777 + 4016ae: 48 89 fb mov %rdi,%rbx + 4016b1: 41 bd 01 00 00 00 mov $0x1,%r13d + 4016b7: 4c 8d 67 10 lea 0x10(%rdi),%r12 + 4016bb: eb 30 jmp 4016ed + 4016bd: ba 00 20 00 00 mov $0x2000,%edx + 4016c2: 4c 89 e6 mov %r12,%rsi + 4016c5: 8b 3b mov (%rbx),%edi + 4016c7: e8 94 f4 ff ff callq 400b60 + 4016cc: 89 43 04 mov %eax,0x4(%rbx) + 4016cf: 85 c0 test %eax,%eax + 4016d1: 79 12 jns 4016e5 + 4016d3: e8 18 f4 ff ff callq 400af0 <__errno_location@plt> + 4016d8: 83 38 04 cmpl $0x4,(%rax) + 4016db: 74 10 je 4016ed + 4016dd: 0f 1f 00 nopl (%rax) + 4016e0: e9 a1 00 00 00 jmpq 401786 + 4016e5: 85 c0 test %eax,%eax + 4016e7: 74 71 je 40175a + 4016e9: 4c 89 63 08 mov %r12,0x8(%rbx) + 4016ed: 8b 6b 04 mov 0x4(%rbx),%ebp + 4016f0: 85 ed test %ebp,%ebp + 4016f2: 7e c9 jle 4016bd + 4016f4: 85 ed test %ebp,%ebp + 4016f6: 41 0f 95 c7 setne %r15b + 4016fa: 41 0f b6 c7 movzbl %r15b,%eax + 4016fe: 89 44 24 0c mov %eax,0xc(%rsp) + 401702: 45 0f b6 ff movzbl %r15b,%r15d + 401706: 48 8b 4b 08 mov 0x8(%rbx),%rcx + 40170a: 48 89 ce mov %rcx,%rsi + 40170d: b9 01 00 00 00 mov $0x1,%ecx + 401712: 4c 89 fa mov %r15,%rdx + 401715: 48 89 74 24 10 mov %rsi,0x10(%rsp) + 40171a: 48 8d 7c 24 2f lea 0x2f(%rsp),%rdi + 40171f: e8 9c f4 ff ff callq 400bc0 <__memcpy_chk@plt> + 401724: 4c 03 7c 24 10 add 0x10(%rsp),%r15 + 401729: 4c 89 7b 08 mov %r15,0x8(%rbx) + 40172d: 8b 44 24 0c mov 0xc(%rsp),%eax + 401731: 29 c5 sub %eax,%ebp + 401733: 89 6b 04 mov %ebp,0x4(%rbx) + 401736: 83 f8 01 cmp $0x1,%eax + 401739: 75 13 jne 40174e + 40173b: 49 83 c6 01 add $0x1,%r14 + 40173f: 0f b6 44 24 2f movzbl 0x2f(%rsp),%eax + 401744: 41 88 46 ff mov %al,-0x1(%r14) + 401748: 3c 0a cmp $0xa,%al + 40174a: 75 18 jne 401764 + 40174c: eb 2f jmp 40177d + 40174e: 83 7c 24 0c 00 cmpl $0x0,0xc(%rsp) + 401753: 75 3a jne 40178f + 401755: 44 89 e8 mov %r13d,%eax + 401758: eb 03 jmp 40175d + 40175a: 44 89 e8 mov %r13d,%eax + 40175d: 83 f8 01 cmp $0x1,%eax + 401760: 75 1b jne 40177d + 401762: eb 34 jmp 401798 + 401764: 41 83 c5 01 add $0x1,%r13d + 401768: 49 63 c5 movslq %r13d,%rax + 40176b: 48 3b 44 24 18 cmp 0x18(%rsp),%rax + 401770: 73 0b jae 40177d + 401772: e9 76 ff ff ff jmpq 4016ed + 401777: 41 bd 01 00 00 00 mov $0x1,%r13d + 40177d: 41 c6 06 00 movb $0x0,(%r14) + 401781: 49 63 c5 movslq %r13d,%rax + 401784: eb 17 jmp 40179d + 401786: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax + 40178d: eb 0e jmp 40179d + 40178f: 48 c7 c0 ff ff ff ff mov $0xffffffffffffffff,%rax + 401796: eb 05 jmp 40179d + 401798: b8 00 00 00 00 mov $0x0,%eax + 40179d: 48 83 c4 38 add $0x38,%rsp + 4017a1: 5b pop %rbx + 4017a2: 5d pop %rbp + 4017a3: 41 5c pop %r12 + 4017a5: 41 5d pop %r13 + 4017a7: 41 5e pop %r14 + 4017a9: 41 5f pop %r15 + 4017ab: c3 retq + +00000000004017ac : + 4017ac: 41 57 push %r15 + 4017ae: 41 56 push %r14 + 4017b0: 41 55 push %r13 + 4017b2: 41 54 push %r12 + 4017b4: 55 push %rbp + 4017b5: 53 push %rbx + 4017b6: 48 81 ec 68 a0 00 00 sub $0xa068,%rsp + 4017bd: 48 89 fd mov %rdi,%rbp + 4017c0: 41 89 f5 mov %esi,%r13d + 4017c3: 48 89 54 24 10 mov %rdx,0x10(%rsp) + 4017c8: 48 89 4c 24 18 mov %rcx,0x18(%rsp) + 4017cd: 4d 89 c7 mov %r8,%r15 + 4017d0: 4c 89 cb mov %r9,%rbx + 4017d3: 4c 8b b4 24 a0 a0 00 mov 0xa0a0(%rsp),%r14 + 4017da: 00 + 4017db: 64 48 8b 04 25 28 00 mov %fs:0x28,%rax + 4017e2: 00 00 + 4017e4: 48 89 84 24 58 a0 00 mov %rax,0xa058(%rsp) + 4017eb: 00 + 4017ec: 31 c0 xor %eax,%eax + 4017ee: c7 44 24 2c 00 00 00 movl $0x0,0x2c(%rsp) + 4017f5: 00 + 4017f6: ba 00 00 00 00 mov $0x0,%edx + 4017fb: be 01 00 00 00 mov $0x1,%esi + 401800: bf 02 00 00 00 mov $0x2,%edi + 401805: e8 76 f4 ff ff callq 400c80 + 40180a: 41 89 c4 mov %eax,%r12d + 40180d: 85 c0 test %eax,%eax + 40180f: 79 50 jns 401861 + 401811: 48 b8 45 72 72 6f 72 movabs $0x43203a726f727245,%rax + 401818: 3a 20 43 + 40181b: 49 89 06 mov %rax,(%r14) + 40181e: 48 b8 6c 69 65 6e 74 movabs $0x6e7520746e65696c,%rax + 401825: 20 75 6e + 401828: 49 89 46 08 mov %rax,0x8(%r14) + 40182c: 48 b8 61 62 6c 65 20 movabs $0x206f7420656c6261,%rax + 401833: 74 6f 20 + 401836: 49 89 46 10 mov %rax,0x10(%r14) + 40183a: 48 b8 63 72 65 61 74 movabs $0x7320657461657263,%rax + 401841: 65 20 73 + 401844: 49 89 46 18 mov %rax,0x18(%r14) + 401848: 41 c7 46 20 6f 63 6b movl $0x656b636f,0x20(%r14) + 40184f: 65 + 401850: 66 41 c7 46 24 74 00 movw $0x74,0x24(%r14) + 401857: b8 ff ff ff ff mov $0xffffffff,%eax + 40185c: e9 07 06 00 00 jmpq 401e68 + 401861: 48 89 ef mov %rbp,%rdi + 401864: e8 37 f3 ff ff callq 400ba0 + 401869: 48 85 c0 test %rax,%rax + 40186c: 75 6b jne 4018d9 + 40186e: 48 b8 45 72 72 6f 72 movabs $0x44203a726f727245,%rax + 401875: 3a 20 44 + 401878: 49 89 06 mov %rax,(%r14) + 40187b: 48 b8 4e 53 20 69 73 movabs $0x6e7520736920534e,%rax + 401882: 20 75 6e + 401885: 49 89 46 08 mov %rax,0x8(%r14) + 401889: 48 b8 61 62 6c 65 20 movabs $0x206f7420656c6261,%rax + 401890: 74 6f 20 + 401893: 49 89 46 10 mov %rax,0x10(%r14) + 401897: 48 b8 72 65 73 6f 6c movabs $0x2065766c6f736572,%rax + 40189e: 76 65 20 + 4018a1: 49 89 46 18 mov %rax,0x18(%r14) + 4018a5: 48 b8 73 65 72 76 65 movabs $0x6120726576726573,%rax + 4018ac: 72 20 61 + 4018af: 49 89 46 20 mov %rax,0x20(%r14) + 4018b3: 41 c7 46 28 64 64 72 movl $0x65726464,0x28(%r14) + 4018ba: 65 + 4018bb: 66 41 c7 46 2c 73 73 movw $0x7373,0x2c(%r14) + 4018c2: 41 c6 46 2e 00 movb $0x0,0x2e(%r14) + 4018c7: 44 89 e7 mov %r12d,%edi + 4018ca: e8 81 f2 ff ff callq 400b50 + 4018cf: b8 ff ff ff ff mov $0xffffffff,%eax + 4018d4: e9 8f 05 00 00 jmpq 401e68 + 4018d9: 48 c7 44 24 30 00 00 movq $0x0,0x30(%rsp) + 4018e0: 00 00 + 4018e2: 48 c7 44 24 38 00 00 movq $0x0,0x38(%rsp) + 4018e9: 00 00 + 4018eb: 66 c7 44 24 30 02 00 movw $0x2,0x30(%rsp) + 4018f2: 48 63 50 14 movslq 0x14(%rax),%rdx + 4018f6: 48 8b 40 18 mov 0x18(%rax),%rax + 4018fa: 48 8d 7c 24 34 lea 0x34(%rsp),%rdi + 4018ff: b9 0c 00 00 00 mov $0xc,%ecx + 401904: 48 8b 30 mov (%rax),%rsi + 401907: e8 a4 f2 ff ff callq 400bb0 <__memmove_chk@plt> + 40190c: 66 41 c1 cd 08 ror $0x8,%r13w + 401911: 66 44 89 6c 24 32 mov %r13w,0x32(%rsp) + 401917: ba 10 00 00 00 mov $0x10,%edx + 40191c: 48 8d 74 24 30 lea 0x30(%rsp),%rsi + 401921: 44 89 e7 mov %r12d,%edi + 401924: e8 07 f3 ff ff callq 400c30 + 401929: 85 c0 test %eax,%eax + 40192b: 79 5d jns 40198a + 40192d: 48 b8 45 72 72 6f 72 movabs $0x55203a726f727245,%rax + 401934: 3a 20 55 + 401937: 49 89 06 mov %rax,(%r14) + 40193a: 48 b8 6e 61 62 6c 65 movabs $0x6f7420656c62616e,%rax + 401941: 20 74 6f + 401944: 49 89 46 08 mov %rax,0x8(%r14) + 401948: 48 b8 20 63 6f 6e 6e movabs $0x7463656e6e6f6320,%rax + 40194f: 65 63 74 + 401952: 49 89 46 10 mov %rax,0x10(%r14) + 401956: 48 b8 20 74 6f 20 74 movabs $0x20656874206f7420,%rax + 40195d: 68 65 20 + 401960: 49 89 46 18 mov %rax,0x18(%r14) + 401964: 41 c7 46 20 73 65 72 movl $0x76726573,0x20(%r14) + 40196b: 76 + 40196c: 66 41 c7 46 24 65 72 movw $0x7265,0x24(%r14) + 401973: 41 c6 46 26 00 movb $0x0,0x26(%r14) + 401978: 44 89 e7 mov %r12d,%edi + 40197b: e8 d0 f1 ff ff callq 400b50 + 401980: b8 ff ff ff ff mov $0xffffffff,%eax + 401985: e9 de 04 00 00 jmpq 401e68 + 40198a: 48 c7 c2 ff ff ff ff mov $0xffffffffffffffff,%rdx + 401991: 48 89 df mov %rbx,%rdi + 401994: b8 00 00 00 00 mov $0x0,%eax + 401999: 48 89 d1 mov %rdx,%rcx + 40199c: f2 ae repnz scas %es:(%rdi),%al + 40199e: 48 f7 d1 not %rcx + 4019a1: 48 89 ce mov %rcx,%rsi + 4019a4: 48 8b 7c 24 10 mov 0x10(%rsp),%rdi + 4019a9: 48 89 d1 mov %rdx,%rcx + 4019ac: f2 ae repnz scas %es:(%rdi),%al + 4019ae: 49 89 c8 mov %rcx,%r8 + 4019b1: 48 8b 7c 24 18 mov 0x18(%rsp),%rdi + 4019b6: 48 89 d1 mov %rdx,%rcx + 4019b9: f2 ae repnz scas %es:(%rdi),%al + 4019bb: 48 f7 d1 not %rcx + 4019be: 49 89 c9 mov %rcx,%r9 + 4019c1: 4c 89 ff mov %r15,%rdi + 4019c4: 48 89 d1 mov %rdx,%rcx + 4019c7: f2 ae repnz scas %es:(%rdi),%al + 4019c9: 4d 29 c1 sub %r8,%r9 + 4019cc: 49 29 c9 sub %rcx,%r9 + 4019cf: 48 8d 44 76 fd lea -0x3(%rsi,%rsi,2),%rax + 4019d4: 49 8d 44 01 7b lea 0x7b(%r9,%rax,1),%rax + 4019d9: 48 3d 00 20 00 00 cmp $0x2000,%rax + 4019df: 76 73 jbe 401a54 + 4019e1: 48 b8 45 72 72 6f 72 movabs $0x52203a726f727245,%rax + 4019e8: 3a 20 52 + 4019eb: 49 89 06 mov %rax,(%r14) + 4019ee: 48 b8 65 73 75 6c 74 movabs $0x747320746c757365,%rax + 4019f5: 20 73 74 + 4019f8: 49 89 46 08 mov %rax,0x8(%r14) + 4019fc: 48 b8 72 69 6e 67 20 movabs $0x6f6f7420676e6972,%rax + 401a03: 74 6f 6f + 401a06: 49 89 46 10 mov %rax,0x10(%r14) + 401a0a: 48 b8 20 6c 61 72 67 movabs $0x202e656772616c20,%rax + 401a11: 65 2e 20 + 401a14: 49 89 46 18 mov %rax,0x18(%r14) + 401a18: 48 b8 49 6e 63 72 65 movabs $0x6573616572636e49,%rax + 401a1f: 61 73 65 + 401a22: 49 89 46 20 mov %rax,0x20(%r14) + 401a26: 48 b8 20 53 55 42 4d movabs $0x5254494d42555320,%rax + 401a2d: 49 54 52 + 401a30: 49 89 46 28 mov %rax,0x28(%r14) + 401a34: 48 b8 5f 4d 41 58 42 movabs $0x46554258414d5f,%rax + 401a3b: 55 46 00 + 401a3e: 49 89 46 30 mov %rax,0x30(%r14) + 401a42: 44 89 e7 mov %r12d,%edi + 401a45: e8 06 f1 ff ff callq 400b50 + 401a4a: b8 ff ff ff ff mov $0xffffffff,%eax + 401a4f: e9 14 04 00 00 jmpq 401e68 + 401a54: 48 8d 94 24 40 20 00 lea 0x2040(%rsp),%rdx + 401a5b: 00 + 401a5c: b9 00 04 00 00 mov $0x400,%ecx + 401a61: b8 00 00 00 00 mov $0x0,%eax + 401a66: 48 89 d7 mov %rdx,%rdi + 401a69: f3 48 ab rep stos %rax,%es:(%rdi) + 401a6c: 48 89 df mov %rbx,%rdi + 401a6f: 48 c7 c1 ff ff ff ff mov $0xffffffffffffffff,%rcx + 401a76: f2 ae repnz scas %es:(%rdi),%al + 401a78: 48 f7 d1 not %rcx + 401a7b: 48 83 e9 01 sub $0x1,%rcx + 401a7f: 85 c9 test %ecx,%ecx + 401a81: 0f 84 fd 03 00 00 je 401e84 + 401a87: 83 e9 01 sub $0x1,%ecx + 401a8a: 4c 8d 6c 0b 01 lea 0x1(%rbx,%rcx,1),%r13 + 401a8f: 48 89 d5 mov %rdx,%rbp + 401a92: 44 0f b6 03 movzbl (%rbx),%r8d + 401a96: 41 80 f8 2a cmp $0x2a,%r8b + 401a9a: 74 23 je 401abf + 401a9c: 41 8d 40 d3 lea -0x2d(%r8),%eax + 401aa0: 3c 01 cmp $0x1,%al + 401aa2: 76 1b jbe 401abf + 401aa4: 41 80 f8 5f cmp $0x5f,%r8b + 401aa8: 74 15 je 401abf + 401aaa: 41 8d 40 d0 lea -0x30(%r8),%eax + 401aae: 3c 09 cmp $0x9,%al + 401ab0: 76 0d jbe 401abf + 401ab2: 44 89 c0 mov %r8d,%eax + 401ab5: 83 e0 df and $0xffffffdf,%eax + 401ab8: 83 e8 41 sub $0x41,%eax + 401abb: 3c 19 cmp $0x19,%al + 401abd: 77 0a ja 401ac9 + 401abf: 48 8d 45 01 lea 0x1(%rbp),%rax + 401ac3: 44 88 45 00 mov %r8b,0x0(%rbp) + 401ac7: eb 6c jmp 401b35 + 401ac9: 41 80 f8 20 cmp $0x20,%r8b + 401acd: 75 0a jne 401ad9 + 401acf: 48 8d 45 01 lea 0x1(%rbp),%rax + 401ad3: c6 45 00 2b movb $0x2b,0x0(%rbp) + 401ad7: eb 5c jmp 401b35 + 401ad9: 41 8d 40 e0 lea -0x20(%r8),%eax + 401add: 3c 5f cmp $0x5f,%al + 401adf: 76 0a jbe 401aeb + 401ae1: 41 80 f8 09 cmp $0x9,%r8b + 401ae5: 0f 85 02 04 00 00 jne 401eed + 401aeb: 45 0f b6 c0 movzbl %r8b,%r8d + 401aef: b9 48 27 40 00 mov $0x402748,%ecx + 401af4: ba 08 00 00 00 mov $0x8,%edx + 401af9: be 01 00 00 00 mov $0x1,%esi + 401afe: 48 8d bc 24 40 80 00 lea 0x8040(%rsp),%rdi + 401b05: 00 + 401b06: b8 00 00 00 00 mov $0x0,%eax + 401b0b: e8 60 f1 ff ff callq 400c70 <__sprintf_chk@plt> + 401b10: 0f b6 84 24 40 80 00 movzbl 0x8040(%rsp),%eax + 401b17: 00 + 401b18: 88 45 00 mov %al,0x0(%rbp) + 401b1b: 0f b6 84 24 41 80 00 movzbl 0x8041(%rsp),%eax + 401b22: 00 + 401b23: 88 45 01 mov %al,0x1(%rbp) + 401b26: 48 8d 45 03 lea 0x3(%rbp),%rax + 401b2a: 0f b6 94 24 42 80 00 movzbl 0x8042(%rsp),%edx + 401b31: 00 + 401b32: 88 55 02 mov %dl,0x2(%rbp) + 401b35: 48 83 c3 01 add $0x1,%rbx + 401b39: 4c 39 eb cmp %r13,%rbx + 401b3c: 0f 84 42 03 00 00 je 401e84 + 401b42: 48 89 c5 mov %rax,%rbp + 401b45: e9 48 ff ff ff jmpq 401a92 + 401b4a: 48 89 da mov %rbx,%rdx + 401b4d: 48 89 ee mov %rbp,%rsi + 401b50: 44 89 e7 mov %r12d,%edi + 401b53: e8 c8 ef ff ff callq 400b20 + 401b58: 48 85 c0 test %rax,%rax + 401b5b: 7f 0f jg 401b6c + 401b5d: e8 8e ef ff ff callq 400af0 <__errno_location@plt> + 401b62: 83 38 04 cmpl $0x4,(%rax) + 401b65: 75 12 jne 401b79 + 401b67: b8 00 00 00 00 mov $0x0,%eax + 401b6c: 48 01 c5 add %rax,%rbp + 401b6f: 48 29 c3 sub %rax,%rbx + 401b72: 75 d6 jne 401b4a + 401b74: 4d 85 ed test %r13,%r13 + 401b77: 79 5f jns 401bd8 + 401b79: 48 b8 45 72 72 6f 72 movabs $0x43203a726f727245,%rax + 401b80: 3a 20 43 + 401b83: 49 89 06 mov %rax,(%r14) + 401b86: 48 b8 6c 69 65 6e 74 movabs $0x6e7520746e65696c,%rax + 401b8d: 20 75 6e + 401b90: 49 89 46 08 mov %rax,0x8(%r14) + 401b94: 48 b8 61 62 6c 65 20 movabs $0x206f7420656c6261,%rax + 401b9b: 74 6f 20 + 401b9e: 49 89 46 10 mov %rax,0x10(%r14) + 401ba2: 48 b8 77 72 69 74 65 movabs $0x6f74206574697277,%rax + 401ba9: 20 74 6f + 401bac: 49 89 46 18 mov %rax,0x18(%r14) + 401bb0: 48 b8 20 74 68 65 20 movabs $0x7265732065687420,%rax + 401bb7: 73 65 72 + 401bba: 49 89 46 20 mov %rax,0x20(%r14) + 401bbe: 41 c7 46 28 76 65 72 movl $0x726576,0x28(%r14) + 401bc5: 00 + 401bc6: 44 89 e7 mov %r12d,%edi + 401bc9: e8 82 ef ff ff callq 400b50 + 401bce: b8 ff ff ff ff mov $0xffffffff,%eax + 401bd3: e9 90 02 00 00 jmpq 401e68 + 401bd8: 44 89 a4 24 40 80 00 mov %r12d,0x8040(%rsp) + 401bdf: 00 + 401be0: c7 84 24 44 80 00 00 movl $0x0,0x8044(%rsp) + 401be7: 00 00 00 00 + 401beb: 48 8d 84 24 50 80 00 lea 0x8050(%rsp),%rax + 401bf2: 00 + 401bf3: 48 89 84 24 48 80 00 mov %rax,0x8048(%rsp) + 401bfa: 00 + 401bfb: ba 00 20 00 00 mov $0x2000,%edx + 401c00: 48 8d 74 24 40 lea 0x40(%rsp),%rsi + 401c05: 48 8d bc 24 40 80 00 lea 0x8040(%rsp),%rdi + 401c0c: 00 + 401c0d: e8 7c fa ff ff callq 40168e + 401c12: 48 85 c0 test %rax,%rax + 401c15: 7f 74 jg 401c8b + 401c17: 48 b8 45 72 72 6f 72 movabs $0x43203a726f727245,%rax + 401c1e: 3a 20 43 + 401c21: 49 89 06 mov %rax,(%r14) + 401c24: 48 b8 6c 69 65 6e 74 movabs $0x6e7520746e65696c,%rax + 401c2b: 20 75 6e + 401c2e: 49 89 46 08 mov %rax,0x8(%r14) + 401c32: 48 b8 61 62 6c 65 20 movabs $0x206f7420656c6261,%rax + 401c39: 74 6f 20 + 401c3c: 49 89 46 10 mov %rax,0x10(%r14) + 401c40: 48 b8 72 65 61 64 20 movabs $0x7269662064616572,%rax + 401c47: 66 69 72 + 401c4a: 49 89 46 18 mov %rax,0x18(%r14) + 401c4e: 48 b8 73 74 20 68 65 movabs $0x6564616568207473,%rax + 401c55: 61 64 65 + 401c58: 49 89 46 20 mov %rax,0x20(%r14) + 401c5c: 48 b8 72 20 66 72 6f movabs $0x73206d6f72662072,%rax + 401c63: 6d 20 73 + 401c66: 49 89 46 28 mov %rax,0x28(%r14) + 401c6a: 41 c7 46 30 65 72 76 movl $0x65767265,0x30(%r14) + 401c71: 65 + 401c72: 66 41 c7 46 34 72 00 movw $0x72,0x34(%r14) + 401c79: 44 89 e7 mov %r12d,%edi + 401c7c: e8 cf ee ff ff callq 400b50 + 401c81: b8 ff ff ff ff mov $0xffffffff,%eax + 401c86: e9 dd 01 00 00 jmpq 401e68 + 401c8b: 4c 8d 84 24 40 60 00 lea 0x6040(%rsp),%r8 + 401c92: 00 + 401c93: 48 8d 4c 24 2c lea 0x2c(%rsp),%rcx + 401c98: 48 8d 94 24 40 40 00 lea 0x4040(%rsp),%rdx + 401c9f: 00 + 401ca0: be 4f 27 40 00 mov $0x40274f,%esi + 401ca5: 48 8d 7c 24 40 lea 0x40(%rsp),%rdi + 401caa: b8 00 00 00 00 mov $0x0,%eax + 401caf: e8 3c ef ff ff callq 400bf0 <__isoc99_sscanf@plt> + 401cb4: 44 8b 44 24 2c mov 0x2c(%rsp),%r8d + 401cb9: 41 81 f8 c8 00 00 00 cmp $0xc8,%r8d + 401cc0: 0f 84 be 00 00 00 je 401d84 + 401cc6: 4c 8d 8c 24 40 60 00 lea 0x6040(%rsp),%r9 + 401ccd: 00 + 401cce: b9 a0 26 40 00 mov $0x4026a0,%ecx + 401cd3: 48 c7 c2 ff ff ff ff mov $0xffffffffffffffff,%rdx + 401cda: be 01 00 00 00 mov $0x1,%esi + 401cdf: 4c 89 f7 mov %r14,%rdi + 401ce2: b8 00 00 00 00 mov $0x0,%eax + 401ce7: e8 84 ef ff ff callq 400c70 <__sprintf_chk@plt> + 401cec: 44 89 e7 mov %r12d,%edi + 401cef: e8 5c ee ff ff callq 400b50 + 401cf4: b8 ff ff ff ff mov $0xffffffff,%eax + 401cf9: e9 6a 01 00 00 jmpq 401e68 + 401cfe: ba 00 20 00 00 mov $0x2000,%edx + 401d03: 48 8d 74 24 40 lea 0x40(%rsp),%rsi + 401d08: 48 8d bc 24 40 80 00 lea 0x8040(%rsp),%rdi + 401d0f: 00 + 401d10: e8 79 f9 ff ff callq 40168e + 401d15: 48 85 c0 test %rax,%rax + 401d18: 7f 6a jg 401d84 + 401d1a: 48 b8 45 72 72 6f 72 movabs $0x43203a726f727245,%rax + 401d21: 3a 20 43 + 401d24: 49 89 06 mov %rax,(%r14) + 401d27: 48 b8 6c 69 65 6e 74 movabs $0x6e7520746e65696c,%rax + 401d2e: 20 75 6e + 401d31: 49 89 46 08 mov %rax,0x8(%r14) + 401d35: 48 b8 61 62 6c 65 20 movabs $0x206f7420656c6261,%rax + 401d3c: 74 6f 20 + 401d3f: 49 89 46 10 mov %rax,0x10(%r14) + 401d43: 48 b8 72 65 61 64 20 movabs $0x6165682064616572,%rax + 401d4a: 68 65 61 + 401d4d: 49 89 46 18 mov %rax,0x18(%r14) + 401d51: 48 b8 64 65 72 73 20 movabs $0x6f72662073726564,%rax + 401d58: 66 72 6f + 401d5b: 49 89 46 20 mov %rax,0x20(%r14) + 401d5f: 48 b8 6d 20 73 65 72 movabs $0x726576726573206d,%rax + 401d66: 76 65 72 + 401d69: 49 89 46 28 mov %rax,0x28(%r14) + 401d6d: 41 c6 46 30 00 movb $0x0,0x30(%r14) + 401d72: 44 89 e7 mov %r12d,%edi + 401d75: e8 d6 ed ff ff callq 400b50 + 401d7a: b8 ff ff ff ff mov $0xffffffff,%eax + 401d7f: e9 e4 00 00 00 jmpq 401e68 + 401d84: 80 7c 24 40 0d cmpb $0xd,0x40(%rsp) + 401d89: 0f 85 6f ff ff ff jne 401cfe + 401d8f: 80 7c 24 41 0a cmpb $0xa,0x41(%rsp) + 401d94: 0f 85 64 ff ff ff jne 401cfe + 401d9a: 80 7c 24 42 00 cmpb $0x0,0x42(%rsp) + 401d9f: 0f 85 59 ff ff ff jne 401cfe + 401da5: ba 00 20 00 00 mov $0x2000,%edx + 401daa: 48 8d 74 24 40 lea 0x40(%rsp),%rsi + 401daf: 48 8d bc 24 40 80 00 lea 0x8040(%rsp),%rdi + 401db6: 00 + 401db7: e8 d2 f8 ff ff callq 40168e + 401dbc: 48 85 c0 test %rax,%rax + 401dbf: 7f 70 jg 401e31 + 401dc1: 48 b8 45 72 72 6f 72 movabs $0x43203a726f727245,%rax + 401dc8: 3a 20 43 + 401dcb: 49 89 06 mov %rax,(%r14) + 401dce: 48 b8 6c 69 65 6e 74 movabs $0x6e7520746e65696c,%rax + 401dd5: 20 75 6e + 401dd8: 49 89 46 08 mov %rax,0x8(%r14) + 401ddc: 48 b8 61 62 6c 65 20 movabs $0x206f7420656c6261,%rax + 401de3: 74 6f 20 + 401de6: 49 89 46 10 mov %rax,0x10(%r14) + 401dea: 48 b8 72 65 61 64 20 movabs $0x6174732064616572,%rax + 401df1: 73 74 61 + 401df4: 49 89 46 18 mov %rax,0x18(%r14) + 401df8: 48 b8 74 75 73 20 6d movabs $0x7373656d20737574,%rax + 401dff: 65 73 73 + 401e02: 49 89 46 20 mov %rax,0x20(%r14) + 401e06: 48 b8 61 67 65 20 66 movabs $0x6d6f726620656761,%rax + 401e0d: 72 6f 6d + 401e10: 49 89 46 28 mov %rax,0x28(%r14) + 401e14: 48 b8 20 73 65 72 76 movabs $0x72657672657320,%rax + 401e1b: 65 72 00 + 401e1e: 49 89 46 30 mov %rax,0x30(%r14) + 401e22: 44 89 e7 mov %r12d,%edi + 401e25: e8 26 ed ff ff callq 400b50 + 401e2a: b8 ff ff ff ff mov $0xffffffff,%eax + 401e2f: eb 37 jmp 401e68 + 401e31: 48 8d 74 24 40 lea 0x40(%rsp),%rsi + 401e36: 4c 89 f7 mov %r14,%rdi + 401e39: e8 c2 ec ff ff callq 400b00 + 401e3e: 44 89 e7 mov %r12d,%edi + 401e41: e8 0a ed ff ff callq 400b50 + 401e46: 41 0f b6 06 movzbl (%r14),%eax + 401e4a: 83 e8 4f sub $0x4f,%eax + 401e4d: 75 0f jne 401e5e + 401e4f: 41 0f b6 46 01 movzbl 0x1(%r14),%eax + 401e54: 83 e8 4b sub $0x4b,%eax + 401e57: 75 05 jne 401e5e + 401e59: 41 0f b6 46 02 movzbl 0x2(%r14),%eax + 401e5e: 85 c0 test %eax,%eax + 401e60: 0f 95 c0 setne %al + 401e63: 0f b6 c0 movzbl %al,%eax + 401e66: f7 d8 neg %eax + 401e68: 48 8b 94 24 58 a0 00 mov 0xa058(%rsp),%rdx + 401e6f: 00 + 401e70: 64 48 33 14 25 28 00 xor %fs:0x28,%rdx + 401e77: 00 00 + 401e79: 0f 84 00 01 00 00 je 401f7f + 401e7f: e9 f6 00 00 00 jmpq 401f7a + 401e84: 48 8d 84 24 40 20 00 lea 0x2040(%rsp),%rax + 401e8b: 00 + 401e8c: 48 89 44 24 08 mov %rax,0x8(%rsp) + 401e91: 4c 89 3c 24 mov %r15,(%rsp) + 401e95: 4c 8b 4c 24 18 mov 0x18(%rsp),%r9 + 401e9a: 4c 8b 44 24 10 mov 0x10(%rsp),%r8 + 401e9f: b9 d0 26 40 00 mov $0x4026d0,%ecx + 401ea4: ba 00 20 00 00 mov $0x2000,%edx + 401ea9: be 01 00 00 00 mov $0x1,%esi + 401eae: 48 8d 7c 24 40 lea 0x40(%rsp),%rdi + 401eb3: b8 00 00 00 00 mov $0x0,%eax + 401eb8: e8 b3 ed ff ff callq 400c70 <__sprintf_chk@plt> + 401ebd: 48 8d 7c 24 40 lea 0x40(%rsp),%rdi + 401ec2: b8 00 00 00 00 mov $0x0,%eax + 401ec7: 48 c7 c1 ff ff ff ff mov $0xffffffffffffffff,%rcx + 401ece: f2 ae repnz scas %es:(%rdi),%al + 401ed0: 48 f7 d1 not %rcx + 401ed3: 48 83 e9 01 sub $0x1,%rcx + 401ed7: 49 89 cd mov %rcx,%r13 + 401eda: 0f 84 f8 fc ff ff je 401bd8 + 401ee0: 48 89 cb mov %rcx,%rbx + 401ee3: 48 8d 6c 24 40 lea 0x40(%rsp),%rbp + 401ee8: e9 5d fc ff ff jmpq 401b4a + 401eed: 48 b8 45 72 72 6f 72 movabs $0x52203a726f727245,%rax + 401ef4: 3a 20 52 + 401ef7: 49 89 06 mov %rax,(%r14) + 401efa: 48 b8 65 73 75 6c 74 movabs $0x747320746c757365,%rax + 401f01: 20 73 74 + 401f04: 49 89 46 08 mov %rax,0x8(%r14) + 401f08: 48 b8 72 69 6e 67 20 movabs $0x6e6f6320676e6972,%rax + 401f0f: 63 6f 6e + 401f12: 49 89 46 10 mov %rax,0x10(%r14) + 401f16: 48 b8 74 61 69 6e 73 movabs $0x6e6120736e696174,%rax + 401f1d: 20 61 6e + 401f20: 49 89 46 18 mov %rax,0x18(%r14) + 401f24: 48 b8 20 69 6c 6c 65 movabs $0x6c6167656c6c6920,%rax + 401f2b: 67 61 6c + 401f2e: 49 89 46 20 mov %rax,0x20(%r14) + 401f32: 48 b8 20 6f 72 20 75 movabs $0x72706e7520726f20,%rax + 401f39: 6e 70 72 + 401f3c: 49 89 46 28 mov %rax,0x28(%r14) + 401f40: 48 b8 69 6e 74 61 62 movabs $0x20656c6261746e69,%rax + 401f47: 6c 65 20 + 401f4a: 49 89 46 30 mov %rax,0x30(%r14) + 401f4e: 48 b8 63 68 61 72 61 movabs $0x6574636172616863,%rax + 401f55: 63 74 65 + 401f58: 49 89 46 38 mov %rax,0x38(%r14) + 401f5c: 66 41 c7 46 40 72 2e movw $0x2e72,0x40(%r14) + 401f63: 41 c6 46 42 00 movb $0x0,0x42(%r14) + 401f68: 44 89 e7 mov %r12d,%edi + 401f6b: e8 e0 eb ff ff callq 400b50 + 401f70: b8 ff ff ff ff mov $0xffffffff,%eax + 401f75: e9 ee fe ff ff jmpq 401e68 + 401f7a: e8 b1 eb ff ff callq 400b30 <__stack_chk_fail@plt> + 401f7f: 48 81 c4 68 a0 00 00 add $0xa068,%rsp + 401f86: 5b pop %rbx + 401f87: 5d pop %rbp + 401f88: 41 5c pop %r12 + 401f8a: 41 5d pop %r13 + 401f8c: 41 5e pop %r14 + 401f8e: 41 5f pop %r15 + 401f90: c3 retq + +0000000000401f91 : + 401f91: 53 push %rbx + 401f92: 89 fb mov %edi,%ebx + 401f94: 85 ff test %edi,%edi + 401f96: 74 1e je 401fb6 + 401f98: be 60 16 40 00 mov $0x401660,%esi + 401f9d: bf 0e 00 00 00 mov $0xe,%edi + 401fa2: e8 e9 eb ff ff callq 400b90 + 401fa7: 85 db test %ebx,%ebx + 401fa9: bf 00 00 00 00 mov $0x0,%edi + 401fae: 0f 49 fb cmovns %ebx,%edi + 401fb1: e8 8a eb ff ff callq 400b40 + 401fb6: 5b pop %rbx + 401fb7: c3 retq + +0000000000401fb8 : + 401fb8: 55 push %rbp + 401fb9: 53 push %rbx + 401fba: 48 83 ec 28 sub $0x28,%rsp + 401fbe: 48 89 fd mov %rdi,%rbp + 401fc1: 64 48 8b 04 25 28 00 mov %fs:0x28,%rax + 401fc8: 00 00 + 401fca: 48 89 44 24 18 mov %rax,0x18(%rsp) + 401fcf: 31 c0 xor %eax,%eax + 401fd1: be 01 00 00 00 mov $0x1,%esi + 401fd6: bf 0d 00 00 00 mov $0xd,%edi + 401fdb: e8 b0 eb ff ff callq 400b90 + 401fe0: be 01 00 00 00 mov $0x1,%esi + 401fe5: bf 1d 00 00 00 mov $0x1d,%edi + 401fea: e8 a1 eb ff ff callq 400b90 + 401fef: be 01 00 00 00 mov $0x1,%esi + 401ff4: bf 1d 00 00 00 mov $0x1d,%edi + 401ff9: e8 92 eb ff ff callq 400b90 + 401ffe: ba 00 00 00 00 mov $0x0,%edx + 402003: be 01 00 00 00 mov $0x1,%esi + 402008: bf 02 00 00 00 mov $0x2,%edi + 40200d: e8 6e ec ff ff callq 400c80 + 402012: 89 c3 mov %eax,%ebx + 402014: 85 c0 test %eax,%eax + 402016: 79 4f jns 402067 + 402018: 48 b8 45 72 72 6f 72 movabs $0x43203a726f727245,%rax + 40201f: 3a 20 43 + 402022: 48 89 45 00 mov %rax,0x0(%rbp) + 402026: 48 b8 6c 69 65 6e 74 movabs $0x6e7520746e65696c,%rax + 40202d: 20 75 6e + 402030: 48 89 45 08 mov %rax,0x8(%rbp) + 402034: 48 b8 61 62 6c 65 20 movabs $0x206f7420656c6261,%rax + 40203b: 74 6f 20 + 40203e: 48 89 45 10 mov %rax,0x10(%rbp) + 402042: 48 b8 63 72 65 61 74 movabs $0x7320657461657263,%rax + 402049: 65 20 73 + 40204c: 48 89 45 18 mov %rax,0x18(%rbp) + 402050: c7 45 20 6f 63 6b 65 movl $0x656b636f,0x20(%rbp) + 402057: 66 c7 45 24 74 00 movw $0x74,0x24(%rbp) + 40205d: b8 ff ff ff ff mov $0xffffffff,%eax + 402062: e9 0a 01 00 00 jmpq 402171 + 402067: bf 60 27 40 00 mov $0x402760,%edi + 40206c: e8 2f eb ff ff callq 400ba0 + 402071: 48 85 c0 test %rax,%rax + 402074: 75 68 jne 4020de + 402076: 48 b8 45 72 72 6f 72 movabs $0x44203a726f727245,%rax + 40207d: 3a 20 44 + 402080: 48 89 45 00 mov %rax,0x0(%rbp) + 402084: 48 b8 4e 53 20 69 73 movabs $0x6e7520736920534e,%rax + 40208b: 20 75 6e + 40208e: 48 89 45 08 mov %rax,0x8(%rbp) + 402092: 48 b8 61 62 6c 65 20 movabs $0x206f7420656c6261,%rax + 402099: 74 6f 20 + 40209c: 48 89 45 10 mov %rax,0x10(%rbp) + 4020a0: 48 b8 72 65 73 6f 6c movabs $0x2065766c6f736572,%rax + 4020a7: 76 65 20 + 4020aa: 48 89 45 18 mov %rax,0x18(%rbp) + 4020ae: 48 b8 73 65 72 76 65 movabs $0x6120726576726573,%rax + 4020b5: 72 20 61 + 4020b8: 48 89 45 20 mov %rax,0x20(%rbp) + 4020bc: c7 45 28 64 64 72 65 movl $0x65726464,0x28(%rbp) + 4020c3: 66 c7 45 2c 73 73 movw $0x7373,0x2c(%rbp) + 4020c9: c6 45 2e 00 movb $0x0,0x2e(%rbp) + 4020cd: 89 df mov %ebx,%edi + 4020cf: e8 7c ea ff ff callq 400b50 + 4020d4: b8 ff ff ff ff mov $0xffffffff,%eax + 4020d9: e9 93 00 00 00 jmpq 402171 + 4020de: 48 c7 04 24 00 00 00 movq $0x0,(%rsp) + 4020e5: 00 + 4020e6: 48 c7 44 24 08 00 00 movq $0x0,0x8(%rsp) + 4020ed: 00 00 + 4020ef: 66 c7 04 24 02 00 movw $0x2,(%rsp) + 4020f5: 48 63 50 14 movslq 0x14(%rax),%rdx + 4020f9: 48 8b 40 18 mov 0x18(%rax),%rax + 4020fd: 48 8d 7c 24 04 lea 0x4(%rsp),%rdi + 402102: b9 0c 00 00 00 mov $0xc,%ecx + 402107: 48 8b 30 mov (%rax),%rsi + 40210a: e8 a1 ea ff ff callq 400bb0 <__memmove_chk@plt> + 40210f: 66 c7 44 24 02 3b 6e movw $0x6e3b,0x2(%rsp) + 402116: ba 10 00 00 00 mov $0x10,%edx + 40211b: 48 89 e6 mov %rsp,%rsi + 40211e: 89 df mov %ebx,%edi + 402120: e8 0b eb ff ff callq 400c30 + 402125: 85 c0 test %eax,%eax + 402127: 79 32 jns 40215b + 402129: 41 b8 60 27 40 00 mov $0x402760,%r8d + 40212f: b9 20 27 40 00 mov $0x402720,%ecx + 402134: 48 c7 c2 ff ff ff ff mov $0xffffffffffffffff,%rdx + 40213b: be 01 00 00 00 mov $0x1,%esi + 402140: 48 89 ef mov %rbp,%rdi + 402143: b8 00 00 00 00 mov $0x0,%eax + 402148: e8 23 eb ff ff callq 400c70 <__sprintf_chk@plt> + 40214d: 89 df mov %ebx,%edi + 40214f: e8 fc e9 ff ff callq 400b50 + 402154: b8 ff ff ff ff mov $0xffffffff,%eax + 402159: eb 16 jmp 402171 + 40215b: 89 df mov %ebx,%edi + 40215d: e8 ee e9 ff ff callq 400b50 + 402162: 66 c7 45 00 4f 4b movw $0x4b4f,0x0(%rbp) + 402168: c6 45 02 00 movb $0x0,0x2(%rbp) + 40216c: b8 00 00 00 00 mov $0x0,%eax + 402171: 48 8b 4c 24 18 mov 0x18(%rsp),%rcx + 402176: 64 48 33 0c 25 28 00 xor %fs:0x28,%rcx + 40217d: 00 00 + 40217f: 74 05 je 402186 + 402181: e8 aa e9 ff ff callq 400b30 <__stack_chk_fail@plt> + 402186: 48 83 c4 28 add $0x28,%rsp + 40218a: 5b pop %rbx + 40218b: 5d pop %rbp + 40218c: c3 retq + +000000000040218d : + 40218d: 53 push %rbx + 40218e: 48 83 ec 10 sub $0x10,%rsp + 402192: 48 89 cb mov %rcx,%rbx + 402195: 85 d2 test %edx,%edx + 402197: 74 27 je 4021c0 + 402199: 48 89 f2 mov %rsi,%rdx + 40219c: be 78 27 40 00 mov $0x402778,%esi + 4021a1: bf 01 00 00 00 mov $0x1,%edi + 4021a6: b8 00 00 00 00 mov $0x0,%eax + 4021ab: e8 50 ea ff ff callq 400c00 <__printf_chk@plt> + 4021b0: 66 c7 03 4f 4b movw $0x4b4f,(%rbx) + 4021b5: c6 43 02 00 movb $0x0,0x2(%rbx) + 4021b9: b8 00 00 00 00 mov $0x0,%eax + 4021be: eb 3e jmp 4021fe + 4021c0: 48 85 ff test %rdi,%rdi + 4021c3: 74 2b je 4021f0 + 4021c5: 80 3f 00 cmpb $0x0,(%rdi) + 4021c8: 74 26 je 4021f0 + 4021ca: 48 89 0c 24 mov %rcx,(%rsp) + 4021ce: 49 89 f1 mov %rsi,%r9 + 4021d1: 41 b8 ec 22 40 00 mov $0x4022ec,%r8d + 4021d7: 48 89 f9 mov %rdi,%rcx + 4021da: ba 8f 27 40 00 mov $0x40278f,%edx + 4021df: be 6e 3b 00 00 mov $0x3b6e,%esi + 4021e4: bf 60 27 40 00 mov $0x402760,%edi + 4021e9: e8 be f5 ff ff callq 4017ac + 4021ee: eb 0e jmp 4021fe + 4021f0: 66 c7 03 4f 4b movw $0x4b4f,(%rbx) + 4021f5: c6 43 02 00 movb $0x0,0x2(%rbx) + 4021f9: b8 00 00 00 00 mov $0x0,%eax + 4021fe: 48 83 c4 10 add $0x10,%rsp + 402202: 5b pop %rbx + 402203: c3 retq + 402204: 90 nop + 402205: 90 nop + 402206: 90 nop + 402207: 90 nop + 402208: 90 nop + 402209: 90 nop + 40220a: 90 nop + 40220b: 90 nop + 40220c: 90 nop + 40220d: 90 nop + 40220e: 90 nop + 40220f: 90 nop + +0000000000402210 <__libc_csu_init>: + 402210: 48 89 6c 24 d8 mov %rbp,-0x28(%rsp) + 402215: 4c 89 64 24 e0 mov %r12,-0x20(%rsp) + 40221a: 48 8d 2d df 0b 20 00 lea 0x200bdf(%rip),%rbp # 602e00 <__do_global_dtors_aux_fini_array_entry> + 402221: 4c 8d 25 d0 0b 20 00 lea 0x200bd0(%rip),%r12 # 602df8 <__frame_dummy_init_array_entry> + 402228: 4c 89 6c 24 e8 mov %r13,-0x18(%rsp) + 40222d: 4c 89 74 24 f0 mov %r14,-0x10(%rsp) + 402232: 4c 89 7c 24 f8 mov %r15,-0x8(%rsp) + 402237: 48 89 5c 24 d0 mov %rbx,-0x30(%rsp) + 40223c: 48 83 ec 38 sub $0x38,%rsp + 402240: 4c 29 e5 sub %r12,%rbp + 402243: 41 89 fd mov %edi,%r13d + 402246: 49 89 f6 mov %rsi,%r14 + 402249: 48 c1 fd 03 sar $0x3,%rbp + 40224d: 49 89 d7 mov %rdx,%r15 + 402250: e8 6b e8 ff ff callq 400ac0 <_init> + 402255: 48 85 ed test %rbp,%rbp + 402258: 74 1c je 402276 <__libc_csu_init+0x66> + 40225a: 31 db xor %ebx,%ebx + 40225c: 0f 1f 40 00 nopl 0x0(%rax) + 402260: 4c 89 fa mov %r15,%rdx + 402263: 4c 89 f6 mov %r14,%rsi + 402266: 44 89 ef mov %r13d,%edi + 402269: 41 ff 14 dc callq *(%r12,%rbx,8) + 40226d: 48 83 c3 01 add $0x1,%rbx + 402271: 48 39 eb cmp %rbp,%rbx + 402274: 75 ea jne 402260 <__libc_csu_init+0x50> + 402276: 48 8b 5c 24 08 mov 0x8(%rsp),%rbx + 40227b: 48 8b 6c 24 10 mov 0x10(%rsp),%rbp + 402280: 4c 8b 64 24 18 mov 0x18(%rsp),%r12 + 402285: 4c 8b 6c 24 20 mov 0x20(%rsp),%r13 + 40228a: 4c 8b 74 24 28 mov 0x28(%rsp),%r14 + 40228f: 4c 8b 7c 24 30 mov 0x30(%rsp),%r15 + 402294: 48 83 c4 38 add $0x38,%rsp + 402298: c3 retq + 402299: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) + +00000000004022a0 <__libc_csu_fini>: + 4022a0: f3 c3 repz retq + 4022a2: 90 nop + 4022a3: 90 nop + +Disassembly of section .fini: + +00000000004022a4 <_fini>: + 4022a4: 48 83 ec 08 sub $0x8,%rsp + 4022a8: 48 83 c4 08 add $0x8,%rsp + 4022ac: c3 retq diff --git a/labs/bomb_lab/solve_note.md b/labs/bomb_lab/solve_note.md new file mode 100644 index 0000000..454887f --- /dev/null +++ b/labs/bomb_lab/solve_note.md @@ -0,0 +1,78 @@ +### 1. 使用 objdump 反编译 bomb + +```objdump -d bomb > bomb.s``` + +### 2. 查找 main 函数 + +发现调用了函数 phase_1, phase_2 等等函数 + +猜测这些函数即用来验证输入字符串的正确性 + +### 3. 查看函数 phase_1 + +发现调用了函数 strings_not_equal + +并且在调用之前为 %esi 赋值 0x402400 + +说明将其作为参数传进然后作为验证 + +猜测其为所需字符串的地址 + +### 4. 使用 gdb 查看字符串 + +为函数 phase_1 设置断点 ```break phase_1``` + +打印地址处字符串 ```print (char *) 0x402400``` + +得到 phase1 + +### 5. 查看函数 phase_2 + +发现调用函数 read_six_numbers + +说明输入需要 6 个数字 + +查看后续汇编代码发现进行了循环控制 + +根据汇编代码得到 6 个数字 + +由于输入函数用的是 scanf，故不用考虑转为字符，直接输入 6 个数字 + +得到 phase2 + +### 6. 查看函数 phase_3 + +发现调用了 scanf 函数 + +观察参数寄存器 %rcx, %rdx, %rsi + +使用 gdb 知需要输入两个数字 + +cmpl 得知第一个数字需要小于 0x7 + +使用 gdb 观察间接跳转指令 jmpq + +指向后面的 switch 控制流 + +从而得知输入的两个数字相关联 + +即本题多解 + +得到其中一个 phase3 + +### 7. 查看函数 phase_4 + +与 phase_3 同样的输入 + +第一个数字小于等于 0xe + +发现调用 func4 且返回值需为 0 + +观察调用后代码发现第二个数为 0 + +观察 func4 发现第一个数需为 7 + +得到 phase4 + +### 8. 查看函数 phase_5 + diff --git a/labs/data_lab/bits.c b/labs/data_lab/bits.c index 7820cc4..63b3a2e 100644 --- a/labs/data_lab/bits.c +++ b/labs/data_lab/bits.c @@ -351,6 +351,7 @@ unsigned floatPower2(int x) { if (x >= 0x80) return 0x7F800000; // nan if (x < 0) { + if (x == 0x80000000) return 0; x = ~x + 1; if (x >= 0x7F) return 0; e -= x; diff --git a/quiz/test_quiz.c b/quiz/test_quiz.c index 35b58b2..2bf9a41 100644 --- a/quiz/test_quiz.c +++ b/quiz/test_quiz.c @@ -6,6 +6,7 @@ void test_all() { + EXPECT_EQ_TRUE(-1 > 0x80); // compare as int } int main() {