@@ -191,23 +191,44 @@ |
mov 0x?(%reg),%reg # ? <heuristic_open_routine_idx> |
cmp %reg,%reg |
jae ? <wtap_open_offline+0x?> |
+ mov 0x?(%reg),%reg # ? <_DYNAMIC+0x?> |
+ jmp ? <wtap_open_offline+0x?> |
+ nopl 0x?(%reg) |
+ mov 0x?(%reg),%reg |
+ add $0x?,%reg |
+ cmp %reg,%reg |
+ jbe ? <wtap_open_offline+0x?> |
mov %reg,%reg |
+ lea (%reg,%reg,2),%reg |
+ mov (%reg),%reg |
+ shl $0x?,%reg |
+ cmpq $0x?,0x?(%reg,%reg,1) |
+ jne ? <wtap_open_offline+0x?> |
+ mov 0x?(%reg),%reg |
+ xor %reg,%reg |
+ xor %reg,%reg |
mov %reg,%reg |
- callq ? <heuristic_uses_extension> |
- test %reg,%reg |
+ mov %reg,0x?(%reg) |
+ callq ? <file_seek@plt> |
+ cmp $0x?,%reg |
+ mov 0x?(%reg),%reg |
je ? <wtap_open_offline+0x?> |
- add $0x?,%reg |
- cmp %reg,0x?(%reg) |
- ja ? <wtap_open_offline+0x?> |
+ add (%reg),%reg |
+ mov %reg,0x?(%reg) |
mov %reg,%reg |
- callq ? <g_free@plt> |
- nopl 0x?(%reg) |
+ mov (%reg),%reg |
mov %reg,%reg |
- xor %reg,%reg |
- callq ? <wtap_close@plt> |
- movl $0x?,0x?(%reg) |
+ mov 0x?(%reg),%reg |
+ mov %reg,0x?(%reg) |
+ callq *0x?(%reg) |
+ cmp $0x?,%reg |
+ je ? <wtap_open_offline+0x?> |
+ cmp $0x?,%reg |
+ mov 0x?(%reg),%reg |
+ je ? <wtap_open_offline+0x?> |
+ mov 0x?(%reg),%reg # ? <open_info_arr> |
jmpq ? <wtap_open_offline+0x?> |
- nopw %reg:0x?(%reg,%reg,1) |
+ xchg %reg,%reg |
mov %reg,%reg |
callq ? <file_open> |
test %reg,%reg |
|
@@ -333,6 +354,14 @@ |
movl $0x?,0x?(%reg) |
xor %reg,%reg |
jmpq ? <wtap_open_offline+0x?> |
+ mov %reg,%reg |
+ callq ? <g_free@plt> |
+ xchg %reg,%reg |
+ mov %reg,%reg |
+ xor %reg,%reg |
+ callq ? <wtap_close@plt> |
+ movl $0x?,0x?(%reg) |
+ jmpq ? <wtap_open_offline+0x?> |
mov 0x?(%reg),%reg |
xor %reg,%reg |
xor %reg,%reg |
|
@@ -404,7 +433,7 @@ |
cmp %reg,0x?(%reg) |
ja ? <wtap_open_offline+0x?> |
jmpq ? <wtap_open_offline+0x?> |
- nopl 0x?(%reg,%reg,1) |
+ nopl 0x?(%reg) |
mov (%reg),%reg |
mov %reg,%reg |
xor %reg,%reg |
|
@@ -413,36 +442,53 @@ |
mov %reg,%reg |
callq ? <g_free@plt> |
jmpq ? <wtap_open_offline+0x?> |
+ mov -0x?(%reg,%reg,1),%reg |
+ callq ? <g_strdup@plt> |
+ mov %reg,%reg |
+ mov %reg,%reg |
+ callq ? <g_strfreev@plt> |
+ jmpq ? <wtap_open_offline+0x?> |
+ mov %reg,%reg |
+ callq ? <g_free@plt> |
+ jmpq ? <wtap_open_offline+0x?> |
+ mov 0x?(%reg),%reg # ? <heuristic_open_routine_idx> |
+ cmp %reg,%reg |
+ jb ? <wtap_open_offline+0x?> |
+ jmpq ? <wtap_open_offline+0x?> |
+ nopl 0x?(%reg) |
+ add $0x?,%reg |
+ cmp %reg,0x?(%reg) |
+ jbe ? <wtap_open_offline+0x?> |
+ mov %reg,%reg |
+ lea (%reg,%reg,2),%reg |
+ mov (%reg),%reg |
+ shl $0x?,%reg |
+ cmpq $0x?,0x?(%reg,%reg,1) |
+ mov %reg,0x?(%reg) |
+ je ? <wtap_open_offline+0x?> |
+ mov %reg,%reg |
+ mov %reg,%reg |
+ callq ? <heuristic_uses_extension> |
+ test %reg,%reg |
+ jne ? <wtap_open_offline+0x?> |
mov 0x?(%reg),%reg |
xor %reg,%reg |
xor %reg,%reg |
mov %reg,%reg |
callq ? <file_seek@plt> |
- cmp $0x?,%reg |
+ add $0x?,%reg |
+ mov 0x?(%reg),%reg |
je ? <wtap_open_offline+0x?> |
- mov 0x?(%reg),%reg # ? <_DYNAMIC+0x?> |
- mov %reg,%reg |
+ add (%reg),%reg |
+ mov (%reg),%reg |
mov %reg,%reg |
- lea (%reg,%reg,2),%reg |
mov %reg,%reg |
- shl $0x?,%reg |
- add (%reg),%reg |
mov 0x?(%reg),%reg |
mov %reg,0x?(%reg) |
- mov (%reg),%reg |
callq *0x?(%reg) |
cmp $0x?,%reg |
je ? <wtap_open_offline+0x?> |
- cmp $0x?,%reg |
+ sub $0x?,%reg |
je ? <wtap_open_offline+0x?> |
mov 0x?(%reg),%reg # ? <open_info_arr> |
jmpq ? <wtap_open_offline+0x?> |
- mov -0x?(%reg,%reg,1),%reg |
- callq ? <g_strdup@plt> |
- mov %reg,%reg |
- mov %reg,%reg |
- callq ? <g_strfreev@plt> |
- jmpq ? <wtap_open_offline+0x?> |
- mov %reg,%reg |
- callq ? <g_free@plt> |
- jmpq ? <wtap_open_offline+0x?> |