| @@ -191,23 +191,44 @@ |
| mov 0x?(%reg),%reg # ? <heuristic_open_routine_idx> |
| cmp %reg,%reg |
| jae ? <wtap_open_offline+0x?> |
| + mov 0x?(%reg),%reg # ? <_DYNAMIC+0x?> |
| + jmp ? <wtap_open_offline+0x?> |
| + nopl 0x?(%reg) |
| + mov 0x?(%reg),%reg |
| + add $0x?,%reg |
| + cmp %reg,%reg |
| + jbe ? <wtap_open_offline+0x?> |
| mov %reg,%reg |
| + lea (%reg,%reg,2),%reg |
| + mov (%reg),%reg |
| + shl $0x?,%reg |
| + cmpq $0x?,0x?(%reg,%reg,1) |
| + jne ? <wtap_open_offline+0x?> |
| + mov 0x?(%reg),%reg |
| + xor %reg,%reg |
| + xor %reg,%reg |
| mov %reg,%reg |
| - callq ? <heuristic_uses_extension> |
| - test %reg,%reg |
| + mov %reg,0x?(%reg) |
| + callq ? <file_seek@plt> |
| + cmp $0x?,%reg |
| + mov 0x?(%reg),%reg |
| je ? <wtap_open_offline+0x?> |
| - add $0x?,%reg |
| - cmp %reg,0x?(%reg) |
| - ja ? <wtap_open_offline+0x?> |
| + add (%reg),%reg |
| + mov %reg,0x?(%reg) |
| mov %reg,%reg |
| - callq ? <g_free@plt> |
| - nopl 0x?(%reg) |
| + mov (%reg),%reg |
| mov %reg,%reg |
| - xor %reg,%reg |
| - callq ? <wtap_close@plt> |
| - movl $0x?,0x?(%reg) |
| + mov 0x?(%reg),%reg |
| + mov %reg,0x?(%reg) |
| + callq *0x?(%reg) |
| + cmp $0x?,%reg |
| + je ? <wtap_open_offline+0x?> |
| + cmp $0x?,%reg |
| + mov 0x?(%reg),%reg |
| + je ? <wtap_open_offline+0x?> |
| + mov 0x?(%reg),%reg # ? <open_info_arr> |
| jmpq ? <wtap_open_offline+0x?> |
| - nopw %reg:0x?(%reg,%reg,1) |
| + xchg %reg,%reg |
| mov %reg,%reg |
| callq ? <file_open> |
| test %reg,%reg |
| |
| @@ -333,6 +354,14 @@ |
| movl $0x?,0x?(%reg) |
| xor %reg,%reg |
| jmpq ? <wtap_open_offline+0x?> |
| + mov %reg,%reg |
| + callq ? <g_free@plt> |
| + xchg %reg,%reg |
| + mov %reg,%reg |
| + xor %reg,%reg |
| + callq ? <wtap_close@plt> |
| + movl $0x?,0x?(%reg) |
| + jmpq ? <wtap_open_offline+0x?> |
| mov 0x?(%reg),%reg |
| xor %reg,%reg |
| xor %reg,%reg |
| |
| @@ -404,7 +433,7 @@ |
| cmp %reg,0x?(%reg) |
| ja ? <wtap_open_offline+0x?> |
| jmpq ? <wtap_open_offline+0x?> |
| - nopl 0x?(%reg,%reg,1) |
| + nopl 0x?(%reg) |
| mov (%reg),%reg |
| mov %reg,%reg |
| xor %reg,%reg |
| |
| @@ -413,36 +442,53 @@ |
| mov %reg,%reg |
| callq ? <g_free@plt> |
| jmpq ? <wtap_open_offline+0x?> |
| + mov -0x?(%reg,%reg,1),%reg |
| + callq ? <g_strdup@plt> |
| + mov %reg,%reg |
| + mov %reg,%reg |
| + callq ? <g_strfreev@plt> |
| + jmpq ? <wtap_open_offline+0x?> |
| + mov %reg,%reg |
| + callq ? <g_free@plt> |
| + jmpq ? <wtap_open_offline+0x?> |
| + mov 0x?(%reg),%reg # ? <heuristic_open_routine_idx> |
| + cmp %reg,%reg |
| + jb ? <wtap_open_offline+0x?> |
| + jmpq ? <wtap_open_offline+0x?> |
| + nopl 0x?(%reg) |
| + add $0x?,%reg |
| + cmp %reg,0x?(%reg) |
| + jbe ? <wtap_open_offline+0x?> |
| + mov %reg,%reg |
| + lea (%reg,%reg,2),%reg |
| + mov (%reg),%reg |
| + shl $0x?,%reg |
| + cmpq $0x?,0x?(%reg,%reg,1) |
| + mov %reg,0x?(%reg) |
| + je ? <wtap_open_offline+0x?> |
| + mov %reg,%reg |
| + mov %reg,%reg |
| + callq ? <heuristic_uses_extension> |
| + test %reg,%reg |
| + jne ? <wtap_open_offline+0x?> |
| mov 0x?(%reg),%reg |
| xor %reg,%reg |
| xor %reg,%reg |
| mov %reg,%reg |
| callq ? <file_seek@plt> |
| - cmp $0x?,%reg |
| + add $0x?,%reg |
| + mov 0x?(%reg),%reg |
| je ? <wtap_open_offline+0x?> |
| - mov 0x?(%reg),%reg # ? <_DYNAMIC+0x?> |
| - mov %reg,%reg |
| + add (%reg),%reg |
| + mov (%reg),%reg |
| mov %reg,%reg |
| - lea (%reg,%reg,2),%reg |
| mov %reg,%reg |
| - shl $0x?,%reg |
| - add (%reg),%reg |
| mov 0x?(%reg),%reg |
| mov %reg,0x?(%reg) |
| - mov (%reg),%reg |
| callq *0x?(%reg) |
| cmp $0x?,%reg |
| je ? <wtap_open_offline+0x?> |
| - cmp $0x?,%reg |
| + sub $0x?,%reg |
| je ? <wtap_open_offline+0x?> |
| mov 0x?(%reg),%reg # ? <open_info_arr> |
| jmpq ? <wtap_open_offline+0x?> |
| - mov -0x?(%reg,%reg,1),%reg |
| - callq ? <g_strdup@plt> |
| - mov %reg,%reg |
| - mov %reg,%reg |
| - callq ? <g_strfreev@plt> |
| - jmpq ? <wtap_open_offline+0x?> |
| - mov %reg,%reg |
| - callq ? <g_free@plt> |
| - jmpq ? <wtap_open_offline+0x?> |