ELF binaries & assembly hacking

[CTho9305]

How do I find out what system call is being called? I know that the last piece of my program's code that runs before the call is a jump to 0x4006b8b0 (which is in the shared library space), but I don't know how to find out what the actual call is (e.g. printf, scanf, and so on). No, I don't have source code. No, I'm not breaking any laws.

 

[CTho9305]

Never mind.

 

[HigherGround]

strace?

 

[CTho9305]

objdump -t combined with careful gdbing. I couldn't use ltrace/strace, because I needed a breakpoint before a certain line (e.g. the line that would inform my professor that I entered the wrong password again). When you are defusing a binary bomb, you need to make sure the explode routine doesn't get run