OLD | NEW |
| (Empty) |
1 @hex: | |
2 # test 4: a big chunk of code whose origin is not clear. | |
3 8d 4c 24 04 | |
4 83 e4 f0 | |
5 ff 71 fc | |
6 55 | |
7 89 e5 | |
8 51 | |
9 66 90 | |
10 83 ec 24 | |
11 89 4d e8 | |
12 c7 45 f4 0a 00 00 00 | |
13 8b 45 e8 | |
14 83 38 01 | |
15 7f 2b | |
16 8b 55 e8 | |
17 8b 42 04 | |
18 8b 00 | |
19 8d 76 00 | |
20 89 44 24 04 | |
21 c7 04 24 54 14 00 08 | |
22 e8 c0 02 00 00 | |
23 c7 04 24 01 00 00 00 | |
24 8d 74 26 00 | |
25 e8 c0 01 00 00 | |
26 8b 55 e8 | |
27 8b 42 04 | |
28 83 c0 04 | |
29 8b 00 | |
30 89 04 24 | |
31 66 90 | |
32 8d 74 26 00 | |
33 8d bc 27 00 00 00 00 | |
34 e8 90 09 00 00 | |
35 89 45 f8 | |
36 8b 45 e8 | |
37 83 38 02 | |
38 7e 25 | |
39 8b 55 e8 | |
40 66 90 | |
41 8b 42 04 | |
42 83 c0 08 | |
43 8b 00 | |
44 89 04 24 | |
45 e8 70 09 00 00 | |
46 89 45 f4 | |
47 8d b6 00 00 00 00 | |
48 8d bc 27 00 00 00 00 | |
49 8b 45 f4 | |
50 a3 28 2f 00 08 | |
51 eb 26 | |
52 8d b6 00 00 00 00 | |
53 c7 44 24 08 03 00 00 00 | |
54 c7 44 24 04 01 00 00 00 | |
55 8b 45 f4 | |
56 89 04 24 | |
57 90 | |
58 8d 74 26 00 | |
59 e8 20 00 00 00 | |
60 83 7d f8 00 | |
61 0f 9f c0 | |
62 83 6d f8 01 | |
63 84 c0 | |
64 8d 76 00 | |
65 75 ce | |
66 c7 04 24 00 00 00 00 | |
67 66 90 | |
68 e8 20 01 00 00 | |
69 55 | |
70 89 e5 | |
71 83 ec 1c | |
72 83 7d 08 01 | |
73 75 44 | |
74 8b 55 0c | |
75 90 | |
76 8b 04 95 24 2f 00 08 | |
77 83 e8 01 | |
78 8d b6 00 00 00 00 | |
79 89 04 95 24 2f 00 08 | |
80 8b 55 10 | |
81 8d b6 00 00 00 00 | |
82 8b 04 95 24 2f 00 08 | |
83 83 c0 01 | |
84 8d b6 00 00 00 00 | |
85 89 04 95 24 2f 00 08 | |
86 eb 77 | |
87 8d b4 26 00 00 00 00 | |
88 8b 45 10 | |
89 8b 55 0c | |
90 01 c2 | |
91 b8 06 00 00 00 | |
92 29 d0 | |
93 f4 | |
94 @nval: | |
95 VALIDATOR: 4b: JUMP TARGET out of range | |
96 VALIDATOR: eb: JUMP TARGET out of range | |
97 VALIDATOR: 137: JUMP TARGET out of range | |
98 *** <input> IS UNSAFE *** | |
99 @nvals: | |
100 VALIDATOR: 4b: JUMP TARGET out of range | |
101 VALIDATOR: eb: JUMP TARGET out of range | |
102 VALIDATOR: 137: JUMP TARGET out of range | |
103 *** <input> IS UNSAFE *** | |
104 | |
105 Opcode Histogram; | |
106 1 0x01 1 0x0f 1 0x29 1 0x51 | |
107 2 0x55 2 0x75 1 0x7e 1 0x7f | |
108 12 0x83 1 0x84 11 0x89 19 0x8b | |
109 14 0x8d 6 0x90 1 0xa3 1 0xb8 | |
110 6 0xc7 6 0xe8 2 0xeb 1 0xf4 | |
111 1 0xff | |
112 Analysis Summary: | |
113 91 Checked instructions | |
114 18 checked jump targets | |
115 0 calls/jumps need dynamic checking (0.00%) | |
116 | |
117 Problems: | |
118 0 illegal instructions | |
119 3 bad jump targets | |
120 0 illegal unprotected indirect jumps (including ret) | |
121 0 instruction alignment defects | |
122 0 segmentation errors | |
123 0 bad prefix | |
124 0 bad instruction length | |
125 0 internal errors | |
126 @nvalds: | |
127 VALIDATOR: 4b: JUMP TARGET out of range | |
128 VALIDATOR: eb: JUMP TARGET out of range | |
129 VALIDATOR: 137: JUMP TARGET out of range | |
130 *** <input> IS UNSAFE *** | |
131 | |
132 Opcode Histogram; | |
133 1 0x01 1 0x0f 1 0x29 1 0x51 | |
134 2 0x55 2 0x75 1 0x7e 1 0x7f | |
135 12 0x83 1 0x84 11 0x89 19 0x8b | |
136 14 0x8d 6 0x90 1 0xa3 1 0xb8 | |
137 6 0xc7 6 0xe8 2 0xeb 1 0xf4 | |
138 1 0xff | |
139 Analysis Summary: | |
140 91 Checked instructions | |
141 12 checked jump targets | |
142 0 calls/jumps need dynamic checking (0.00%) | |
143 | |
144 Problems: | |
145 0 illegal instructions | |
146 3 bad jump targets | |
147 0 illegal unprotected indirect jumps (including ret) | |
148 0 instruction alignment defects | |
149 0 segmentation errors | |
150 0 bad prefix | |
151 0 bad instruction length | |
152 0 internal errors | |
153 @dis: | |
154 00000000: 8d 4c 24 04 lea %ecx, %ds:[%esp+%es
p*1+0x4] | |
155 00000004: 83 e4 f0 and %esp, 0xf0 | |
156 00000007: ff 71 fc push %ds:[%ecx-0x4] | |
157 0000000a: 55 push %ebp | |
158 0000000b: 89 e5 mov %ebp, %esp | |
159 0000000d: 51 push %ecx | |
160 0000000e: 66 90 nop | |
161 00000010: 83 ec 24 sub %esp, 0x24 | |
162 00000013: 89 4d e8 mov %ss:[%ebp-0x18], %e
cx | |
163 00000016: c7 45 f4 0a 00 00 00 mov %ss:[%ebp-0xc], 0xa | |
164 0000001d: 8b 45 e8 mov %eax, %ss:[%ebp-0x1
8] | |
165 00000020: 83 38 01 cmp %ds:[%eax], 0x1 | |
166 00000023: 7f 2b jnle 0x50 | |
167 00000025: 8b 55 e8 mov %edx, %ss:[%ebp-0x1
8] | |
168 00000028: 8b 42 04 mov %eax, %ds:[%edx+0x4
] | |
169 0000002b: 8b 00 mov %eax, %ds:[%eax] | |
170 0000002d: 8d 76 00 lea %esi, %ds:[%esi] | |
171 00000030: 89 44 24 04 mov %ds:[%esp+%esp*1+0x
4], %eax | |
172 00000034: c7 04 24 54 14 00 08 mov %ds:[%esp+%esp*1],
0x8001454 | |
173 0000003b: e8 c0 02 00 00 call 0x300 | |
174 00000040: c7 04 24 01 00 00 00 mov %ds:[%esp+%esp*1],
0x1 | |
175 00000047: 8d 74 26 00 lea %esi, %ds:[%esi+%es
p*1] | |
176 0000004b: e8 c0 01 00 00 call 0x210 | |
177 00000050: 8b 55 e8 mov %edx, %ss:[%ebp-0x1
8] | |
178 00000053: 8b 42 04 mov %eax, %ds:[%edx+0x4
] | |
179 00000056: 83 c0 04 add %eax, 0x4 | |
180 00000059: 8b 00 mov %eax, %ds:[%eax] | |
181 0000005b: 89 04 24 mov %ds:[%esp+%esp*1],
%eax | |
182 0000005e: 66 90 nop | |
183 00000060: 8d 74 26 00 lea %esi, %ds:[%esi+%es
p*1] | |
184 00000064: 8d bc 27 00 00 00 00 lea %edi, %ds:[%edi+%es
p*1] | |
185 0000006b: e8 90 09 00 00 call 0xa00 | |
186 00000070: 89 45 f8 mov %ss:[%ebp-0x8], %ea
x | |
187 00000073: 8b 45 e8 mov %eax, %ss:[%ebp-0x1
8] | |
188 00000076: 83 38 02 cmp %ds:[%eax], 0x2 | |
189 00000079: 7e 25 jle 0xa0 | |
190 0000007b: 8b 55 e8 mov %edx, %ss:[%ebp-0x1
8] | |
191 0000007e: 66 90 nop | |
192 00000080: 8b 42 04 mov %eax, %ds:[%edx+0x4
] | |
193 00000083: 83 c0 08 add %eax, 0x8 | |
194 00000086: 8b 00 mov %eax, %ds:[%eax] | |
195 00000088: 89 04 24 mov %ds:[%esp+%esp*1],
%eax | |
196 0000008b: e8 70 09 00 00 call 0xa00 | |
197 00000090: 89 45 f4 mov %ss:[%ebp-0xc], %ea
x | |
198 00000093: 8d b6 00 00 00 00 lea %esi, %ds:[%esi] | |
199 00000099: 8d bc 27 00 00 00 00 lea %edi, %ds:[%edi+%es
p*1] | |
200 000000a0: 8b 45 f4 mov %eax, %ss:[%ebp-0xc
] | |
201 000000a3: a3 28 2f 00 08 mov [0x8002f28], %eax | |
202 000000a8: eb 26 jmp 0xd0 | |
203 000000aa: 8d b6 00 00 00 00 lea %esi, %ds:[%esi] | |
204 000000b0: c7 44 24 08 03 00 00 00 mov %ds:[%esp+%esp*1+0x
8], 0x3 | |
205 000000b8: c7 44 24 04 01 00 00 00 mov %ds:[%esp+%esp*1+0x
4], 0x1 | |
206 000000c0: 8b 45 f4 mov %eax, %ss:[%ebp-0xc
] | |
207 000000c3: 89 04 24 mov %ds:[%esp+%esp*1],
%eax | |
208 000000c6: 90 nop | |
209 000000c7: 8d 74 26 00 lea %esi, %ds:[%esi+%es
p*1] | |
210 000000cb: e8 20 00 00 00 call 0xf0 | |
211 000000d0: 83 7d f8 00 cmp %ss:[%ebp-0x8], 0x0 | |
212 000000d4: 0f 9f c0 setnle %al | |
213 000000d7: 83 6d f8 01 sub %ss:[%ebp-0x8], 0x1 | |
214 000000db: 84 c0 test %al, %al | |
215 000000dd: 8d 76 00 lea %esi, %ds:[%esi] | |
216 000000e0: 75 ce jnz 0xb0 | |
217 000000e2: c7 04 24 00 00 00 00 mov %ds:[%esp+%esp*1],
0x0 | |
218 000000e9: 66 90 nop | |
219 000000eb: e8 20 01 00 00 call 0x210 | |
220 000000f0: 55 push %ebp | |
221 000000f1: 89 e5 mov %ebp, %esp | |
222 000000f3: 83 ec 1c sub %esp, 0x1c | |
223 000000f6: 83 7d 08 01 cmp %ss:[%ebp+0x8], 0x1 | |
224 000000fa: 75 44 jnz 0x140 | |
225 000000fc: 8b 55 0c mov %edx, %ss:[%ebp+0xc
] | |
226 000000ff: 90 nop | |
227 00000100: 8b 04 95 24 2f 00 08 mov %eax, %ds:[%edx*4+0
x8002f24] | |
228 00000107: 83 e8 01 sub %eax, 0x1 | |
229 0000010a: 8d b6 00 00 00 00 lea %esi, %ds:[%esi] | |
230 00000110: 89 04 95 24 2f 00 08 mov %ds:[%edx*4+0x8002f
24], %eax | |
231 00000117: 8b 55 10 mov %edx, %ss:[%ebp+0x1
0] | |
232 0000011a: 8d b6 00 00 00 00 lea %esi, %ds:[%esi] | |
233 00000120: 8b 04 95 24 2f 00 08 mov %eax, %ds:[%edx*4+0
x8002f24] | |
234 00000127: 83 c0 01 add %eax, 0x1 | |
235 0000012a: 8d b6 00 00 00 00 lea %esi, %ds:[%esi] | |
236 00000130: 89 04 95 24 2f 00 08 mov %ds:[%edx*4+0x8002f
24], %eax | |
237 00000137: eb 77 jmp 0x1b0 | |
238 00000139: 8d b4 26 00 00 00 00 lea %esi, %ds:[%esi+%es
p*1] | |
239 00000140: 8b 45 10 mov %eax, %ss:[%ebp+0x1
0] | |
240 00000143: 8b 55 0c mov %edx, %ss:[%ebp+0xc
] | |
241 00000146: 01 c2 add %edx, %eax | |
242 00000148: b8 06 00 00 00 mov %eax, 0x6 | |
243 0000014d: 29 d0 sub %eax, %edx | |
244 0000014f: f4 hlt | |
245 @vdis: | |
246 0: 8d 4c 24 04 lea %ecx, 0x4[%esp] | |
247 4: 83 e4 f0 and %esp, 0xfffffffffffffff0 | |
248 7: ff 71 fc push 0xfffffffc[%ecx] | |
249 a: 55 push %ebp | |
250 b: 89 e5 mov %esp, %esp | |
251 d: 51 push %ecx | |
252 e: 66 90 nop | |
253 10: 83 ec 24 sub %ebp, 0x24 | |
254 13: 89 4d e8 mov 0xffffffe8[%ebp], %ecx | |
255 16: c7 45 f4 0a 00 00 00 mov 0xfffffff4[%ebp], 0xa | |
256 1d: 8b 45 e8 mov %eax, 0xffffffe8[%ebp] | |
257 20: 83 38 01 cmp [%eax], 0x1 | |
258 23: 7f 2b jg 0x50 | |
259 25: 8b 55 e8 mov %edx, 0xffffffe8[%ebp] | |
260 28: 8b 42 04 mov %eax, 0x4[%edx] | |
261 2b: 8b 00 mov %eax, [%eax] | |
262 2d: 8d 76 00 lea %esi, 0x0[%esi] | |
263 30: 89 44 24 04 mov 0x4[%esp], %eax | |
264 34: c7 04 24 54 14 00 08 mov [%esp], 0x8001454 | |
265 3b: e8 c0 02 00 00 call 0x300 | |
266 40: c7 04 24 01 00 00 00 mov [%esp], 0x1 | |
267 47: 8d 74 26 00 lea %esi, 0x0[%esi] | |
268 4b: e8 c0 01 00 00 call 0x210 | |
269 50: 8b 55 e8 mov %edx, 0xffffffe8[%ebp] | |
270 53: 8b 42 04 mov %eax, 0x4[%edx] | |
271 56: 83 c0 04 add %eax, 0x4 | |
272 59: 8b 00 mov %eax, [%eax] | |
273 5b: 89 04 24 mov [%esp], %eax | |
274 5e: 66 90 nop | |
275 60: 8d 74 26 00 lea %esi, 0x0[%esi] | |
276 64: 8d bc 27 00 00 00 00 lea %edi, 0x0[%edi] | |
277 6b: e8 90 09 00 00 call 0xa00 | |
278 70: 89 45 f8 mov 0xfffffff8[%ebp], %eax | |
279 73: 8b 45 e8 mov %eax, 0xffffffe8[%ebp] | |
280 76: 83 38 02 cmp [%eax], 0x2 | |
281 79: 7e 25 jle 0xa0 | |
282 7b: 8b 55 e8 mov %edx, 0xffffffe8[%ebp] | |
283 7e: 66 90 nop | |
284 80: 8b 42 04 mov %eax, 0x4[%edx] | |
285 83: 83 c0 08 add %eax, 0x8 | |
286 86: 8b 00 mov %eax, [%eax] | |
287 88: 89 04 24 mov [%esp], %eax | |
288 8b: e8 70 09 00 00 call 0xa00 | |
289 90: 89 45 f4 mov 0xfffffff4[%ebp], %eax | |
290 93: 8d b6 00 00 00 00 lea %esi, 0x0[%esi] | |
291 99: 8d bc 27 00 00 00 00 lea %edi, 0x0[%edi] | |
292 a0: 8b 45 f4 mov %eax, 0xfffffff4[%ebp] | |
293 a3: a3 28 2f 00 08 mov [0x8002f28], %eax | |
294 a8: eb 26 jmp 0xd0 | |
295 aa: 8d b6 00 00 00 00 lea %esi, 0x0[%esi] | |
296 b0: c7 44 24 08 03 00 00 00 mov 0x8[%esp], 0x3 | |
297 b8: c7 44 24 04 01 00 00 00 mov 0x4[%esp], 0x1 | |
298 c0: 8b 45 f4 mov %eax, 0xfffffff4[%ebp] | |
299 c3: 89 04 24 mov [%esp], %eax | |
300 c6: 90 nop | |
301 c7: 8d 74 26 00 lea %esi, 0x0[%esi] | |
302 cb: e8 20 00 00 00 call 0xf0 | |
303 d0: 83 7d f8 00 cmp 0xfffffff8[%ebp], 0x0 | |
304 d4: 0f 9f c0 setg %eax | |
305 d7: 83 6d f8 01 sub 0xfffffff8[%ebp], 0x1 | |
306 db: 84 c0 test %eax, %eax | |
307 dd: 8d 76 00 lea %esi, 0x0[%esi] | |
308 e0: 75 ce jnz 0xb0 | |
309 e2: c7 04 24 00 00 00 00 mov [%esp], 0x0 | |
310 e9: 66 90 nop | |
311 eb: e8 20 01 00 00 call 0x210 | |
312 f0: 55 push %ebp | |
313 f1: 89 e5 mov %esp, %esp | |
314 f3: 83 ec 1c sub %ebp, 0x1c | |
315 f6: 83 7d 08 01 cmp 0x8[%ebp], 0x1 | |
316 fa: 75 44 jnz 0x140 | |
317 fc: 8b 55 0c mov %edx, 0xc[%ebp] | |
318 ff: 90 nop | |
319 100: 8b 04 95 24 2f 00 08 mov %eax, [%ebp + 4 * %edx] | |
320 107: 83 e8 01 sub %ebp, 0x1 | |
321 10a: 8d b6 00 00 00 00 lea %esi, 0x0[%esi] | |
322 110: 89 04 95 24 2f 00 08 mov [%ebp + 4 * %edx], %eax | |
323 117: 8b 55 10 mov %edx, 0x10[%ebp] | |
324 11a: 8d b6 00 00 00 00 lea %esi, 0x0[%esi] | |
325 120: 8b 04 95 24 2f 00 08 mov %eax, [%ebp + 4 * %edx] | |
326 127: 83 c0 01 add %eax, 0x1 | |
327 12a: 8d b6 00 00 00 00 lea %esi, 0x0[%esi] | |
328 130: 89 04 95 24 2f 00 08 mov [%ebp + 4 * %edx], %eax | |
329 137: eb 77 jmp 0x1b0 | |
330 139: 8d b4 26 00 00 00 00 lea %esi, 0x0[%esi] | |
331 140: 8b 45 10 mov %eax, 0x10[%ebp] | |
332 143: 8b 55 0c mov %edx, 0xc[%ebp] | |
333 146: 01 c2 add %eax, %eax | |
334 148: b8 06 00 00 00 mov %eax, 0x6 | |
335 14d: 29 d0 sub %edx, %edx | |
336 14f: f4 hlt | |
337 @rdfa_output: | |
338 4b: [0] direct jump out of range | |
339 eb: [0] direct jump out of range | |
340 137: [0] direct jump out of range | |
341 return code: 1 | |
OLD | NEW |