OLD | NEW |
| (Empty) |
1 @hex: | |
2 # test 5: a big chunk of code whose origin is not clear. | |
3 8d 4c 24 04 | |
4 83 e4 f0 | |
5 ff 71 fc | |
6 55 | |
7 89 e5 | |
8 51 | |
9 66 90 | |
10 83 ec 24 | |
11 89 4d e8 | |
12 c7 45 f4 0a 00 00 00 | |
13 8b 45 e8 | |
14 83 38 01 | |
15 7f 2b | |
16 8b 55 e8 | |
17 8b 42 04 | |
18 8b 00 | |
19 8d 76 00 | |
20 89 44 24 04 | |
21 c7 04 24 54 14 00 08 | |
22 e8 c0 02 00 00 | |
23 c7 04 24 01 00 00 00 | |
24 8d 74 26 00 | |
25 e8 c0 01 00 00 | |
26 8b 55 e8 | |
27 8b 42 04 | |
28 83 c0 04 | |
29 8b 00 | |
30 89 04 24 | |
31 66 90 | |
32 8d 74 26 00 | |
33 8d bc 27 00 00 00 00 | |
34 e8 90 09 00 00 | |
35 89 45 f8 | |
36 8b 45 e8 | |
37 83 38 02 | |
38 7e 25 | |
39 8b 55 e8 | |
40 66 90 | |
41 8b 42 04 | |
42 83 c0 08 | |
43 8b 00 | |
44 89 04 24 | |
45 e8 70 09 00 00 | |
46 89 45 f4 | |
47 8d b6 00 00 00 00 | |
48 8d bc 27 00 00 00 00 | |
49 8b 45 f4 | |
50 a3 28 2f 00 08 | |
51 eb 26 | |
52 8d b6 00 00 00 00 | |
53 c7 44 24 08 03 00 00 00 | |
54 c7 44 24 04 01 00 00 00 | |
55 8b 45 f4 | |
56 89 04 24 | |
57 90 | |
58 8d 74 26 00 | |
59 e8 20 00 00 00 | |
60 83 7d f8 00 | |
61 0f 9f c0 | |
62 83 6d f8 01 | |
63 84 c0 | |
64 8d 76 00 | |
65 75 ce | |
66 c7 04 24 00 00 00 00 | |
67 66 90 | |
68 e8 20 01 00 00 | |
69 55 | |
70 89 e5 | |
71 83 ec 1c | |
72 83 7d 08 01 | |
73 75 44 | |
74 8b 55 0c | |
75 90 | |
76 8b 04 95 24 2f 00 08 | |
77 83 e8 01 | |
78 8d b6 00 00 00 00 | |
79 89 04 95 24 2f 00 08 | |
80 8b 55 10 | |
81 8d b6 00 00 00 00 | |
82 8b 04 95 24 2f 00 08 | |
83 83 c0 01 | |
84 8d b6 00 00 00 00 | |
85 89 04 95 24 2f 00 08 | |
86 00 00 | |
87 8d b4 26 00 00 00 00 | |
88 8b 45 10 | |
89 8b 55 0c | |
90 01 c2 | |
91 b8 06 00 00 00 | |
92 29 d0 | |
93 f4 | |
94 @nval: | |
95 VALIDATOR: 4b: JUMP TARGET out of range | |
96 VALIDATOR: eb: JUMP TARGET out of range | |
97 *** <input> IS UNSAFE *** | |
98 @nvals: | |
99 VALIDATOR: 4b: JUMP TARGET out of range | |
100 VALIDATOR: eb: JUMP TARGET out of range | |
101 *** <input> IS UNSAFE *** | |
102 | |
103 Opcode Histogram; | |
104 1 0x00 1 0x01 1 0x0f 1 0x29 | |
105 1 0x51 2 0x55 2 0x75 1 0x7e | |
106 1 0x7f 12 0x83 1 0x84 11 0x89 | |
107 19 0x8b 14 0x8d 6 0x90 1 0xa3 | |
108 1 0xb8 6 0xc7 6 0xe8 1 0xeb | |
109 1 0xf4 1 0xff | |
110 Analysis Summary: | |
111 91 Checked instructions | |
112 17 checked jump targets | |
113 0 calls/jumps need dynamic checking (0.00%) | |
114 | |
115 Problems: | |
116 0 illegal instructions | |
117 2 bad jump targets | |
118 0 illegal unprotected indirect jumps (including ret) | |
119 0 instruction alignment defects | |
120 0 segmentation errors | |
121 0 bad prefix | |
122 0 bad instruction length | |
123 0 internal errors | |
124 @nvalds: | |
125 VALIDATOR: 4b: JUMP TARGET out of range | |
126 VALIDATOR: eb: JUMP TARGET out of range | |
127 *** <input> IS UNSAFE *** | |
128 | |
129 Opcode Histogram; | |
130 1 0x00 1 0x01 1 0x0f 1 0x29 | |
131 1 0x51 2 0x55 2 0x75 1 0x7e | |
132 1 0x7f 12 0x83 1 0x84 11 0x89 | |
133 19 0x8b 14 0x8d 6 0x90 1 0xa3 | |
134 1 0xb8 6 0xc7 6 0xe8 1 0xeb | |
135 1 0xf4 1 0xff | |
136 Analysis Summary: | |
137 91 Checked instructions | |
138 11 checked jump targets | |
139 0 calls/jumps need dynamic checking (0.00%) | |
140 | |
141 Problems: | |
142 0 illegal instructions | |
143 2 bad jump targets | |
144 0 illegal unprotected indirect jumps (including ret) | |
145 0 instruction alignment defects | |
146 0 segmentation errors | |
147 0 bad prefix | |
148 0 bad instruction length | |
149 0 internal errors | |
150 @dis: | |
151 00000000: 8d 4c 24 04 lea %ecx, %ds:[%esp+%es
p*1+0x4] | |
152 00000004: 83 e4 f0 and %esp, 0xf0 | |
153 00000007: ff 71 fc push %ds:[%ecx-0x4] | |
154 0000000a: 55 push %ebp | |
155 0000000b: 89 e5 mov %ebp, %esp | |
156 0000000d: 51 push %ecx | |
157 0000000e: 66 90 nop | |
158 00000010: 83 ec 24 sub %esp, 0x24 | |
159 00000013: 89 4d e8 mov %ss:[%ebp-0x18], %e
cx | |
160 00000016: c7 45 f4 0a 00 00 00 mov %ss:[%ebp-0xc], 0xa | |
161 0000001d: 8b 45 e8 mov %eax, %ss:[%ebp-0x1
8] | |
162 00000020: 83 38 01 cmp %ds:[%eax], 0x1 | |
163 00000023: 7f 2b jnle 0x50 | |
164 00000025: 8b 55 e8 mov %edx, %ss:[%ebp-0x1
8] | |
165 00000028: 8b 42 04 mov %eax, %ds:[%edx+0x4
] | |
166 0000002b: 8b 00 mov %eax, %ds:[%eax] | |
167 0000002d: 8d 76 00 lea %esi, %ds:[%esi] | |
168 00000030: 89 44 24 04 mov %ds:[%esp+%esp*1+0x
4], %eax | |
169 00000034: c7 04 24 54 14 00 08 mov %ds:[%esp+%esp*1],
0x8001454 | |
170 0000003b: e8 c0 02 00 00 call 0x300 | |
171 00000040: c7 04 24 01 00 00 00 mov %ds:[%esp+%esp*1],
0x1 | |
172 00000047: 8d 74 26 00 lea %esi, %ds:[%esi+%es
p*1] | |
173 0000004b: e8 c0 01 00 00 call 0x210 | |
174 00000050: 8b 55 e8 mov %edx, %ss:[%ebp-0x1
8] | |
175 00000053: 8b 42 04 mov %eax, %ds:[%edx+0x4
] | |
176 00000056: 83 c0 04 add %eax, 0x4 | |
177 00000059: 8b 00 mov %eax, %ds:[%eax] | |
178 0000005b: 89 04 24 mov %ds:[%esp+%esp*1],
%eax | |
179 0000005e: 66 90 nop | |
180 00000060: 8d 74 26 00 lea %esi, %ds:[%esi+%es
p*1] | |
181 00000064: 8d bc 27 00 00 00 00 lea %edi, %ds:[%edi+%es
p*1] | |
182 0000006b: e8 90 09 00 00 call 0xa00 | |
183 00000070: 89 45 f8 mov %ss:[%ebp-0x8], %ea
x | |
184 00000073: 8b 45 e8 mov %eax, %ss:[%ebp-0x1
8] | |
185 00000076: 83 38 02 cmp %ds:[%eax], 0x2 | |
186 00000079: 7e 25 jle 0xa0 | |
187 0000007b: 8b 55 e8 mov %edx, %ss:[%ebp-0x1
8] | |
188 0000007e: 66 90 nop | |
189 00000080: 8b 42 04 mov %eax, %ds:[%edx+0x4
] | |
190 00000083: 83 c0 08 add %eax, 0x8 | |
191 00000086: 8b 00 mov %eax, %ds:[%eax] | |
192 00000088: 89 04 24 mov %ds:[%esp+%esp*1],
%eax | |
193 0000008b: e8 70 09 00 00 call 0xa00 | |
194 00000090: 89 45 f4 mov %ss:[%ebp-0xc], %ea
x | |
195 00000093: 8d b6 00 00 00 00 lea %esi, %ds:[%esi] | |
196 00000099: 8d bc 27 00 00 00 00 lea %edi, %ds:[%edi+%es
p*1] | |
197 000000a0: 8b 45 f4 mov %eax, %ss:[%ebp-0xc
] | |
198 000000a3: a3 28 2f 00 08 mov [0x8002f28], %eax | |
199 000000a8: eb 26 jmp 0xd0 | |
200 000000aa: 8d b6 00 00 00 00 lea %esi, %ds:[%esi] | |
201 000000b0: c7 44 24 08 03 00 00 00 mov %ds:[%esp+%esp*1+0x
8], 0x3 | |
202 000000b8: c7 44 24 04 01 00 00 00 mov %ds:[%esp+%esp*1+0x
4], 0x1 | |
203 000000c0: 8b 45 f4 mov %eax, %ss:[%ebp-0xc
] | |
204 000000c3: 89 04 24 mov %ds:[%esp+%esp*1],
%eax | |
205 000000c6: 90 nop | |
206 000000c7: 8d 74 26 00 lea %esi, %ds:[%esi+%es
p*1] | |
207 000000cb: e8 20 00 00 00 call 0xf0 | |
208 000000d0: 83 7d f8 00 cmp %ss:[%ebp-0x8], 0x0 | |
209 000000d4: 0f 9f c0 setnle %al | |
210 000000d7: 83 6d f8 01 sub %ss:[%ebp-0x8], 0x1 | |
211 000000db: 84 c0 test %al, %al | |
212 000000dd: 8d 76 00 lea %esi, %ds:[%esi] | |
213 000000e0: 75 ce jnz 0xb0 | |
214 000000e2: c7 04 24 00 00 00 00 mov %ds:[%esp+%esp*1],
0x0 | |
215 000000e9: 66 90 nop | |
216 000000eb: e8 20 01 00 00 call 0x210 | |
217 000000f0: 55 push %ebp | |
218 000000f1: 89 e5 mov %ebp, %esp | |
219 000000f3: 83 ec 1c sub %esp, 0x1c | |
220 000000f6: 83 7d 08 01 cmp %ss:[%ebp+0x8], 0x1 | |
221 000000fa: 75 44 jnz 0x140 | |
222 000000fc: 8b 55 0c mov %edx, %ss:[%ebp+0xc
] | |
223 000000ff: 90 nop | |
224 00000100: 8b 04 95 24 2f 00 08 mov %eax, %ds:[%edx*4+0
x8002f24] | |
225 00000107: 83 e8 01 sub %eax, 0x1 | |
226 0000010a: 8d b6 00 00 00 00 lea %esi, %ds:[%esi] | |
227 00000110: 89 04 95 24 2f 00 08 mov %ds:[%edx*4+0x8002f
24], %eax | |
228 00000117: 8b 55 10 mov %edx, %ss:[%ebp+0x1
0] | |
229 0000011a: 8d b6 00 00 00 00 lea %esi, %ds:[%esi] | |
230 00000120: 8b 04 95 24 2f 00 08 mov %eax, %ds:[%edx*4+0
x8002f24] | |
231 00000127: 83 c0 01 add %eax, 0x1 | |
232 0000012a: 8d b6 00 00 00 00 lea %esi, %ds:[%esi] | |
233 00000130: 89 04 95 24 2f 00 08 mov %ds:[%edx*4+0x8002f
24], %eax | |
234 00000137: 00 00 add %ds:[%eax], %al | |
235 00000139: 8d b4 26 00 00 00 00 lea %esi, %ds:[%esi+%es
p*1] | |
236 00000140: 8b 45 10 mov %eax, %ss:[%ebp+0x1
0] | |
237 00000143: 8b 55 0c mov %edx, %ss:[%ebp+0xc
] | |
238 00000146: 01 c2 add %edx, %eax | |
239 00000148: b8 06 00 00 00 mov %eax, 0x6 | |
240 0000014d: 29 d0 sub %eax, %edx | |
241 0000014f: f4 hlt | |
242 @vdis: | |
243 0: 8d 4c 24 04 lea %ecx, 0x4[%esp] | |
244 4: 83 e4 f0 and %esp, 0xfffffffffffffff0 | |
245 7: ff 71 fc push 0xfffffffc[%ecx] | |
246 a: 55 push %ebp | |
247 b: 89 e5 mov %esp, %esp | |
248 d: 51 push %ecx | |
249 e: 66 90 nop | |
250 10: 83 ec 24 sub %ebp, 0x24 | |
251 13: 89 4d e8 mov 0xffffffe8[%ebp], %ecx | |
252 16: c7 45 f4 0a 00 00 00 mov 0xfffffff4[%ebp], 0xa | |
253 1d: 8b 45 e8 mov %eax, 0xffffffe8[%ebp] | |
254 20: 83 38 01 cmp [%eax], 0x1 | |
255 23: 7f 2b jg 0x50 | |
256 25: 8b 55 e8 mov %edx, 0xffffffe8[%ebp] | |
257 28: 8b 42 04 mov %eax, 0x4[%edx] | |
258 2b: 8b 00 mov %eax, [%eax] | |
259 2d: 8d 76 00 lea %esi, 0x0[%esi] | |
260 30: 89 44 24 04 mov 0x4[%esp], %eax | |
261 34: c7 04 24 54 14 00 08 mov [%esp], 0x8001454 | |
262 3b: e8 c0 02 00 00 call 0x300 | |
263 40: c7 04 24 01 00 00 00 mov [%esp], 0x1 | |
264 47: 8d 74 26 00 lea %esi, 0x0[%esi] | |
265 4b: e8 c0 01 00 00 call 0x210 | |
266 50: 8b 55 e8 mov %edx, 0xffffffe8[%ebp] | |
267 53: 8b 42 04 mov %eax, 0x4[%edx] | |
268 56: 83 c0 04 add %eax, 0x4 | |
269 59: 8b 00 mov %eax, [%eax] | |
270 5b: 89 04 24 mov [%esp], %eax | |
271 5e: 66 90 nop | |
272 60: 8d 74 26 00 lea %esi, 0x0[%esi] | |
273 64: 8d bc 27 00 00 00 00 lea %edi, 0x0[%edi] | |
274 6b: e8 90 09 00 00 call 0xa00 | |
275 70: 89 45 f8 mov 0xfffffff8[%ebp], %eax | |
276 73: 8b 45 e8 mov %eax, 0xffffffe8[%ebp] | |
277 76: 83 38 02 cmp [%eax], 0x2 | |
278 79: 7e 25 jle 0xa0 | |
279 7b: 8b 55 e8 mov %edx, 0xffffffe8[%ebp] | |
280 7e: 66 90 nop | |
281 80: 8b 42 04 mov %eax, 0x4[%edx] | |
282 83: 83 c0 08 add %eax, 0x8 | |
283 86: 8b 00 mov %eax, [%eax] | |
284 88: 89 04 24 mov [%esp], %eax | |
285 8b: e8 70 09 00 00 call 0xa00 | |
286 90: 89 45 f4 mov 0xfffffff4[%ebp], %eax | |
287 93: 8d b6 00 00 00 00 lea %esi, 0x0[%esi] | |
288 99: 8d bc 27 00 00 00 00 lea %edi, 0x0[%edi] | |
289 a0: 8b 45 f4 mov %eax, 0xfffffff4[%ebp] | |
290 a3: a3 28 2f 00 08 mov [0x8002f28], %eax | |
291 a8: eb 26 jmp 0xd0 | |
292 aa: 8d b6 00 00 00 00 lea %esi, 0x0[%esi] | |
293 b0: c7 44 24 08 03 00 00 00 mov 0x8[%esp], 0x3 | |
294 b8: c7 44 24 04 01 00 00 00 mov 0x4[%esp], 0x1 | |
295 c0: 8b 45 f4 mov %eax, 0xfffffff4[%ebp] | |
296 c3: 89 04 24 mov [%esp], %eax | |
297 c6: 90 nop | |
298 c7: 8d 74 26 00 lea %esi, 0x0[%esi] | |
299 cb: e8 20 00 00 00 call 0xf0 | |
300 d0: 83 7d f8 00 cmp 0xfffffff8[%ebp], 0x0 | |
301 d4: 0f 9f c0 setg %eax | |
302 d7: 83 6d f8 01 sub 0xfffffff8[%ebp], 0x1 | |
303 db: 84 c0 test %eax, %eax | |
304 dd: 8d 76 00 lea %esi, 0x0[%esi] | |
305 e0: 75 ce jnz 0xb0 | |
306 e2: c7 04 24 00 00 00 00 mov [%esp], 0x0 | |
307 e9: 66 90 nop | |
308 eb: e8 20 01 00 00 call 0x210 | |
309 f0: 55 push %ebp | |
310 f1: 89 e5 mov %esp, %esp | |
311 f3: 83 ec 1c sub %ebp, 0x1c | |
312 f6: 83 7d 08 01 cmp 0x8[%ebp], 0x1 | |
313 fa: 75 44 jnz 0x140 | |
314 fc: 8b 55 0c mov %edx, 0xc[%ebp] | |
315 ff: 90 nop | |
316 100: 8b 04 95 24 2f 00 08 mov %eax, [%ebp + 4 * %edx] | |
317 107: 83 e8 01 sub %ebp, 0x1 | |
318 10a: 8d b6 00 00 00 00 lea %esi, 0x0[%esi] | |
319 110: 89 04 95 24 2f 00 08 mov [%ebp + 4 * %edx], %eax | |
320 117: 8b 55 10 mov %edx, 0x10[%ebp] | |
321 11a: 8d b6 00 00 00 00 lea %esi, 0x0[%esi] | |
322 120: 8b 04 95 24 2f 00 08 mov %eax, [%ebp + 4 * %edx] | |
323 127: 83 c0 01 add %eax, 0x1 | |
324 12a: 8d b6 00 00 00 00 lea %esi, 0x0[%esi] | |
325 130: 89 04 95 24 2f 00 08 mov [%ebp + 4 * %edx], %eax | |
326 137: 00 00 add [%eax], %eax | |
327 139: 8d b4 26 00 00 00 00 lea %esi, 0x0[%esi] | |
328 140: 8b 45 10 mov %eax, 0x10[%ebp] | |
329 143: 8b 55 0c mov %edx, 0xc[%ebp] | |
330 146: 01 c2 add %eax, %eax | |
331 148: b8 06 00 00 00 mov %eax, 0x6 | |
332 14d: 29 d0 sub %edx, %edx | |
333 14f: f4 hlt | |
334 @rdfa_output: | |
335 4b: [0] direct jump out of range | |
336 eb: [0] direct jump out of range | |
337 return code: 1 | |
OLD | NEW |