NAME=Cd 4096 FILE== CMDS=< 0x00560e7d pop esi | : 0x00560e7e push eax | : 0x00560e7f push edx | ,==< 0x00560e80 jmp 0x560e96 .. | |`--> 0x00560e96 rdtsc | | : 0x00560e98 jmp 0x560eb1 .. | ||: 0x00560eb1 pop edx | ||: 0x00560eb2 pop eax | ||: 0x00560eb3 pushfd | ||: 0x00560eb4 push eax | ||: 0x00560eb5 mov dword [esp], ecx | ||: 0x00560eb8 push ecx | ||: 0x00560eb9 mov dword [esp], 0x4b7dbaf4 | ||: 0x00560ec0 mov dword [esp], ebx | ||: 0x00560ec3 mov ebx, 0x60 | ||: 0x00560ec8 mov dword [esp + 4], ebx | ||: 0x00560ecc pop ebx | ||: 0x00560ecd push ecx | ||: 0x00560ece mov dword [esp], 0x7fdd7312 | ||: 0x00560ed5 or dword [esp], 0x76fe6216 | |: 0x00560edc shl dword [esp], 1 | |: 0x00560ee0 or dword [esp], 0x5677e157 | |: 0x00560ee7 sub dword [esp], 0x66a97007 | |: 0x00560eee add dword [esp], 0xd4a8fad4 | |: 0x00560ef5 xchg dword [esp], ebp | |: 0x00560ef8 not ebp | |: 0x00560efa xchg dword [esp], ebp | |: 0x00560efd inc dword [esp] | |: 0x00560f00 sub dword [esp], 0x91ea8610 | |: 0x00560f07 push ebp | |: 0x00560f08 mov ebp, esp | |: 0x00560f0a add ebp, 4 | |: 0x00560f10 sub ebp, 4 | |: 0x00560f16 xchg dword [esp], ebp | |: 0x00560f19 pop esp | |: 0x00560f1a mov dword [esp], ecx | |: 0x00560f1d mov dword [esp], eax | |: 0x00560f20 push 0x5a9b4939 | |: 0x00560f25 mov dword [esp], ecx | |: 0x00560f28 mov ecx, esp | : 0x00560f2a push ebx | : 0x00560f2b mov ebx, 4 | : 0x00560f30 add ecx, ebx | : 0x00560f32 pop ebx | : 0x00560f33 sub ecx, 4 | : 0x00560f36 xor ecx, dword [esp] | : 0x00560f39 xor dword [esp], ecx | : 0x00560f3c xor ecx, dword [esp] | : 0x00560f3f pop esp | : 0x00560f40 mov dword [esp], ebx | : 0x00560f43 push dword [esp + 0x10] | : 0x00560f47 mov eax, dword [esp] | : 0x00560f4a push esi | : 0x00560f4b mov esi, esp | : 0x00560f4d push edx | : 0x00560f4e mov edx, 0x75ff55bb | : 0x00560f53 and edx, 0x7e5d8b17 | : 0x00560f59 xor edx, 0x745d0117 | : 0x00560f5f add esi, edx | : 0x00560f61 mov edx, dword [esp] | : 0x00560f64 add esp, 4 | : 0x00560f67 add esi, 4 | : 0x00560f6d xchg dword [esp], esi | : 0x00560f70 pop esp | : 0x00560f71 push dword [esp + 8] | : 0x00560f75 push dword [esp] | : 0x00560f78 mov ebx, dword [esp] | : 0x00560f7b push ebx | : 0x00560f7c mov ebx, esp | : 0x00560f7e add ebx, 4 | : 0x00560f84 add ebx, 4 | : 0x00560f8a xchg dword [esp], ebx | : 0x00560f8d pop esp | : 0x00560f8e add esp, 4 | : 0x00560f91 mov dword [esp + 8], eax | : 0x00560f95 mov dword [esp + 0x10], ebx | : 0x00560f99 push dword [esp] | : 0x00560f9c pop ebx | : 0x00560f9d push ebx | : 0x00560f9e mov ebx, esp | : 0x00560fa0 add ebx, 4 | : 0x00560fa6 add ebx, 4 | : 0x00560fa9 push ebx | : 0x00560faa push dword [esp + 4] | : 0x00560fae pop ebx | : 0x00560faf pop dword [esp] | : 0x00560fb2 mov esp, dword [esp] | : 0x00560fb5 mov eax, dword [esp] | : 0x00560fb8 push ebx | : 0x00560fb9 mov dword [esp], 0x1e8e43e4 | : 0x00560fc0 mov dword [esp], eax | : 0x00560fc3 mov eax, esp | : 0x00560fc5 add eax, 4 | : 0x00560fca add eax, 4 | : 0x00560fcf xchg dword [esp], eax | : 0x00560fd2 mov esp, dword [esp] \ `=< 0x00560fd5 jmp 0x43d3f7 EOF RUN NAME=pdf hidden code in sparse fix FILE=bins/pe/cmd_adf_sample0.exe CMDS=< 0x00560e71 90 nop | : 0x00560e72 eb09 jmp 0x560e7d .. | : 0x00560e7d 5e pop esi | : 0x00560e7e 50 push eax | : 0x00560e7f 52 push edx | ,==< 0x00560e80 e911000000 jmp 0x560e96 .. | |`--> 0x00560e96 0f31 rdtsc | | : 0x00560e98 e914000000 jmp 0x560eb1 .. | ||: 0x00560eb1 5a pop edx \ ||`=< 0x00560eb2 e940c5edff jmp 0x43d3f7 / fcn.00560e67 (); | 0x00560e67 56 push esi | 0x00560e68 e904000000 jmp 0x560e71 | ----------- true: 0x00560e71 | 0x00560e71 90 nop | 0x00560e72 eb09 jmp 0x560e7d | ----------- true: 0x00560e7d | 0x00560e7d 5e pop esi | 0x00560e7e 50 push eax | 0x00560e7f 52 push edx | 0x00560e80 e911000000 jmp 0x560e96 | ----------- true: 0x00560e96 | 0x00560e96 0f31 rdtsc | 0x00560e98 e914000000 jmp 0x560eb1 | ----------- true: 0x00560eb1 | 0x00560eb1 5a pop edx \ 0x00560eb2 e940c5edff jmp 0x43d3f7 EOF RUN NAME=esil func cmts FILE=bins/elf/arm1.bin CMDS=< 0xeb0002a4 ; pc=0x845c -> 0xe92d41f0 | ; int __libc_start_main(-1, -1, -1, -1, -1, -1, -1) \ 0x00008178 a40200eb bl sym.abort ; lr=0x817c -> 0xe92d4030 ; pc=0x8c10 -> 0xe59f62a0 \ ; void abort(void) / fcn.00008174 (void *main, int argc); | ; arg void *main @ r0 | ; arg int argc @ r1 | ; lr=0x8178 -> 0xeb0002a4 | ; pc=0x845c -> 0xe92d41f0 sym.__libc_start_main | ; int __libc_start_main(-1, -1, -1, -1, -1, -1, -1) | 0x00008174 b80000eb bl sym.__libc_start_main | ; lr=0x817c -> 0xe92d4030 | ; pc=0x8c10 -> 0xe59f62a0 sym.abort | ; void abort(void) \ 0x00008178 a40200eb bl sym.abort .--------------------------------------------------------. | 0x8174 | | fcn.00008174 (void *main, int argc); | | ; arg void *main @ r0 | | ; arg int argc @ r1 | | ; lr=0x8178 -> 0xeb0002a4 | | ; pc=0x845c -> 0xe92d41f0 sym.__libc_start_main | | ; int __libc_start_main(-1, -1, -1, -1, -1, -1, -1) | | bl sym.__libc_start_main | | ; lr=0x817c -> 0xe92d4030 | | ; pc=0x8c10 -> 0xe59f62a0 sym.abort | | ; void abort(void) | | bl sym.abort | `--------------------------------------------------------' EOF RUN NAME=esil func cmt refline FILE=bins/elf/ls CMDS=< 0x8d4890f4 ; likely ,==< 0x00005b04 7f08 jg 0x5b0e ; rip=0x5b0e -> 0x8d4890f4 ; likely ,===< 0x00005b06 eb00 jmp 0x5b08 ; rip=0x5b08 -> 0xc30a15ff `---> 0x00005b08 ff150ac30100 call qword [reloc.__libc_start_main] ; [reloc.__libc_start_main:8]=0x23708 reloc.target.__libc_start_main ; rsp=0xfffffffffffffff8 ; rip=0x23708 -> 0x464c457f reloc.target.__libc_start_main EOF RUN NAME=aht asm.cmt.right=false fix (#12330) FILE== CMDS=< 0x0804859e je 0x80485b3 | 0x080485a0 mov dword [esp], str.Wrong | 0x080485a7 call sym.imp.puts | 0x080485ac mov eax, 1 ,=.-> 0x080485b1 jmp 0x80485f9 |`--> 0x080485b3 add dword [esp + 0x20], 1 | : 0x080485b8 mov ebx, dword [esp + 0x20] | `=< 0x080485bc jne 0x80485b1 | 0x080485be nop EOF RUN NAME=asm.bb.line glitch fix (#12516) FILE=bins/elf/ls CMDS=< 0x00004238 je 0x4243 | | | | | 0x0000423a cmp byte [rax], 0 | | | | ,=.-> 0x0000423d jne 0x4b1c | ||: | | |`--> 0x00004243 lea r12, [var_58h] | | : 0x00004248 xor eax, eax | | `=< 0x0000424a jb 0x423d | | | | | 0x0000424c nop [ { "offset": 16947, "arrow": 16952, "text": "| ,=< 0x00004233 jg 0x4238" }, { "offset": 16949, "text": "| | |" }, { "offset": 16949, "text": "| | 0x00004235 test rax, rax" }, { "offset": 16952, "arrow": 16963, "text": "| | |" }, { "offset": 16952, "arrow": 16963, "text": "| ,`-> 0x00004238 je 0x4243" }, { "offset": 16954, "text": "| | |" }, { "offset": 16954, "text": "| | 0x0000423a cmp byte [rax], 0" }, { "offset": 16957, "arrow": 19228, "text": "| | |" }, { "offset": 16957, "arrow": 19228, "text": "| ,=.-> 0x0000423d jne 0x4b1c" }, { "offset": 16963, "text": "| ||: |" }, { "offset": 16963, "text": "| |`--> 0x00004243 lea r12, [var_58h]" }, { "offset": 16968, "text": "| | : 0x00004248 xor eax, eax" }, { "offset": 16970, "arrow": 16957, "text": "| | `=< 0x0000424a jb 0x423d" }, { "offset": 16972, "text": "| | |" }, { "offset": 16972, "text": "| | 0x0000424c nop" } ] EOF RUN NAME=flag-func_sig order FILE=bins/elf/abcde-qt32 CMDS=< 0x0000421a mov qword [0x000232b0], 0x50 ; 'P' | ; [0x232b0:8]=0 | 0x00004225 lea rdi, str.COLUMNS ; 0x18a22 ; "COLUMNS" 0x000041ee lea rsi, [rip + 0x1d84b] ; 0x21a40 0x00004225 lea rdi, [rip + 0x147f6] ; str.COLUMNS ; 0x18a22 ; "COLUMNS" ,=< 0x000041e0 je 0x421a | 0x000041e2 mov ecx, 4 | 0x000041e7 lea rdx, [0x0001b980] | 0x000041ee lea rsi, [0x00021a40] | 0x000041f5 mov rdi, rax | 0x000041f8 call 0xc660 | 0x000041fe test eax, eax ,==< 0x00004200 js 0x4ae5 || 0x00004206 cdqe || 0x00004208 lea rdx, [0x0001b980] || 0x0000420f xor edi, edi || 0x00004211 mov esi, dword [rdx + rax*4] || 0x00004214 call 0x13c50 |`-> 0x0000421a mov qword [0x000232b0], 0x50 ; 'P' |  ; [0x232b0:8]=0 | 0x00004225 lea rdi, str.COLUMNS ; 0x18a22 ; "COLUMNS" 0x000041ee lea rsi, [rip + 0x1d84b] ; 0x21a40 0x00004225 lea rdi, [rip + 0x147f6] ; str.COLUMNS  ; 0x18a22 ; "COLUMNS" ,=< 0x000041e0 je 0x421a | 0x000041e2 mov ecx, 4 | 0x000041e7 mov rax, qword [0x0001b980] ; [0x1b980:8]=0x100000000 | 0x000041ee mov rax, qword [0x00021a40] ; [0x21a40:8]=0x18d31 str.literal | 0x000041f5 mov rdi, rax | 0x000041f8 call 0xc660 | 0x000041fe test eax, eax ,==< 0x00004200 js 0x4ae5 || 0x00004206 cdqe || 0x00004208 lea rdx, [0x0001b980] || 0x0000420f xor edi, edi || 0x00004211 mov esi, dword [rdx + rax*4] || 0x00004214 call 0x13c50 |`-> 0x0000421a mov qword [0x000232b0], 0x50 ; 'P' | ; [0x232b0:8]=0 | 0x00004225 mov rax, qword [str.COLUMNS] ; [0x18a22:8]=0x534e4d554c4f43 ; "COLUMNS" 0x000041ee mov rax, qword [rip + 0x1d84b] ; [0x21a40:8]=0x18d31 str.literal 0x00004225 mov rax, qword [rip + 0x147f6] ; str.COLUMNS ; [0x18a22:8]=0x534e4d554c4f43 ; "COLUMNS" ,=< 0x000041e0 je 0x421a | 0x000041e2 mov ecx, 4 | 0x000041e7 mov rax, qword [0x0001b980] ; [0x1b980:8]=0x100000000 | 0x000041ee mov rax, qword [0x00021a40] ; [0x21a40:8]=0x18d31 str.literal | 0x000041f5 mov rdi, rax | 0x000041f8 call 0xc660 | 0x000041fe test eax, eax ,==< 0x00004200 js 0x4ae5 || 0x00004206 cdqe || 0x00004208 lea rdx, [0x0001b980] || 0x0000420f xor edi, edi || 0x00004211 mov esi, dword [rdx + rax*4] || 0x00004214 call 0x13c50 |`-> 0x0000421a mov qword [0x000232b0], 0x50 ; 'P' |  ; [0x232b0:8]=0 | 0x00004225 mov rax, qword str.COLUMNS ; [0x18a22:8]=0x534e4d554c4f43 ; "COLUMNS" 0x000041ee mov rax, qword [rip + 0x1d84b] ; [0x21a40:8]=0x18d31 str.literal 0x00004225 mov rax, qword [rip + 0x147f6] ; str.COLUMNS  ; [0x18a22:8]=0x534e4d554c4f43 ; "COLUMNS" ,=< 0x000041e0 je 0x421a | 0x000041e2 mov ecx, 4 | 0x000041e7 cmp rdx, qword [0x0001b980] ; [0x1b980:8]=0x100000000 | 0x000041ee cmp rsi, qword [0x00021a40] ; [0x21a40:8]=0x18d31 str.literal | 0x000041f5 mov rdi, rax | 0x000041f8 call 0xc660 | 0x000041fe test eax, eax ,==< 0x00004200 js 0x4ae5 || 0x00004206 cdqe || 0x00004208 lea rdx, [0x0001b980] || 0x0000420f xor edi, edi || 0x00004211 mov esi, dword [rdx + rax*4] || 0x00004214 call 0x13c50 |`-> 0x0000421a mov qword [0x000232b0], 0x50 ; 'P' | ; [0x232b0:8]=0 | 0x00004225 cmp rdi, qword [str.COLUMNS] ; [0x18a22:8]=0x534e4d554c4f43 ; "COLUMNS" 0x000041ee cmp rsi, qword [rip + 0x1d84b] ; [0x21a40:8]=0x18d31 str.literal 0x00004225 cmp rdi, qword [rip + 0x147f6] ; str.COLUMNS ; [0x18a22:8]=0x534e4d554c4f43 ; "COLUMNS" ,=< 0x000041e0 je 0x421a | 0x000041e2 mov ecx, 4 | 0x000041e7 cmp rdx, qword [0x0001b980] ; [0x1b980:8]=0x100000000 | 0x000041ee cmp rsi, qword [0x00021a40] ; [0x21a40:8]=0x18d31 str.literal | 0x000041f5 mov rdi, rax | 0x000041f8 call 0xc660 | 0x000041fe test eax, eax ,==< 0x00004200 js 0x4ae5 || 0x00004206 cdqe || 0x00004208 lea rdx, [0x0001b980] || 0x0000420f xor edi, edi || 0x00004211 mov esi, dword [rdx + rax*4] || 0x00004214 call 0x13c50 |`-> 0x0000421a mov qword [0x000232b0], 0x50 ; 'P' |  ; [0x232b0:8]=0 | 0x00004225 cmp rdi, qword str.COLUMNS ; [0x18a22:8]=0x534e4d554c4f43 ; "COLUMNS" 0x000041ee cmp rsi, qword [rip + 0x1d84b] ; [0x21a40:8]=0x18d31 str.literal 0x00004225 cmp rdi, qword [rip + 0x147f6] ; str.COLUMNS  ; [0x18a22:8]=0x534e4d554c4f43 ; "COLUMNS" EOF RUN NAME=lea section flag bracket fix FILE=bins/elf/analysis/ls-alxchk CMDS=< 0x0000104d ebfe jmp 0x104d .. | `-> 0x00001050 31c0 xor eax, eax \ 0x00001052 c3 ret EOF RUN NAME=utf8 self-loop FILE=bins/elf/infinite-loop.bf CMDS=< 0x0000104d jmp 0x104d │ 0x0000104f nop │ └─> 0x00001050 xor eax, eax │ ╭─< 0x0000104b je 0x1050 │ @──> 0x0000104d jmp 0x104d │ 0x0000104f nop │ ╰─> 0x00001050 xor eax, eax EOF RUN NAME=floating point asm.sub.names FILE=bins/wasm/float-constant.wasm CMDS=<