rizinorg / rizinorg/jsdec

pddi crash

Open
#32 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
JavaScript
Stars
67
Forks
12
PR merge metrics
No merged PRs in 30d

Description

Describe the bug
I have an pretty old exe file wich I want to reverse engineer. (2002-2006?)
With rizin and by reading some labels I know it is a compiled C-Code exe file made with mingw. Default windows PE file.

If i try to pdd the offset of the main label I just get Error while executing command: afsj @@i?. He tells me that there is no data available.
I then used pddf which led me here after it 'crashed'.

Component

  • core
  • arm
  • avr
  • m68k
  • mips
  • ppc
  • sparc
  • v850
  • wasm
  • x86-64

Reproduce via JSON (pddi)

{"name":"issue_1679409768022","arch":"x86","archbits":32,"agj":[{"name":"main","blocks":[{"ops":[{"offset":4202784,"esil":"ebp,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push ebp","disasm":"push ebp","bytes":"55","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0,"flags":["main","sym._main"],"xrefs_to":[{"addr":4198952,"type":"CALL"}]},{"offset":4202785,"esil":"eax,eax,^=,$z,zf,:=,$p,pf,:=,31,$s,sf,:=,0,cf,:=,0,of,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"xor eax, eax","disasm":"xor eax, eax","bytes":"31c0","family":"cpu","type":"xor","reloc":false,"type_num":28,"type2_num":0},{"offset":4202787,"esil":"esp,ebp,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"mov ebp, esp","disasm":"mov ebp, esp","bytes":"89e5","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4202789,"esil":"edi,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push edi","disasm":"push edi","bytes":"57","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4202790,"esil":"esi,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push esi","disasm":"push esi","bytes":"56","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4202791,"esil":"ebx,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push ebx","disasm":"push ebx","bytes":"53","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4202792,"val":1,"esil":"1,ebx,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"mov ebx, 1","disasm":"mov ebx, 1","bytes":"bb01000000","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4202797,"val":12,"esil":"12,esp,-=,12,0x80000000,-,!,31,$o,^,of,:=,31,$s,sf,:=,$z,zf,:=,$p,pf,:=,32,$b,cf,:=,3,$b,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"sub esp, 0xc","disasm":"sub esp, 0xc","bytes":"83ec0c","family":"cpu","type":"sub","reloc":false,"type_num":18,"type2_num":0},{"offset":4202800,"val":4294967280,"esil":"4294967280,esp,&=,$z,zf,:=,$p,pf,:=,31,$s,sf,:=,0,cf,:=,0,of,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"and esp, 0xfffffff0","disasm":"and esp, 0xfffffff0","bytes":"83e4f0","family":"cpu","type":"and","reloc":false,"type_num":27,"type2_num":0},{"offset":4202803,"esil":"0x8,ebp,+,[4],esi,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"mov esi, dword [ebp + 8]","disasm":"mov esi, dword [argv]","bytes":"8b7508","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4202806,"esil":"4204448,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x4027a0","disasm":"call fcn.004027a0","bytes":"e865060000","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4204448,"fail":4202811,"xrefs_from":[{"addr":4204448,"type":"CALL"}]},{"offset":4202811,"esil":"0xc,ebp,+,[4],edi,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"mov edi, dword [ebp + 0xc]","disasm":"mov edi, dword [envp]","bytes":"8b7d0c","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4202814,"esil":"4203648,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x402480","disasm":"call sym.___main","bytes":"e83d030000","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4203648,"fail":4202819,"xrefs_from":[{"addr":4203648,"type":"CALL"}]},{"offset":4202819,"ptr":16384,"val":16384,"esil":"16384,0xe,ebp,-,=[2]","refptr":true,"fcn_addr":4202784,"fcn_last":4203367,"size":6,"opcode":"mov word [ebp - 0xe], 0x4000","disasm":"mov word [var_12h], 0x4000","bytes":"66c745f20040","family":"cpu","type":"mov","reloc":false,"type_num":268435465,"type2_num":0},{"offset":4202825,"ptr":4202555,"val":4202555,"esil":"4202555,0x14,ebp,-,=[4]","refptr":true,"fcn_addr":4202784,"fcn_last":4203366,"size":7,"opcode":"mov dword [ebp - 0x14], 0x40203b","disasm":"mov dword [var_18h], data.0040203b","bytes":"c745ec3b204000","family":"cpu","type":"mov","reloc":false,"type_num":268435465,"type2_num":0,"xrefs_from":[{"addr":4202555,"type":"DATA"}]},{"offset":4202832,"val":0,"esil":"0,0x18,ebp,-,=[4]","refptr":true,"fcn_addr":4202784,"fcn_last":4203366,"size":7,"opcode":"mov dword [ebp - 0x18], 0","disasm":"mov dword [va_args], 0","bytes":"c745e800000000","family":"cpu","type":"mov","reloc":false,"type_num":268435465,"type2_num":0},{"offset":4202839,"ptr":1,"val":1,"esil":"1,esi,==,$z,zf,:=,32,$b,cf,:=,$p,pf,:=,31,$s,sf,:=,1,0x80000000,-,!,31,$o,^,of,:=,3,$b,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"cmp esi, 1","disasm":"cmp esi, 1","bytes":"83fe01","family":"cpu","type":"cmp","reloc":false,"type_num":15,"type2_num":0},{"offset":4202842,"esil":"of,sf,^,zf,|,?{,4203354,eip,=,}","refptr":false,"fcn_addr":4202784,"fcn_last":4203367,"size":6,"opcode":"jle 0x40235a","disasm":"jle 0x40235a","bytes":"0f8efa010000","family":"cpu","type":"cjmp","reloc":false,"type_num":2147483649,"type2_num":0,"jump":4203354,"fail":4202848}]},{"ops":[{"offset":4202848,"esil":"esi,ebx,==,$z,zf,:=,32,$b,cf,:=,$p,pf,:=,31,$s,sf,:=,esi,0x80000000,-,!,31,$o,^,of,:=,3,$b,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"cmp ebx, esi","disasm":"cmp ebx, esi","bytes":"39f3","family":"cpu","type":"cmp","reloc":false,"type_num":15,"type2_num":0,"xrefs_to":[{"addr":4203368,"type":"CODE"}]},{"offset":4202850,"esil":"of,!,sf,^,?{,4202872,eip,=,}","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"jge 0x402178","disasm":"jge 0x402178","bytes":"7d14","family":"cpu","type":"cjmp","reloc":false,"type_num":2147483649,"type2_num":0,"jump":4202872,"fail":4202852}]},{"ops":[{"offset":4202852,"esil":"ebx,4,*,edi,+,[4],eax,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"mov eax, dword [edi + ebx*4]","disasm":"mov eax, dword [edi + ebx*4]","bytes":"8b049f","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4202855,"val":45,"esil":"45,eax,[1],==,$z,zf,:=,8,$b,cf,:=,$p,pf,:=,7,$s,sf,:=,45,0x80,-,!,7,$o,^,of,:=,3,$b,af,:=","refptr":true,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"cmp byte [eax], 0x2d","disasm":"cmp byte [eax], 0x2d","bytes":"80382d","family":"cpu","type":"cmp","reloc":false,"type_num":15,"type2_num":0},{"offset":4202858,"esil":"zf,?{,4203030,eip,=,}","refptr":false,"fcn_addr":4202784,"fcn_last":4203367,"size":6,"opcode":"je 0x402216","disasm":"je 0x402216","bytes":"0f84a6000000","family":"cpu","type":"cjmp","reloc":false,"type_num":2147483649,"type2_num":0,"jump":4203030,"fail":4202864}]},{"ops":[{"offset":4202864,"esil":"eax,0x18,ebp,-,=[4]","refptr":true,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"mov dword [ebp - 0x18], eax","disasm":"mov dword [va_args], eax","bytes":"8945e8","family":"cpu","type":"mov","reloc":false,"type_num":268435465,"type2_num":0}]},{"ops":[{"offset":4202867,"val":1,"esil":"ebx,++=,31,$o,of,:=,31,$s,sf,:=,$z,zf,:=,$p,pf,:=,3,$c,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"inc ebx","disasm":"inc ebx","bytes":"43","family":"cpu","type":"add","reloc":false,"type_num":17,"type2_num":0,"xrefs_to":[{"addr":4203174,"type":"CODE"},{"addr":4203272,"type":"CODE"}]}]},{"ops":[{"offset":4202868,"esil":"esi,ebx,==,$z,zf,:=,32,$b,cf,:=,$p,pf,:=,31,$s,sf,:=,esi,0x80000000,-,!,31,$o,^,of,:=,3,$b,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"cmp ebx, esi","disasm":"cmp ebx, esi","bytes":"39f3","family":"cpu","type":"cmp","reloc":false,"type_num":15,"type2_num":0,"xrefs_to":[{"addr":4203085,"type":"CODE"}]},{"offset":4202870,"esil":"of,sf,^,?{,4202852,eip,=,}","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"jl 0x402164","disasm":"jl 0x402164","bytes":"7cec","family":"cpu","type":"cjmp","reloc":false,"type_num":2147483649,"type2_num":0,"jump":4202852,"fail":4202872}]},{"ops":[{"offset":4202872,"esil":"0x18,ebp,-,[4],ebx,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"mov ebx, dword [ebp - 0x18]","disasm":"mov ebx, dword [va_args]","bytes":"8b5de8","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4202875,"esil":"esi,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push esi","disasm":"push esi","bytes":"56","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4202876,"ptr":4215044,"esil":"0x405104,[4],eax,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"mov eax, dword [0x405104]","disasm":"mov eax, dword [sym.imp.msvcrt.dll__iob]","bytes":"a104514000","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0,"xrefs_from":[{"addr":4215044,"type":"DATA"}]},{"offset":4202881,"esil":"ebx,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push ebx","disasm":"push ebx","bytes":"53","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4202882,"ptr":64,"val":64,"esil":"64,eax,+=,31,$o,of,:=,31,$s,sf,:=,$z,zf,:=,31,$c,cf,:=,$p,pf,:=,3,$c,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"add eax, 0x40","disasm":"add eax, 0x40","bytes":"83c040","family":"cpu","type":"add","reloc":false,"type_num":17,"type2_num":0},{"offset":4202885,"ptr":4202562,"val":4202562,"esil":"4202562,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"push 0x402042","disasm":"push data.00402042","bytes":"6842204000","family":"cpu","type":"push","reloc":false,"type_num":13,"type2_num":0,"xrefs_from":[{"addr":4202562,"type":"DATA"}]},{"offset":4202890,"esil":"eax,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push eax","disasm":"push eax","bytes":"50","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4202891,"esil":"4204848,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x402930","disasm":"call sym._fprintf","bytes":"e8a0070000","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4204848,"fail":4202896,"xrefs_from":[{"addr":4204848,"type":"CALL"}]},{"offset":4202896,"ptr":4215044,"esil":"0x405104,[4],eax,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"mov eax, dword [0x405104]","disasm":"mov eax, dword [sym.imp.msvcrt.dll__iob]","bytes":"a104514000","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0,"xrefs_from":[{"addr":4215044,"type":"DATA"}]},{"offset":4202901,"val":12,"esil":"12,esp,+=,31,$o,of,:=,31,$s,sf,:=,$z,zf,:=,31,$c,cf,:=,$p,pf,:=,3,$c,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"add esp, 0xc","disasm":"add esp, 0xc","bytes":"83c40c","family":"cpu","type":"add","reloc":false,"type_num":17,"type2_num":0},{"offset":4202904,"esil":"0x14,ebp,-,[4],ecx,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"mov ecx, dword [ebp - 0x14]","disasm":"mov ecx, dword [var_18h]","bytes":"8b4dec","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4202907,"ptr":64,"val":64,"esil":"64,eax,+=,31,$o,of,:=,31,$s,sf,:=,$z,zf,:=,31,$c,cf,:=,$p,pf,:=,3,$c,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"add eax, 0x40","disasm":"add eax, 0x40","bytes":"83c040","family":"cpu","type":"add","reloc":false,"type_num":17,"type2_num":0},{"offset":4202910,"esil":"ecx,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push ecx","disasm":"push ecx","bytes":"51","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4202911,"ptr":4202578,"val":4202578,"esil":"4202578,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"push 0x402052","disasm":"push data.00402052","bytes":"6852204000","family":"cpu","type":"push","reloc":false,"type_num":13,"type2_num":0,"xrefs_from":[{"addr":4202578,"type":"DATA"}]},{"offset":4202916,"esil":"eax,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push eax","disasm":"push eax","bytes":"50","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4202917,"esil":"4204848,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x402930","disasm":"call sym._fprintf","bytes":"e886070000","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4204848,"fail":4202922,"xrefs_from":[{"addr":4204848,"type":"CALL"}]},{"offset":4202922,"ptr":4215044,"esil":"0x405104,[4],eax,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"mov eax, dword [0x405104]","disasm":"mov eax, dword [sym.imp.msvcrt.dll__iob]","bytes":"a104514000","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0,"xrefs_from":[{"addr":4215044,"type":"DATA"}]},{"offset":4202927,"esil":"0xe,ebp,-,[2],si,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203369,"size":4,"opcode":"mov si, word [ebp - 0xe]","disasm":"mov si, word [var_12h]","bytes":"668b75f2","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4202931,"val":12,"esil":"12,esp,+=,31,$o,of,:=,31,$s,sf,:=,$z,zf,:=,31,$c,cf,:=,$p,pf,:=,3,$c,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"add esp, 0xc","disasm":"add esp, 0xc","bytes":"83c40c","family":"cpu","type":"add","reloc":false,"type_num":17,"type2_num":0},{"offset":4202934,"ptr":65535,"val":65535,"esil":"65535,esi,&=,$z,zf,:=,$p,pf,:=,31,$s,sf,:=,0,cf,:=,0,of,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203367,"size":6,"opcode":"and esi, 0xffff","disasm":"and esi, reloc.msvcrt.dll__iob","bytes":"81e6ffff0000","family":"cpu","type":"and","reloc":false,"type_num":27,"type2_num":0},{"offset":4202940,"ptr":64,"val":64,"esil":"64,eax,+=,31,$o,of,:=,31,$s,sf,:=,$z,zf,:=,31,$c,cf,:=,$p,pf,:=,3,$c,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"add eax, 0x40","disasm":"add eax, 0x40","bytes":"83c040","family":"cpu","type":"add","reloc":false,"type_num":17,"type2_num":0},{"offset":4202943,"esil":"esi,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push esi","disasm":"push esi","bytes":"56","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4202944,"ptr":4202595,"val":4202595,"esil":"4202595,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"push 0x402063","disasm":"push data.00402063","bytes":"6863204000","family":"cpu","type":"push","reloc":false,"type_num":13,"type2_num":0,"xrefs_from":[{"addr":4202595,"type":"DATA"}]},{"offset":4202949,"esil":"eax,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push eax","disasm":"push eax","bytes":"50","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4202950,"esil":"4204848,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x402930","disasm":"call sym._fprintf","bytes":"e865070000","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4204848,"fail":4202955,"xrefs_from":[{"addr":4204848,"type":"CALL"}]},{"offset":4202955,"esil":"0x18,ebp,-,[4],edi,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"mov edi, dword [ebp - 0x18]","disasm":"mov edi, dword [va_args]","bytes":"8b7de8","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4202958,"esil":"esp,[4],4,esp,+=,eax,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"pop eax","disasm":"pop eax","bytes":"58","family":"cpu","type":"pop","reloc":false,"type_num":14,"type2_num":0},{"offset":4202959,"esil":"esp,[4],4,esp,+=,edx,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"pop edx","disasm":"pop edx","bytes":"5a","family":"cpu","type":"pop","reloc":false,"type_num":14,"type2_num":0},{"offset":4202960,"ptr":4202224,"val":4202224,"esil":"4202224,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"push 0x401ef0","disasm":"push data.00401ef0","bytes":"68f01e4000","family":"cpu","type":"push","reloc":false,"type_num":13,"type2_num":0,"xrefs_from":[{"addr":4202224,"type":"DATA"}]},{"offset":4202965,"esil":"edi,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push edi","disasm":"push edi","bytes":"57","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4202966,"esil":"4202336,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x401f60","disasm":"call sym._assert_fopen","bytes":"e885fdffff","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4202336,"fail":4202971,"xrefs_from":[{"addr":4202336,"type":"CALL"}]},{"offset":4202971,"esil":"0x14,ebp,-,[4],edx,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"mov edx, dword [ebp - 0x14]","disasm":"mov edx, dword [var_18h]","bytes":"8b55ec","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4202974,"esil":"esp,[4],4,esp,+=,ecx,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"pop ecx","disasm":"pop ecx","bytes":"59","family":"cpu","type":"pop","reloc":false,"type_num":14,"type2_num":0},{"offset":4202975,"esil":"eax,edi,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"mov edi, eax","disasm":"mov edi, eax","bytes":"89c7","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4202977,"esil":"esp,[4],4,esp,+=,ebx,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"pop ebx","disasm":"pop ebx","bytes":"5b","family":"cpu","type":"pop","reloc":false,"type_num":14,"type2_num":0},{"offset":4202978,"ptr":4202620,"val":4202620,"esil":"4202620,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"push 0x40207c","disasm":"push data.0040207c","bytes":"687c204000","family":"cpu","type":"push","reloc":false,"type_num":13,"type2_num":0,"xrefs_from":[{"addr":4202620,"type":"DATA"}]},{"offset":4202983,"esil":"edx,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push edx","disasm":"push edx","bytes":"52","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4202984,"esil":"4202336,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x401f60","disasm":"call sym._assert_fopen","bytes":"e873fdffff","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4202336,"fail":4202989,"xrefs_from":[{"addr":4202336,"type":"CALL"}]},{"offset":4202989,"val":12,"esil":"12,esp,+=,31,$o,of,:=,31,$s,sf,:=,$z,zf,:=,31,$c,cf,:=,$p,pf,:=,3,$c,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"add esp, 0xc","disasm":"add esp, 0xc","bytes":"83c40c","family":"cpu","type":"add","reloc":false,"type_num":17,"type2_num":0},{"offset":4202992,"esil":"eax,ebx,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"mov ebx, eax","disasm":"mov ebx, eax","bytes":"89c3","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4202994,"esil":"esi,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push esi","disasm":"push esi","bytes":"56","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4202995,"esil":"eax,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push eax","disasm":"push eax","bytes":"50","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4202996,"esil":"edi,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push edi","disasm":"push edi","bytes":"57","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4202997,"esil":"4200512,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x401840","disasm":"call sym._process","bytes":"e846f6ffff","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4200512,"fail":4203002,"xrefs_from":[{"addr":4200512,"type":"CALL"}]},{"offset":4203002,"esil":"ebx,esp,=[4]","refptr":true,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"mov dword [esp], ebx","disasm":"mov dword [esp], ebx","bytes":"891c24","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4203005,"esil":"eax,esi,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"mov esi, eax","disasm":"mov esi, eax","bytes":"89c6","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4203007,"esil":"4204656,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x402870","disasm":"call sym._fclose","bytes":"e86c060000","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4204656,"fail":4203012,"xrefs_from":[{"addr":4204656,"type":"CALL"}]},{"offset":4203012,"esil":"edi,esp,=[4]","refptr":true,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"mov dword [esp], edi","disasm":"mov dword [esp], edi","bytes":"893c24","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4203015,"esil":"4204656,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x402870","disasm":"call sym._fclose","bytes":"e864060000","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4204656,"fail":4203020,"xrefs_from":[{"addr":4204656,"type":"CALL"}]},{"offset":4203020,"esil":"0xc,ebp,-,esp,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"lea esp, [ebp - 0xc]","disasm":"lea esp, [var_10h]","bytes":"8d65f4","family":"cpu","type":"lea","reloc":false,"type_num":33,"type2_num":0},{"offset":4203023,"esil":"esi,eax,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"mov eax, esi","disasm":"mov eax, esi","bytes":"89f0","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4203025,"esil":"esp,[4],4,esp,+=,ebx,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"pop ebx","disasm":"pop ebx","bytes":"5b","family":"cpu","type":"pop","reloc":false,"type_num":14,"type2_num":0},{"offset":4203026,"esil":"esp,[4],4,esp,+=,esi,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"pop esi","disasm":"pop esi","bytes":"5e","family":"cpu","type":"pop","reloc":false,"type_num":14,"type2_num":0},{"offset":4203027,"esil":"esp,[4],4,esp,+=,edi,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"pop edi","disasm":"pop edi","bytes":"5f","family":"cpu","type":"pop","reloc":false,"type_num":14,"type2_num":0},{"offset":4203028,"esil":"esp,[4],4,esp,+=,ebp,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"pop ebp","disasm":"pop ebp","bytes":"5d","family":"cpu","type":"pop","reloc":false,"type_num":14,"type2_num":0},{"offset":4203029,"esil":"esp,[4],eip,=,4,esp,+=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"ret","disasm":"ret","bytes":"c3","family":"cpu","type":"ret","reloc":false,"type_num":5,"type2_num":0}]},{"ops":[{"offset":4203030,"esil":"8,0x1,eax,+,[1],~,edx,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203369,"size":4,"opcode":"movsx edx, byte [eax + 1]","disasm":"movsx edx, byte [eax + 1]","bytes":"0fbe5001","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4203034,"ptr":111,"val":111,"esil":"111,edx,==,$z,zf,:=,32,$b,cf,:=,$p,pf,:=,31,$s,sf,:=,111,0x80000000,-,!,31,$o,^,of,:=,3,$b,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"cmp edx, 0x6f","disasm":"cmp edx, 0x6f","bytes":"83fa6f","family":"cpu","type":"cmp","reloc":false,"type_num":15,"type2_num":0},{"offset":4203037,"esil":"zf,?{,4203256,eip,=,}","refptr":false,"fcn_addr":4202784,"fcn_last":4203367,"size":6,"opcode":"je 0x4022f8","disasm":"je 0x4022f8","bytes":"0f84d5000000","family":"cpu","type":"cjmp","reloc":false,"type_num":2147483649,"type2_num":0,"jump":4203256,"fail":4203043}]},{"ops":[{"offset":4203043,"ptr":115,"val":115,"esil":"115,edx,==,$z,zf,:=,32,$b,cf,:=,$p,pf,:=,31,$s,sf,:=,115,0x80000000,-,!,31,$o,^,of,:=,3,$b,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"cmp edx, 0x73","disasm":"cmp edx, 0x73","bytes":"83fa73","family":"cpu","type":"cmp","reloc":false,"type_num":15,"type2_num":0},{"offset":4203046,"esil":"zf,?{,4203090,eip,=,}","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"je 0x402252","disasm":"je 0x402252","bytes":"742a","family":"cpu","type":"cjmp","reloc":false,"type_num":2147483649,"type2_num":0,"jump":4203090,"fail":4203048}]},{"ops":[{"offset":4203048,"esil":"edx,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push edx","disasm":"push edx","bytes":"52","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4203049,"esil":"8,0x1,eax,+,[1],~,eax,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203369,"size":4,"opcode":"movsx eax, byte [eax + 1]","disasm":"movsx eax, byte [eax + 1]","bytes":"0fbe4001","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4203053,"esil":"eax,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push eax","disasm":"push eax","bytes":"50","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4203054,"ptr":4215044,"esil":"0x405104,[4],eax,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"mov eax, dword [0x405104]","disasm":"mov eax, dword [sym.imp.msvcrt.dll__iob]","bytes":"a104514000","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0,"xrefs_from":[{"addr":4215044,"type":"DATA"}]},{"offset":4203059,"ptr":4202623,"val":4202623,"esil":"4202623,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"push 0x40207f","disasm":"push data.0040207f","bytes":"687f204000","family":"cpu","type":"push","reloc":false,"type_num":13,"type2_num":0,"xrefs_from":[{"addr":4202623,"type":"DATA"}]},{"offset":4203064,"ptr":64,"val":64,"esil":"64,eax,+=,31,$o,of,:=,31,$s,sf,:=,$z,zf,:=,31,$c,cf,:=,$p,pf,:=,3,$c,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"add eax, 0x40","disasm":"add eax, 0x40","bytes":"83c040","family":"cpu","type":"add","reloc":false,"type_num":17,"type2_num":0},{"offset":4203067,"esil":"eax,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push eax","disasm":"push eax","bytes":"50","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4203068,"esil":"4204848,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x402930","disasm":"call sym._fprintf","bytes":"e8ef060000","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4204848,"fail":4203073,"xrefs_from":[{"addr":4204848,"type":"CALL"}]},{"offset":4203073,"esil":"esp,[4],4,esp,+=,eax,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"pop eax","disasm":"pop eax","bytes":"58","family":"cpu","type":"pop","reloc":false,"type_num":14,"type2_num":0},{"offset":4203074,"esil":"edi,[4],eax,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"mov eax, dword [edi]","disasm":"mov eax, dword [edi]","bytes":"8b07","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4203076,"esil":"eax,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push eax","disasm":"push eax","bytes":"50","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4203077,"esil":"4199472,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x401430","disasm":"call sym._usage","bytes":"e8e6f1ffff","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4199472,"fail":4203082,"xrefs_from":[{"addr":4199472,"type":"CALL"}]},{"offset":4203082,"val":16,"esil":"16,esp,+=,31,$o,of,:=,31,$s,sf,:=,$z,zf,:=,31,$c,cf,:=,$p,pf,:=,3,$c,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"add esp, 0x10","disasm":"add esp, 0x10","bytes":"83c410","family":"cpu","type":"add","reloc":false,"type_num":17,"type2_num":0},{"offset":4203085,"esil":"0x402174,eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"jmp 0x402174","disasm":"jmp 0x402174","bytes":"e922ffffff","family":"cpu","type":"jmp","reloc":false,"type_num":1,"type2_num":0,"jump":4202868,"xrefs_from":[{"addr":4202868,"type":"CODE"}]}]},{"ops":[{"offset":4203090,"val":1,"esil":"ebx,++=,31,$o,of,:=,31,$s,sf,:=,$z,zf,:=,$p,pf,:=,3,$c,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"inc ebx","disasm":"inc ebx","bytes":"43","family":"cpu","type":"add","reloc":false,"type_num":17,"type2_num":0},{"offset":4203091,"esil":"esi,ebx,==,$z,zf,:=,32,$b,cf,:=,$p,pf,:=,31,$s,sf,:=,esi,0x80000000,-,!,31,$o,^,of,:=,3,$b,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"cmp ebx, esi","disasm":"cmp ebx, esi","bytes":"39f3","family":"cpu","type":"cmp","reloc":false,"type_num":15,"type2_num":0},{"offset":4203093,"esil":"of,!,sf,^,?{,4203216,eip,=,}","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"jge 0x4022d0","disasm":"jge 0x4022d0","bytes":"7d79","family":"cpu","type":"cjmp","reloc":false,"type_num":2147483649,"type2_num":0,"jump":4203216,"fail":4203095}]},{"ops":[{"offset":4203095,"esil":"ebx,4,*,edi,+,[4],eax,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"mov eax, dword [edi + ebx*4]","disasm":"mov eax, dword [edi + ebx*4]","bytes":"8b049f","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0,"xrefs_to":[{"addr":4203251,"type":"CODE"}]},{"offset":4203098,"val":45,"esil":"45,eax,[1],==,$z,zf,:=,8,$b,cf,:=,$p,pf,:=,7,$s,sf,:=,45,0x80,-,!,7,$o,^,of,:=,3,$b,af,:=","refptr":true,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"cmp byte [eax], 0x2d","disasm":"cmp byte [eax], 0x2d","bytes":"80382d","family":"cpu","type":"cmp","reloc":false,"type_num":15,"type2_num":0},{"offset":4203101,"esil":"zf,?{,4203179,eip,=,}","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"je 0x4022ab","disasm":"je 0x4022ab","bytes":"744c","family":"cpu","type":"cjmp","reloc":false,"type_num":2147483649,"type2_num":0,"jump":4203179,"fail":4203103}]},{"ops":[{"offset":4203103,"esil":"eax,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push eax","disasm":"push eax","bytes":"50","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0,"xrefs_to":[{"addr":4203214,"type":"CODE"}]},{"offset":4203104,"ptr":16,"val":16,"esil":"16,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"push 0x10","disasm":"push 0x10","bytes":"6a10","family":"cpu","type":"push","reloc":false,"type_num":13,"type2_num":0},{"offset":4203106,"ptr":0,"val":0,"esil":"0,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"push 0","disasm":"push 0","bytes":"6a00","family":"cpu","type":"push","reloc":false,"type_num":13,"type2_num":0},{"offset":4203108,"esil":"ebx,4,*,edi,+,[4],eax,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"mov eax, dword [edi + ebx*4]","disasm":"mov eax, dword [edi + ebx*4]","bytes":"8b049f","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4203111,"esil":"eax,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push eax","disasm":"push eax","bytes":"50","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4203112,"esil":"4204624,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x402850","disasm":"call sym._strtol","bytes":"e8e3050000","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4204624,"fail":4203117,"xrefs_from":[{"addr":4204624,"type":"CALL"}]},{"offset":4203117,"val":16,"esil":"16,esp,+=,31,$o,of,:=,31,$s,sf,:=,$z,zf,:=,31,$c,cf,:=,$p,pf,:=,3,$c,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"add esp, 0x10","disasm":"add esp, 0x10","bytes":"83c410","family":"cpu","type":"add","reloc":false,"type_num":17,"type2_num":0},{"offset":4203120,"esil":"ax,0xe,ebp,-,=[2]","refptr":true,"fcn_addr":4202784,"fcn_last":4203369,"size":4,"opcode":"mov word [ebp - 0xe], ax","disasm":"mov word [var_12h], ax","bytes":"668945f2","family":"cpu","type":"mov","reloc":false,"type_num":268435465,"type2_num":0},{"offset":4203124,"ptr":16384,"val":16384,"esil":"16384,eax,-=,16384,0x80000000,-,!,31,$o,^,of,:=,31,$s,sf,:=,$z,zf,:=,$p,pf,:=,32,$b,cf,:=,3,$b,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"sub eax, 0x4000","disasm":"sub eax, 0x4000","bytes":"2d00400000","family":"cpu","type":"sub","reloc":false,"type_num":18,"type2_num":0},{"offset":4203129,"ptr":49150,"val":49150,"esil":"49150,ax,==,$z,zf,:=,16,$b,cf,:=,$p,pf,:=,15,$s,sf,:=,49150,0x8000,-,!,15,$o,^,of,:=,3,$b,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203369,"size":4,"opcode":"cmp ax, 0xbffe","disasm":"cmp ax, 0xbffe","bytes":"663dfebf","family":"cpu","type":"cmp","reloc":false,"type_num":15,"type2_num":0},{"offset":4203133,"esil":"zf,cf,|,?{,4202867,eip,=,}","refptr":false,"fcn_addr":4202784,"fcn_last":4203367,"size":6,"opcode":"jbe 0x402173","disasm":"jbe 0x402173","bytes":"0f86f0feffff","family":"cpu","type":"cjmp","reloc":false,"type_num":2147483649,"type2_num":0,"jump":4202867,"fail":4203139}]},{"ops":[{"offset":4203139,"ptr":4215044,"esil":"0x405104,[4],eax,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"mov eax, dword [0x405104]","disasm":"mov eax, dword [sym.imp.msvcrt.dll__iob]","bytes":"a104514000","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0,"xrefs_from":[{"addr":4215044,"type":"DATA"}]},{"offset":4203144,"ptr":64,"val":64,"esil":"64,eax,+=,31,$o,of,:=,31,$s,sf,:=,$z,zf,:=,31,$c,cf,:=,$p,pf,:=,3,$c,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"add eax, 0x40","disasm":"add eax, 0x40","bytes":"83c040","family":"cpu","type":"add","reloc":false,"type_num":17,"type2_num":0},{"offset":4203147,"esil":"eax,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push eax","disasm":"push eax","bytes":"50","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4203148,"ptr":52,"val":52,"esil":"52,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"push 0x34","disasm":"push 0x34","bytes":"6a34","family":"cpu","type":"push","reloc":false,"type_num":13,"type2_num":0},{"offset":4203150,"ptr":1,"val":1,"esil":"1,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"push 1","disasm":"push 1","bytes":"6a01","family":"cpu","type":"push","reloc":false,"type_num":13,"type2_num":0},{"offset":4203152,"ptr":4202672,"val":4202672,"esil":"4202672,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"push 0x4020b0","disasm":"push data.004020b0","bytes":"68b0204000","family":"cpu","type":"push","reloc":false,"type_num":13,"type2_num":0,"xrefs_from":[{"addr":4202672,"type":"DATA"}]},{"offset":4203157,"esil":"4204784,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x4028f0","disasm":"call sym._fwrite","bytes":"e856060000","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4204784,"fail":4203162,"xrefs_from":[{"addr":4204784,"type":"CALL"}]},{"offset":4203162,"esil":"edi,[4],ecx,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"mov ecx, dword [edi]","disasm":"mov ecx, dword [edi]","bytes":"8b0f","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4203164,"esil":"esp,[4],4,esp,+=,eax,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"pop eax","disasm":"pop eax","bytes":"58","family":"cpu","type":"pop","reloc":false,"type_num":14,"type2_num":0},{"offset":4203165,"esil":"ecx,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push ecx","disasm":"push ecx","bytes":"51","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4203166,"esil":"4199472,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x401430","disasm":"call sym._usage","bytes":"e88df1ffff","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4199472,"fail":4203171,"xrefs_from":[{"addr":4199472,"type":"CALL"}]},{"offset":4203171,"val":16,"esil":"16,esp,+=,31,$o,of,:=,31,$s,sf,:=,$z,zf,:=,31,$c,cf,:=,$p,pf,:=,3,$c,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"add esp, 0x10","disasm":"add esp, 0x10","bytes":"83c410","family":"cpu","type":"add","reloc":false,"type_num":17,"type2_num":0},{"offset":4203174,"esil":"0x402173,eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"jmp 0x402173","disasm":"jmp 0x402173","bytes":"e9c8feffff","family":"cpu","type":"jmp","reloc":false,"type_num":1,"type2_num":0,"jump":4202867,"xrefs_from":[{"addr":4202867,"type":"CODE"}]}]},{"ops":[{"offset":4203179,"ptr":4215044,"esil":"0x405104,[4],eax,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"mov eax, dword [0x405104]","disasm":"mov eax, dword [sym.imp.msvcrt.dll__iob]","bytes":"a104514000","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0,"xrefs_from":[{"addr":4215044,"type":"DATA"}]},{"offset":4203184,"ptr":64,"val":64,"esil":"64,eax,+=,31,$o,of,:=,31,$s,sf,:=,$z,zf,:=,31,$c,cf,:=,$p,pf,:=,3,$c,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"add eax, 0x40","disasm":"add eax, 0x40","bytes":"83c040","family":"cpu","type":"add","reloc":false,"type_num":17,"type2_num":0},{"offset":4203187,"esil":"eax,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push eax","disasm":"push eax","bytes":"50","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4203188,"ptr":24,"val":24,"esil":"24,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"push 0x18","disasm":"push 0x18","bytes":"6a18","family":"cpu","type":"push","reloc":false,"type_num":13,"type2_num":0},{"offset":4203190,"ptr":1,"val":1,"esil":"1,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"push 1","disasm":"push 1","bytes":"6a01","family":"cpu","type":"push","reloc":false,"type_num":13,"type2_num":0},{"offset":4203192,"ptr":4202725,"val":4202725,"esil":"4202725,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"push 0x4020e5","disasm":"push data.004020e5","bytes":"68e5204000","family":"cpu","type":"push","reloc":false,"type_num":13,"type2_num":0,"xrefs_from":[{"addr":4202725,"type":"DATA"}]},{"offset":4203197,"esil":"4204784,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x4028f0","disasm":"call sym._fwrite","bytes":"e82e060000","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4204784,"fail":4203202,"xrefs_from":[{"addr":4204784,"type":"CALL"}]},{"offset":4203202,"esil":"esp,[4],4,esp,+=,eax,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"pop eax","disasm":"pop eax","bytes":"58","family":"cpu","type":"pop","reloc":false,"type_num":14,"type2_num":0},{"offset":4203203,"esil":"edi,[4],eax,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"mov eax, dword [edi]","disasm":"mov eax, dword [edi]","bytes":"8b07","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4203205,"esil":"eax,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push eax","disasm":"push eax","bytes":"50","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4203206,"esil":"4199472,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x401430","disasm":"call sym._usage","bytes":"e865f1ffff","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4199472,"fail":4203211,"xrefs_from":[{"addr":4199472,"type":"CALL"}]},{"offset":4203211,"val":16,"esil":"16,esp,+=,31,$o,of,:=,31,$s,sf,:=,$z,zf,:=,31,$c,cf,:=,$p,pf,:=,3,$c,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"add esp, 0x10","disasm":"add esp, 0x10","bytes":"83c410","family":"cpu","type":"add","reloc":false,"type_num":17,"type2_num":0},{"offset":4203214,"esil":"0x40225f,eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"jmp 0x40225f","disasm":"jmp 0x40225f","bytes":"eb8f","family":"cpu","type":"jmp","reloc":false,"type_num":1,"type2_num":0,"jump":4203103,"xrefs_from":[{"addr":4203103,"type":"CODE"}]}]},{"ops":[{"offset":4203216,"ptr":4215044,"esil":"0x405104,[4],eax,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"mov eax, dword [0x405104]","disasm":"mov eax, dword [sym.imp.msvcrt.dll__iob]","bytes":"a104514000","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0,"xrefs_from":[{"addr":4215044,"type":"DATA"}]},{"offset":4203221,"ptr":64,"val":64,"esil":"64,eax,+=,31,$o,of,:=,31,$s,sf,:=,$z,zf,:=,31,$c,cf,:=,$p,pf,:=,3,$c,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"add eax, 0x40","disasm":"add eax, 0x40","bytes":"83c040","family":"cpu","type":"add","reloc":false,"type_num":17,"type2_num":0},{"offset":4203224,"esil":"eax,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push eax","disasm":"push eax","bytes":"50","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4203225,"ptr":24,"val":24,"esil":"24,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"push 0x18","disasm":"push 0x18","bytes":"6a18","family":"cpu","type":"push","reloc":false,"type_num":13,"type2_num":0},{"offset":4203227,"ptr":1,"val":1,"esil":"1,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"push 1","disasm":"push 1","bytes":"6a01","family":"cpu","type":"push","reloc":false,"type_num":13,"type2_num":0},{"offset":4203229,"ptr":4202725,"val":4202725,"esil":"4202725,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"push 0x4020e5","disasm":"push data.004020e5","bytes":"68e5204000","family":"cpu","type":"push","reloc":false,"type_num":13,"type2_num":0,"xrefs_from":[{"addr":4202725,"type":"DATA"}]},{"offset":4203234,"esil":"4204784,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x4028f0","disasm":"call sym._fwrite","bytes":"e809060000","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4204784,"fail":4203239,"xrefs_from":[{"addr":4204784,"type":"CALL"}]},{"offset":4203239,"esil":"edi,[4],eax,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"mov eax, dword [edi]","disasm":"mov eax, dword [edi]","bytes":"8b07","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4203241,"esil":"esp,[4],4,esp,+=,edx,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"pop edx","disasm":"pop edx","bytes":"5a","family":"cpu","type":"pop","reloc":false,"type_num":14,"type2_num":0},{"offset":4203242,"esil":"eax,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push eax","disasm":"push eax","bytes":"50","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4203243,"esil":"4199472,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x401430","disasm":"call sym._usage","bytes":"e840f1ffff","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4199472,"fail":4203248,"xrefs_from":[{"addr":4199472,"type":"CALL"}]},{"offset":4203248,"val":16,"esil":"16,esp,+=,31,$o,of,:=,31,$s,sf,:=,$z,zf,:=,31,$c,cf,:=,$p,pf,:=,3,$c,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"add esp, 0x10","disasm":"add esp, 0x10","bytes":"83c410","family":"cpu","type":"add","reloc":false,"type_num":17,"type2_num":0},{"offset":4203251,"esil":"0x402257,eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"jmp 0x402257","disasm":"jmp 0x402257","bytes":"e95fffffff","family":"cpu","type":"jmp","reloc":false,"type_num":1,"type2_num":0,"jump":4203095,"xrefs_from":[{"addr":4203095,"type":"CODE"}]}]},{"ops":[{"offset":4203256,"val":1,"esil":"ebx,++=,31,$o,of,:=,31,$s,sf,:=,$z,zf,:=,$p,pf,:=,3,$c,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"inc ebx","disasm":"inc ebx","bytes":"43","family":"cpu","type":"add","reloc":false,"type_num":17,"type2_num":0},{"offset":4203257,"esil":"esi,ebx,==,$z,zf,:=,32,$b,cf,:=,$p,pf,:=,31,$s,sf,:=,esi,0x80000000,-,!,31,$o,^,of,:=,3,$b,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"cmp ebx, esi","disasm":"cmp ebx, esi","bytes":"39f3","family":"cpu","type":"cmp","reloc":false,"type_num":15,"type2_num":0},{"offset":4203259,"esil":"of,!,sf,^,?{,4203317,eip,=,}","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"jge 0x402335","disasm":"jge 0x402335","bytes":"7d38","family":"cpu","type":"cjmp","reloc":false,"type_num":2147483649,"type2_num":0,"jump":4203317,"fail":4203261}]},{"ops":[{"offset":4203261,"esil":"ebx,4,*,edi,+,[4],eax,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"mov eax, dword [edi + ebx*4]","disasm":"mov eax, dword [edi + ebx*4]","bytes":"8b049f","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0,"xrefs_to":[{"addr":4203352,"type":"CODE"}]},{"offset":4203264,"val":45,"esil":"45,eax,[1],==,$z,zf,:=,8,$b,cf,:=,$p,pf,:=,7,$s,sf,:=,45,0x80,-,!,7,$o,^,of,:=,3,$b,af,:=","refptr":true,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"cmp byte [eax], 0x2d","disasm":"cmp byte [eax], 0x2d","bytes":"80382d","family":"cpu","type":"cmp","reloc":false,"type_num":15,"type2_num":0},{"offset":4203267,"esil":"zf,?{,4203277,eip,=,}","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"je 0x40230d","disasm":"je 0x40230d","bytes":"7408","family":"cpu","type":"cjmp","reloc":false,"type_num":2147483649,"type2_num":0,"jump":4203277,"fail":4203269}]},{"ops":[{"offset":4203269,"esil":"eax,0x14,ebp,-,=[4]","refptr":true,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"mov dword [ebp - 0x14], eax","disasm":"mov dword [var_18h], eax","bytes":"8945ec","family":"cpu","type":"mov","reloc":false,"type_num":268435465,"type2_num":0,"xrefs_to":[{"addr":4203315,"type":"CODE"}]},{"offset":4203272,"esil":"0x402173,eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"jmp 0x402173","disasm":"jmp 0x402173","bytes":"e966feffff","family":"cpu","type":"jmp","reloc":false,"type_num":1,"type2_num":0,"jump":4202867,"xrefs_from":[{"addr":4202867,"type":"CODE"}]}]},{"ops":[{"offset":4203277,"ptr":4215044,"esil":"0x405104,[4],eax,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"mov eax, dword [0x405104]","disasm":"mov eax, dword [sym.imp.msvcrt.dll__iob]","bytes":"a104514000","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0,"xrefs_from":[{"addr":4215044,"type":"DATA"}]},{"offset":4203282,"ptr":64,"val":64,"esil":"64,eax,+=,31,$o,of,:=,31,$s,sf,:=,$z,zf,:=,31,$c,cf,:=,$p,pf,:=,3,$c,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"add eax, 0x40","disasm":"add eax, 0x40","bytes":"83c040","family":"cpu","type":"add","reloc":false,"type_num":17,"type2_num":0},{"offset":4203285,"esil":"eax,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push eax","disasm":"push eax","bytes":"50","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4203286,"ptr":24,"val":24,"esil":"24,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"push 0x18","disasm":"push 0x18","bytes":"6a18","family":"cpu","type":"push","reloc":false,"type_num":13,"type2_num":0},{"offset":4203288,"ptr":1,"val":1,"esil":"1,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"push 1","disasm":"push 1","bytes":"6a01","family":"cpu","type":"push","reloc":false,"type_num":13,"type2_num":0},{"offset":4203290,"ptr":4202750,"val":4202750,"esil":"4202750,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"push 0x4020fe","disasm":"push data.004020fe","bytes":"68fe204000","family":"cpu","type":"push","reloc":false,"type_num":13,"type2_num":0,"xrefs_from":[{"addr":4202750,"type":"DATA"}]},{"offset":4203295,"esil":"4204784,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x4028f0","disasm":"call sym._fwrite","bytes":"e8cc050000","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4204784,"fail":4203300,"xrefs_from":[{"addr":4204784,"type":"CALL"}]},{"offset":4203300,"esil":"edi,[4],ecx,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"mov ecx, dword [edi]","disasm":"mov ecx, dword [edi]","bytes":"8b0f","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4203302,"esil":"esp,[4],4,esp,+=,eax,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"pop eax","disasm":"pop eax","bytes":"58","family":"cpu","type":"pop","reloc":false,"type_num":14,"type2_num":0},{"offset":4203303,"esil":"ecx,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push ecx","disasm":"push ecx","bytes":"51","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4203304,"esil":"4199472,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x401430","disasm":"call sym._usage","bytes":"e803f1ffff","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4199472,"fail":4203309,"xrefs_from":[{"addr":4199472,"type":"CALL"}]},{"offset":4203309,"esil":"ebx,4,*,edi,+,[4],eax,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"mov eax, dword [edi + ebx*4]","disasm":"mov eax, dword [edi + ebx*4]","bytes":"8b049f","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4203312,"val":16,"esil":"16,esp,+=,31,$o,of,:=,31,$s,sf,:=,$z,zf,:=,31,$c,cf,:=,$p,pf,:=,3,$c,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"add esp, 0x10","disasm":"add esp, 0x10","bytes":"83c410","family":"cpu","type":"add","reloc":false,"type_num":17,"type2_num":0},{"offset":4203315,"esil":"0x402305,eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"jmp 0x402305","disasm":"jmp 0x402305","bytes":"ebd0","family":"cpu","type":"jmp","reloc":false,"type_num":1,"type2_num":0,"jump":4203269,"xrefs_from":[{"addr":4203269,"type":"CODE"}]}]},{"ops":[{"offset":4203317,"ptr":4215044,"esil":"0x405104,[4],eax,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"mov eax, dword [0x405104]","disasm":"mov eax, dword [sym.imp.msvcrt.dll__iob]","bytes":"a104514000","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0,"xrefs_from":[{"addr":4215044,"type":"DATA"}]},{"offset":4203322,"ptr":64,"val":64,"esil":"64,eax,+=,31,$o,of,:=,31,$s,sf,:=,$z,zf,:=,31,$c,cf,:=,$p,pf,:=,3,$c,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"add eax, 0x40","disasm":"add eax, 0x40","bytes":"83c040","family":"cpu","type":"add","reloc":false,"type_num":17,"type2_num":0},{"offset":4203325,"esil":"eax,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push eax","disasm":"push eax","bytes":"50","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4203326,"ptr":24,"val":24,"esil":"24,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"push 0x18","disasm":"push 0x18","bytes":"6a18","family":"cpu","type":"push","reloc":false,"type_num":13,"type2_num":0},{"offset":4203328,"ptr":1,"val":1,"esil":"1,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"push 1","disasm":"push 1","bytes":"6a01","family":"cpu","type":"push","reloc":false,"type_num":13,"type2_num":0},{"offset":4203330,"ptr":4202750,"val":4202750,"esil":"4202750,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"push 0x4020fe","disasm":"push data.004020fe","bytes":"68fe204000","family":"cpu","type":"push","reloc":false,"type_num":13,"type2_num":0,"xrefs_from":[{"addr":4202750,"type":"DATA"}]},{"offset":4203335,"esil":"4204784,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x4028f0","disasm":"call sym._fwrite","bytes":"e8a4050000","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4204784,"fail":4203340,"xrefs_from":[{"addr":4204784,"type":"CALL"}]},{"offset":4203340,"esil":"esp,[4],4,esp,+=,eax,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"pop eax","disasm":"pop eax","bytes":"58","family":"cpu","type":"pop","reloc":false,"type_num":14,"type2_num":0},{"offset":4203341,"esil":"edi,[4],eax,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"mov eax, dword [edi]","disasm":"mov eax, dword [edi]","bytes":"8b07","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4203343,"esil":"eax,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push eax","disasm":"push eax","bytes":"50","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4203344,"esil":"4199472,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x401430","disasm":"call sym._usage","bytes":"e8dbf0ffff","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4199472,"fail":4203349,"xrefs_from":[{"addr":4199472,"type":"CALL"}]},{"offset":4203349,"val":16,"esil":"16,esp,+=,31,$o,of,:=,31,$s,sf,:=,$z,zf,:=,31,$c,cf,:=,$p,pf,:=,3,$c,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"add esp, 0x10","disasm":"add esp, 0x10","bytes":"83c410","family":"cpu","type":"add","reloc":false,"type_num":17,"type2_num":0},{"offset":4203352,"esil":"0x4022fd,eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"jmp 0x4022fd","disasm":"jmp 0x4022fd","bytes":"eba3","family":"cpu","type":"jmp","reloc":false,"type_num":1,"type2_num":0,"jump":4203261,"xrefs_from":[{"addr":4203261,"type":"CODE"}]}]},{"ops":[{"offset":4203354,"val":12,"esil":"12,esp,-=,12,0x80000000,-,!,31,$o,^,of,:=,31,$s,sf,:=,$z,zf,:=,$p,pf,:=,32,$b,cf,:=,3,$b,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"sub esp, 0xc","disasm":"sub esp, 0xc","bytes":"83ec0c","family":"cpu","type":"sub","reloc":false,"type_num":18,"type2_num":0},{"offset":4203357,"esil":"edi,[4],eax,=","refptr":true,"fcn_addr":4202784,"fcn_last":4203371,"size":2,"opcode":"mov eax, dword [edi]","disasm":"mov eax, dword [edi]","bytes":"8b07","family":"cpu","type":"mov","reloc":false,"type_num":9,"type2_num":0},{"offset":4203359,"esil":"eax,4,esp,-,=[4],4,esp,-=","refptr":false,"fcn_addr":4202784,"fcn_last":4203372,"size":1,"opcode":"push eax","disasm":"push eax","bytes":"50","family":"cpu","type":"rpush","reloc":false,"type_num":268435468,"type2_num":0},{"offset":4203360,"esil":"4199472,eip,4,esp,-=,esp,=[],eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"call 0x401430","disasm":"call sym._usage","bytes":"e8cbf0ffff","family":"cpu","type":"call","reloc":false,"type_num":3,"type2_num":0,"jump":4199472,"fail":4203365,"xrefs_from":[{"addr":4199472,"type":"CALL"}]},{"offset":4203365,"val":16,"esil":"16,esp,+=,31,$o,of,:=,31,$s,sf,:=,$z,zf,:=,31,$c,cf,:=,$p,pf,:=,3,$c,af,:=","refptr":false,"fcn_addr":4202784,"fcn_last":4203370,"size":3,"opcode":"add esp, 0x10","disasm":"add esp, 0x10","bytes":"83c410","family":"cpu","type":"add","reloc":false,"type_num":17,"type2_num":0},{"offset":4203368,"esil":"0x402160,eip,=","refptr":false,"fcn_addr":4202784,"fcn_last":4203368,"size":5,"opcode":"jmp 0x402160","disasm":"jmp 0x402160","bytes":"e9f3fdffff","family":"cpu","type":"jmp","reloc":false,"type_num":1,"type2_num":0,"jump":4202848,"xrefs_from":[{"addr":4202848,"type":"CODE"}]}]}]}],"isj":[{"name":"__mingw32_init_mainargs","flagname":"sym.__mingw32_init_mainargs","realname":"__mingw32_init_mainargs","ordinal":0,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4198400,"paddr":1024,"is_imported":false,"lib":""},{"name":"__mingw32_init_fmode","flagname":"sym.__mingw32_init_fmode","realname":"__mingw32_init_fmode","ordinal":1,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4198464,"paddr":1088,"is_imported":false,"lib":""},{"name":"__gnu_exception_handler@4","flagname":"sym.__gnu_exception_handler_4","realname":"__gnu_exception_handler@4","ordinal":2,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4198624,"paddr":1248,"is_imported":false,"lib":""},{"name":"___mingw_CRTStartup","flagname":"sym.___mingw_CRTStartup","realname":"___mingw_CRTStartup","ordinal":3,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4198880,"paddr":1504,"is_imported":false,"lib":""},{"name":"_mainCRTStartup","flagname":"sym._mainCRTStartup","realname":"_mainCRTStartup","ordinal":4,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4198976,"paddr":1600,"is_imported":false,"lib":""},{"name":"_WinMainCRTStartup","flagname":"sym._WinMainCRTStartup","realname":"_WinMainCRTStartup","ordinal":5,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4199008,"paddr":1632,"is_imported":false,"lib":""},{"name":"_atexit","flagname":"sym._atexit","realname":"_atexit","ordinal":6,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4199040,"paddr":1664,"is_imported":false,"lib":""},{"name":"__onexit","flagname":"sym.__onexit","realname":"__onexit","ordinal":7,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4199072,"paddr":1696,"is_imported":false,"lib":""},{"name":"___do_sjlj_init","flagname":"sym.___do_sjlj_init","realname":"___do_sjlj_init","ordinal":8,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4199104,"paddr":1728,"is_imported":false,"lib":""},{"name":"_usage","flagname":"sym._usage","realname":"_usage","ordinal":9,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4199472,"paddr":2096,"is_imported":false,"lib":""},{"name":"_read16","flagname":"sym._read16","realname":"_read16","ordinal":10,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4199664,"paddr":2288,"is_imported":false,"lib":""},{"name":"_write16","flagname":"sym._write16","realname":"_write16","ordinal":11,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4199728,"paddr":2352,"is_imported":false,"lib":""},{"name":"_readmem16","flagname":"sym._readmem16","realname":"_readmem16","ordinal":12,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4199776,"paddr":2400,"is_imported":false,"lib":""},{"name":"_writemem16","flagname":"sym._writemem16","realname":"_writemem16","ordinal":13,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4199808,"paddr":2432,"is_imported":false,"lib":""},{"name":"_process","flagname":"sym._process","realname":"_process","ordinal":14,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4200512,"paddr":3136,"is_imported":false,"lib":""},{"name":"_assert_fopen","flagname":"sym._assert_fopen","realname":"_assert_fopen","ordinal":15,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4202336,"paddr":4960,"is_imported":false,"lib":""},{"name":"_main","flagname":"sym._main","realname":"_main","ordinal":16,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4202784,"paddr":5408,"is_imported":false,"lib":""},{"name":"_do_pseudo_reloc","flagname":"sym._do_pseudo_reloc","realname":"_do_pseudo_reloc","ordinal":17,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4203376,"paddr":6000,"is_imported":false,"lib":""},{"name":"__pei386_runtime_relocator","flagname":"sym.__pei386_runtime_relocator","realname":"__pei386_runtime_relocator","ordinal":18,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4203440,"paddr":6064,"is_imported":false,"lib":""},{"name":"__fpreset","flagname":"sym.__fpreset","realname":"__fpreset","ordinal":19,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4203488,"paddr":6112,"is_imported":false,"lib":""},{"name":"___do_global_dtors","flagname":"sym.___do_global_dtors","realname":"___do_global_dtors","ordinal":20,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4203504,"paddr":6128,"is_imported":false,"lib":""},{"name":"___do_global_ctors","flagname":"sym.___do_global_ctors","realname":"___do_global_ctors","ordinal":21,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4203552,"paddr":6176,"is_imported":false,"lib":""},{"name":"___main","flagname":"sym.___main","realname":"___main","ordinal":22,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4203648,"paddr":6272,"is_imported":false,"lib":""},{"name":"___w32_sharedptr_default_unexpected","flagname":"sym.___w32_sharedptr_default_unexpected","realname":"___w32_sharedptr_default_unexpected","ordinal":23,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4203712,"paddr":6336,"is_imported":false,"lib":""},{"name":"___w32_eh_shared_initialize","flagname":"sym.___w32_eh_shared_initialize","realname":"___w32_eh_shared_initialize","ordinal":24,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4203744,"paddr":6368,"is_imported":false,"lib":""},{"name":"___w32_sharedptr_initialize","flagname":"sym.___w32_sharedptr_initialize","realname":"___w32_sharedptr_initialize","ordinal":25,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4203872,"paddr":6496,"is_imported":false,"lib":""},{"name":"___w32_sharedptr_set","flagname":"sym.___w32_sharedptr_set","realname":"___w32_sharedptr_set","ordinal":26,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4204176,"paddr":6800,"is_imported":false,"lib":""},{"name":"___w32_sharedptr_get","flagname":"sym.___w32_sharedptr_get","realname":"___w32_sharedptr_get","ordinal":27,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4204352,"paddr":6976,"is_imported":false,"lib":""},{"name":"___sjlj_init_ctor","flagname":"sym.___sjlj_init_ctor","realname":"___sjlj_init_ctor","ordinal":28,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4204960,"paddr":7584,"is_imported":false,"lib":""},{"name":"__cexit","flagname":"sym.__cexit","realname":"__cexit","ordinal":29,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4204512,"paddr":7136,"is_imported":false,"lib":""},{"name":"_feof","flagname":"sym._feof","realname":"_feof","ordinal":30,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4204800,"paddr":7424,"is_imported":false,"lib":""},{"name":"_free","flagname":"sym._free","realname":"_free","ordinal":31,"bind":"GLOBAL","size":0,"type":"FUNC","vaddr":4204720,"paddr":7344,"is_imported":false,"lib":""},{"name":"___p__fmode","

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Reproduce the crash using the supplied pddi JSON and the pddf command on the x86 32-bit main function. Start by tracing how pddi data is handled for this input, then compare the behavior with pdd. Done means the supplied case no longer crashes and the decompiler reports a usable result or a handled error.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
reverse-engineering
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.