leetonidas / demovfuscator Goto Github PK

A work-in-progress deobfuscator for movfuscated binaries

License: BSD 2-Clause "Simplified" License

Makefile 1.07% C++ 95.71% C 2.86% CMake 0.36%

demovfuscator's Introduction

Demovfuscator

                       Julian Kirsch & Clemens Jonischkeit
                                 proudly present

                               -------------------
                               Movfuscator-Be-Gone
                               -------------------
                                    a.k.a the
                                ___          ___
                               /  /\        /  /\
                              /  /::\      /  /::\
                             /  /:/\:\    /  /:/\:\    _____
                            /  /:/  \:\  /  /::\ \:\  /____/\
                           /__/:/ \__\:|/__/:/\:\ \:\ \____\/
                           \  \:\ /  /:/\  \:\ \:\_\/
     ___     ___            \  \:\  /:/  \  \:\ \:\ __     ___          ___     ___
    /\  \   /\  \    ___   /\\  \:\/:/.   \  \:\_\//__\   /\  \        /\  \   /\  \
   |::\  \ /::\  \  /\  \ /:/ \  \::/  \ /:\  \:\ /   /  /::\  \  ___ /::\  \ /::\  \
   |:::\  \:/\:\  \ \:\  \:/ /\\__\/:\  \:/ \__\//   /  /:/\:\  \/\__\:/\:\  \:/\:\__\
 __|:|\:\  \  \:\  \ \:\  \ /:/  /  \:\  \ /::\  \  /  _:/ /::\  \/  //  \:\  \ /:/  /
/::::|_\:\__\/ \:\__\ \:\__\:/  / \  \:\__\:/\:\__\/  /\__\:/\:\__\_//__/ \:\__\:/__/___
\:\~~\  \/__/\ /:/  / |:|  |/  /\  \ /:/  // /:/  /\ /:/  //  \/__/ \\  \ /:/  /::::/  /
 \:\  \  \:\  /:/  / \|:|  |__/\:\  /:/  // /:/  /  /:/  //__/:/\:\  \\  /:/  //~~/~~~~
  \:\  \  \:\/:/  /\__|:|__|  \ \:\/:/  //_/:/  /:\/:/  /:\  \/__\:\  \\/:/  /:\~~\
   \:\__\  \::/  /\::::/__/:\__\ \::/  /  /:/  / \::/  / \:\__\   \:\__\:/  / \:\__\
    \/__/   \/__/  ~~~~    \/__/  \/__/   \/__/   \/__/   \/__/    \/__/ __/   \/__/

              -- Recovering from soul-crushing RE nightmares --

Summary

Since the publication of Christopher Domas' M/o/Vfuscator, we spent a great amount of time to analyze the inner workings of the famous one-instruction-compiler. We are happy to announce and release the (to our knowledge) first approach to a generic demovfuscator.

This tool constitutes a generic way of recovering the control flow of the original program from movfuscated binaries. As our approach makes zero assumptions about register allocations or a particular instruction order, but rather adheres to the high-level invariants that each movfuscated binary needs to conform to, our demovfuscator is also not affected by the proposed hardening techniques such as register renaming and instruction reordering. To achieve this, we use a combination of static taint analysis on the movfuscated code and a satisfiable modulo theory (SMT) solver. We successfully used our demovfuscator against several movfuscated binaries that emerged during several CTFs during the last months (Hackover CTF and 0CTF) proving that it already can handle real-world binaries that were not created by us.

Compiling

The demovfuscator is programmed in C++ and as such has several (cool) dependencies:

libcapstone as the core disassembler
libz3 to reason about the semantics of the mov code
libkeystone for re-substitution

As inconvenient this may be, we think that all three libraries should be in your RE toolchain anyway. If this is just unacceptable for you (and you trust us), there is a binary package that can be downloaded below.

After installing the dependencies, simply type make in the demov root directory to compile. Note that you might have to adjust the library include paths to match your distro.

Usage

The demovfuscator supports the following parameters:

./demov [-h] [-i symbols.idc] [-o patched_bin] [-g cfg.dot] obfuscated_input

-h Use for a description of the options
-i Derive symbols from the input bin and store them into symbols.idc
-o Generate a patched executable with explicit control flow and some
   instructions resubstituted
-g Generate a UNIX dot compatible file containing the control flow
   graph (might be easier to read than IDA's graph view)
   Convert the .dot file to something usable by

   cat cfg.dot | dot -Tpng > cfg.png

Downloads

Compiled (very old) demovfuscator (you still need the compiled dependencies)
Bachelor's thesis describing parts of the approach

demovfuscator's People

Contributors

Stargazers

Watchers

demovfuscator's Issues

I met a problem when compiling

[demovfuscator] make                                    17:57:49  ☁  master ☂ ✭
clang++ -Wall -Wextra -pedantic -std=c++11 -lcapstone -lkeystone -lz3 -lssl -lcrypto elfhlp.o demov.o test.o memhlp.o dishlp.o utils.o ctlhlp.o ctlelem.o node.o asmhlp.o -o demov
asmhlp.o: In function `asmhlp':
/home/assassinq/demovfuscator/asmhlp.cpp:21: undefined reference to `ks_open'
asmhlp.o: In function `~asmhlp':
/home/assassinq/demovfuscator/asmhlp.cpp:25: undefined reference to `ks_close'
asmhlp.o: In function `asmhlp::replace(cs_insn*, cs_insn*, symbl)':
/home/assassinq/demovfuscator/asmhlp.cpp:170: undefined reference to `ks_asm'
/home/assassinq/demovfuscator/asmhlp.cpp:179: undefined reference to `ks_free'
clang: error: linker command failed with exit code 1 (use -v to see invocation)
Makefile:8: recipe for target 'demov' failed
make: *** [demov] Error 1

I don't know how to solve it

Fixing the link to Z3 project

Its broken now,
the text is 'https://github.com/Z3Prover/z3' and this should be also the link.

demov.cpp:485:20: error:

demov.cpp:485:20: error: implicit instantiation of undefined template 'std::basic_stringstream'
std::stringstream ret;
^
/usr/bin/../lib/gcc/x86_64-linux-gnu/11/../../../../include/c++/11/iosfwd:108:11: note: template is declared here
class basic_stringstream;
^
1 error generated.

clang: error: linker command failed with exit code 1

here is the error when I execute make command

clang++ -Wall -Wextra -pedantic -std=c++11 -lcapstone -lkeystone -lz3 -lssl -lcrypto elfhlp.o demov.o test.o memhlp.o dishlp.o utils.o ctlhlp.o ctlelem.o node.o asmhlp.o -o demov
asmhlp.o: In function `asmhlp::asmhlp()':
asmhlp.cpp:(.text+0x3f): undefined reference to `ks_open'
asmhlp.o: In function `asmhlp::~asmhlp()':
asmhlp.cpp:(.text+0xcb): undefined reference to `ks_close'
asmhlp.o: In function `asmhlp::replace(cs_insn*, cs_insn*, symbl)':
asmhlp.cpp:(.text+0x1599): undefined reference to `ks_asm'
asmhlp.cpp:(.text+0x1642): undefined reference to `ks_free'
clang: error: linker command failed with exit code 1 (use -v to see invocation)
Makefile:8: recipe for target 'demov' failed
make: *** [demov] Error 1

Replacing the Taint engine

Swapping out the current taint engine for a new, more precise and faster one.

Build error while using sudo make

Compiled on Ubuntu-16-04(vagrant)
I don't know is this only happen on my side :(

Thanks!

arch linux runtime error

i have downloaded and installed the libraries
capstone
keystone
z3

babyc file https://0xd13a.github.io/ctfs/asis2018/babyc/babyc.tar.xz
and got this error when trying ./demov -o patched babyc :

possibly movfuscated Relocations: strncmp at 804d01c sigaction at 804d018 exit at 804d014 read at 804d00c puts at 804d010 Segments: 8048000 - 804bc98 : R X 804cf58 - 85f62ec : RW 85f62ec - 87f6300 : RW The entry point is 804829c parsing entry dispatcher at 0x8048290 master_loop is at 0x8048317 sel_on is at 83f6150 on is at 83f6158 alu_x@81f5ff0 alu_y@0 demov_equal@0x8050600 demov_SYM_ALU_INV16@0x8161050 demov_SYM_ALU_FALSE@0x804d310 demov_SYM_ALU_B7@0x804f190 demov_SYM_ALU_TRUE@0x804d100 demov_SYM_ALU_MUL_SUMS@0x81f5b70 reached end SYM_SEL_DATA@0x83f6170 : 0xb2 SYM_ON@0x83f6158 : 0x75 SYM_DATA@0x83f6174 : 0xb2 discard at 85f6300 demov_bool_and: 27 demov_SYM_ALU_TRUE: 24 demov_SYM_ALU_FALSE: 18 demov_SYM_ALU_B7: 24 demov_equal: 28 demov_add: 92 demov_SYM_ALU_INV16: 12 demov_SYM_ALU_MUL_SUMS: 3 demov_sel_on: 17 analysing binary Hit limit looking for 0x83f6150 Hit limit looking for 0x83f615c [83f615c] Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6160 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6150 Hit limit looking for 0x8050600 Hit limit looking for 0x8050600 Hit limit looking for 0x8050600 Hit limit looking for 0x8050600 Hit limit looking for 0x804d0a0 Hit limit looking for 0x804d0a0 Hit limit looking for 0x804d0a0 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6150 Hit limit looking for 0x83f6168 Hit limit looking for 0x83f6168 Hit limit looking for 0x83f6168 Hit limit looking for 0x83f6168 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x85f61c8 Hit limit looking for 0x8050600 Hit limit looking for 0x8050600 Hit limit looking for 0x8050600 Hit limit looking for 0x8050600 Hit limit looking for 0x804d0a0 Hit limit looking for 0x804d0a0 Hit limit looking for 0x804d0a0 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6150 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x85f61c8 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x83f6170 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x83f6170 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x83f6170 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x85f61c8 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x804f190 Hit limit looking for 0x804f190 Hit limit looking for 0x804f190 Hit limit looking for 0x804f190 Hit limit looking for 0x804d310 Hit limit looking for 0x804d0a0 Hit limit looking for 0x83f6160 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6150 Hit limit looking for 0x83f6170 Hit limit looking for 0x81f5b70 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x804f190 Hit limit looking for 0x804f190 Hit limit looking for 0x804f190 Hit limit looking for 0x804f190 Hit limit looking for 0x804d310 Hit limit looking for 0x804d0a0 Hit limit looking for 0x83f6160 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6150 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x83f6170 Hit limit looking for 0x81f5b70 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x804f190 Hit limit looking for 0x804f190 Hit limit looking for 0x804f190 Hit limit looking for 0x804f190 Hit limit looking for 0x804d310 Hit limit looking for 0x804d0a0 Hit limit looking for 0x83f6160 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6150 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x83f6170 Hit limit looking for 0x81f5b70 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x804f190 Hit limit looking for 0x804f190 Hit limit looking for 0x804f190 Hit limit looking for 0x804f190 Hit limit looking for 0x804d310 Hit limit looking for 0x804d0a0 Hit limit looking for 0x83f6160 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6150 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x85f61c8 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x804f190 Hit limit looking for 0x804f190 Hit limit looking for 0x804f190 Hit limit looking for 0x804f190 Hit limit looking for 0x804d310 Hit limit looking for 0x804d0a0 Hit limit looking for 0x83f6160 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6150 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x83f6170 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x804f190 Hit limit looking for 0x804f190 Hit limit looking for 0x804f190 Hit limit looking for 0x804f190 Hit limit looking for 0x804d310 Hit limit looking for 0x804d0a0 Hit limit looking for 0x83f6160 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6150 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x85f61c8 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x85f61c8 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6160 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6150 Hit limit looking for 0x8050600 Hit limit looking for 0x8050600 Hit limit looking for 0x8050600 Hit limit looking for 0x8050600 Hit limit looking for 0x804d0a0 Hit limit looking for 0x804d0a0 Hit limit looking for 0x804d0a0 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6150 Hit limit looking for 0x8050600 Hit limit looking for 0x8050600 Hit limit looking for 0x8050600 Hit limit looking for 0x8050600 Hit limit looking for 0x804d0a0 Hit limit looking for 0x804d0a0 Hit limit looking for 0x804d0a0 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6150 Hit limit looking for 0x8050600 Hit limit looking for 0x8050600 Hit limit looking for 0x8050600 Hit limit looking for 0x8050600 Hit limit looking for 0x804d0a0 Hit limit looking for 0x804d0a0 Hit limit looking for 0x804d0a0 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6150 Hit limit looking for 0x8050600 Hit limit looking for 0x8050600 Hit limit looking for 0x8050600 Hit limit looking for 0x8050600 Hit limit looking for 0x804d0a0 Hit limit looking for 0x804d0a0 Hit limit looking for 0x804d0a0 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6150 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x8060f30 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x85f61c8 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x8050600 Hit limit looking for 0x8050600 Hit limit looking for 0x8050600 Hit limit looking for 0x8050600 Hit limit looking for 0x804d0a0 Hit limit looking for 0x804d0a0 Hit limit looking for 0x804d0a0 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6150 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6160 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6170 Hit limit looking for 0x83f6150 reached end target register: 83f6168 second pass: third pass: Basic blocks: demov: node.cpp:76: void node::merge(): Assertion n != nodes.end()' failed.
Aborted
`

and this show when try ldd ./demov :

linux-vdso.so.1 (0x00007ffc767eb000) libcapstone.so.4 => /usr/lib/libcapstone.so.4 (0x00007f1c31fa8000) libkeystone.so.0 => /usr/lib/libkeystone.so.0 (0x00007f1c31717000) libz3.so.4.8 => /usr/lib/libz3.so.4.8 (0x00007f1c301bb000) libssl.so.1.1 => /usr/lib/libssl.so.1.1 (0x00007f1c3012b000) libcrypto.so.1.1 => /usr/lib/libcrypto.so.1.1 (0x00007f1c2fe57000) libstdc++.so.6 => /usr/lib/libstdc++.so.6 (0x00007f1c2fc6f000) libm.so.6 => /usr/lib/libm.so.6 (0x00007f1c2fb27000) libgcc_s.so.1 => /usr/lib/libgcc_s.so.1 (0x00007f1c2fb0d000) libc.so.6 => /usr/lib/libc.so.6 (0x00007f1c2f94a000) libgmp.so.10 => /usr/lib/libgmp.so.10 (0x00007f1c2f8b6000) libpthread.so.0 => /usr/lib/libpthread.so.0 (0x00007f1c2f895000) libgomp.so.1 => /usr/lib/libgomp.so.1 (0x00007f1c2f85c000) /lib64/ld-linux-x86-64.so.2 => /usr/lib64/ld-linux-x86-64.so.2 (0x00007f1c324e4000) libdl.so.2 => /usr/lib/libdl.so.2 (0x00007f1c2f855000)

Segmentation Fault

Hi,
Tried it on a movfuscated ELF and demov fails with "Seg Fault"

possibly movfuscated
Relocations:
sigaction at 804e2a4
strlen at 804e2a0
printf at 804e298
exit at 804e29c
Segments:
8048000 - 804d1e4 : R X
804e1e4 - 85f757c : RW 
85f757c - 87f7590 : RW 
The entry point is 804824c
parsing entry
Segmentation fault

example

CSAW RED 2019 Quals - task mov_it (250pt)
https://red.csaw.io/challenges#time%20to%20mov%20it

nc rev.chal.csaw.io 1004

binary 3642a85e55a487e2c6001f7b067370c5-mov_it.gz
mirror https://red.csaw.io/files/3642a85e55a487e2c6001f7b067370c5/mov_it

Getting an error demovfuscating

demov: node.cpp:76: void node::merge(): Assertion n != nodes.end()' failed.`

possibly movfuscated
Relocations:
sigaction at 804e2a4
strlen at 804e2a0
printf at 804e298
exit at 804e29c
Segments:
8048000 - 804d1e4 : R X
804e1e4 - 85f757c : RW 
85f757c - 87f7590 : RW 
The entry point is 804824c
parsing entry
dispatcher at 0x8048240
master_loop is at 0x80482c7
sel_on is at 83f73e0
on is at 83f73e8
alu_x@81f7280
alu_y@0
demov_equal@0x8051890
demov_SYM_ALU_INV16@0x81622e0
demov_SYM_ALU_FALSE@0x804e5a0
demov_SYM_ALU_B7@0x8050420
demov_SYM_ALU_TRUE@0x804e390
demov_SYM_ALU_MUL_SUMS@0x81f6e00
demov_xor@0x81a2d10
reached end
SYM_SEL_DATA@0x83f7400 : 0x11c
SYM_ON@0x83f73e8 : 0x9d
SYM_DATA@0x83f7404 : 0x11c
discard at 85f7590
demov_bool_and: 51
demov_bool_xor: 2
demov_SYM_ALU_TRUE: 24
demov_SYM_ALU_FALSE: 13
demov_SYM_ALU_B7: 24
demov_equal: 60
demov_add: 72
demov_SYM_ALU_INV16: 12
demov_xor: 4
demov_SYM_ALU_MUL_SUMS: 2
demov_sel_on: 30
analysing binary
Hit limit looking for 0x83f73e0
Hit limit looking for 0x83f73ec
[83f73ec]
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73f0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x83f73f8
Hit limit looking for 0x83f73f8
Hit limit looking for 0x83f73f8
Hit limit looking for 0x83f73f8
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x85f7458
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x85f7458
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x8050420
Hit limit looking for 0x8050420
Hit limit looking for 0x8050420
Hit limit looking for 0x8050420
Hit limit looking for 0x804e330
Hit limit looking for 0x83f73f0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x83f73f0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x83f7400
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x83f7400
Hit limit looking for 0x81f6e00
Hit limit looking for 0x81a2d10
Hit limit looking for 0x81a2d10
Hit limit looking for 0x81a2d10
Hit limit looking for 0x81a2d10
Hit limit looking for 0x83f7400
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x83f7400
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x8050420
Hit limit looking for 0x8050420
Hit limit looking for 0x8050420
Hit limit looking for 0x8050420
Hit limit looking for 0x804e350
Hit limit looking for 0x804e330
Hit limit looking for 0x83f73f0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x83f7400
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x83f7400
Hit limit looking for 0x81f6e00
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x83f7400
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x83f7400
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x8050420
Hit limit looking for 0x8050420
Hit limit looking for 0x8050420
Hit limit looking for 0x8050420
Hit limit looking for 0x804e350
Hit limit looking for 0x804e330
Hit limit looking for 0x83f73f0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x8050420
Hit limit looking for 0x8050420
Hit limit looking for 0x8050420
Hit limit looking for 0x8050420
Hit limit looking for 0x804e5a0
Hit limit looking for 0x804e330
Hit limit looking for 0x83f73f0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x83f73f0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73f0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x8050420
Hit limit looking for 0x8050420
Hit limit looking for 0x8050420
Hit limit looking for 0x8050420
Hit limit looking for 0x804e330
Hit limit looking for 0x83f73f0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x85f7458
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73f0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x83f7400
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73f0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x83f7400
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x8050420
Hit limit looking for 0x8050420
Hit limit looking for 0x8050420
Hit limit looking for 0x8050420
Hit limit looking for 0x804e330
Hit limit looking for 0x83f73f0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x85f7458
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73f0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x80621c0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x85f7458
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x8051890
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x804e330
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73f0
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f7400
Hit limit looking for 0x83f73e0
reached end
target register: 83f73f8
second pass:
third pass:
Hit limit looking for err
Hit limit looking for err
Basic blocks:
demov: node.cpp:76: void node::merge(): Assertion `n != nodes.end()' failed.
Aborted

Issue compiling - likely due to changes in Z3

I am receiving the following errors while attempting to compile.

Errors when compiling

Compiling from Ubuntu 16.04

clang++ -Wall -Wextra -pedantic -std=c++11 -g -c demov.cpp
In file included from demov.cpp:7:
In file included from ./demov.hpp:14:
./dishlp.hpp:133:10: error: no matching member function for call to 'trace_back'
                        tmp = trace_back(ori, OP(ori, 1).mem.base, limit);
                              ^~~~~~~~~~
./dishlp.hpp:38:12: note: candidate function not viable: no known conversion from 'unsigned int' to 'x86_reg' for 2nd argument
                cs_insn *trace_back(cs_insn *, x86_reg reg, uint64_t limit);
                         ^
./dishlp.hpp:88:13: note: candidate function template not viable: requires 4 arguments, but 3 were provided
int dishlp::trace_back(std::stack<element, c> *st,
            ^
demov.cpp:258:21: error: no matching member function for call to 'trace_back'
                        cs_insn *a = dis.trace_back(ins + i, OP(ins + i, 1).mem.base, 0);
                                     ~~~~^~~~~~~~~~
./dishlp.hpp:38:12: note: candidate function not viable: no known conversion from 'unsigned int' to 'x86_reg' for 2nd argument
                cs_insn *trace_back(cs_insn *, x86_reg reg, uint64_t limit);
                         ^
./dishlp.hpp:88:13: note: candidate function template not viable: requires 4 arguments, but 3 were provided
int dishlp::trace_back(std::stack<element, c> *st,
            ^
demov.cpp:262:21: error: no matching member function for call to 'trace_back'
                        cs_insn *x = dis.trace_back(a, OP(a, 1).mem.index, 0);
                                     ~~~~^~~~~~~~~~
./dishlp.hpp:38:12: note: candidate function not viable: no known conversion from 'unsigned int' to 'x86_reg' for 2nd argument
                cs_insn *trace_back(cs_insn *, x86_reg reg, uint64_t limit);
                         ^
./dishlp.hpp:88:13: note: candidate function template not viable: requires 4 arguments, but 3 were provided
int dishlp::trace_back(std::stack<element, c> *st,
            ^
demov.cpp:263:21: error: no matching member function for call to 'trace_back'
                        cs_insn *y = dis.trace_back(ins + i, OP(ins + i, 1).mem.index, 0);
                                     ~~~~^~~~~~~~~~
./dishlp.hpp:38:12: note: candidate function not viable: no known conversion from 'unsigned int' to 'x86_reg' for 2nd argument
                cs_insn *trace_back(cs_insn *, x86_reg reg, uint64_t limit);
                         ^
./dishlp.hpp:88:13: note: candidate function template not viable: requires 4 arguments, but 3 were provided
int dishlp::trace_back(std::stack<element, c> *st,
            ^
demov.cpp:559:6: error: no matching member function for call to 'trace_back'
        dis.trace_back(&st, ins, OP(ins, 1).mem.index, 0 /*sel_on*/);
        ~~~~^~~~~~~~~~
./dishlp.hpp:88:13: note: candidate function [with c = std::deque<element, std::allocator<element> >] not viable: no known conversion from 'unsigned int' to 'x86_reg' for 3rd argument
int dishlp::trace_back(std::stack<element, c> *st,
            ^
./dishlp.hpp:38:12: note: candidate function not viable: requires 3 arguments, but 4 were provided
                cs_insn *trace_back(cs_insn *, x86_reg reg, uint64_t limit);
                         ^
demov.cpp:715:14: error: no matching member function for call to 'trace_back'
                                        if (dis.trace_back(&st, ins + i,
                                            ~~~~^~~~~~~~~~
./dishlp.hpp:88:13: note: candidate function [with c = std::deque<element, std::allocator<element> >] not viable: no known conversion from 'unsigned int' to 'x86_reg' for 3rd argument
int dishlp::trace_back(std::stack<element, c> *st,
            ^
./dishlp.hpp:38:12: note: candidate function not viable: requires 3 arguments, but 4 were provided
                cs_insn *trace_back(cs_insn *, x86_reg reg, uint64_t limit);
                         ^
demov.cpp:839:20: error: no matching function for call to 'test_patch'
        uint8_t *tst_cd = test_patch(OP(sel, 1).mem.index);
                          ^~~~~~~~~~
./utils.hpp:11:10: note: candidate function not viable: no known conversion from 'unsigned int' to 'x86_reg' for 1st argument
uint8_t* test_patch(x86_reg reg);
         ^
In file included from demov.cpp:7:
In file included from ./demov.hpp:14:
./dishlp.hpp:122:9: error: no matching member function for call to 'trace_back'
                                if (trace_back(st, ori, OP(ori, 1).mem.index, limit))
                                    ^~~~~~~~~~
demov.cpp:872:10: note: in instantiation of function template specialization 'dishlp::trace_back<std::deque<element, std::allocator<element> > >' requested here
        if (dis.trace_back(&st, ins, OP(ins, 1).reg, sel_on))
                ^
./dishlp.hpp:88:13: note: candidate function [with c = std::deque<element, std::allocator<element> >] not viable: no known conversion from 'unsigned int' to 'x86_reg' for 3rd argument
int dishlp::trace_back(std::stack<element, c> *st,
            ^
./dishlp.hpp:38:12: note: candidate function not viable: requires 3 arguments, but 4 were provided
                cs_insn *trace_back(cs_insn *, x86_reg reg, uint64_t limit);
                         ^
./dishlp.hpp:128:9: error: no matching member function for call to 'trace_back'
                                if (trace_back(st, ori, OP(ori, 1).mem.base, limit))
                                    ^~~~~~~~~~
./dishlp.hpp:88:13: note: candidate function [with c = std::deque<element, std::allocator<element> >] not viable: no known conversion from 'unsigned int' to 'x86_reg' for 3rd argument
int dishlp::trace_back(std::stack<element, c> *st,
            ^
./dishlp.hpp:38:12: note: candidate function not viable: requires 3 arguments, but 4 were provided
                cs_insn *trace_back(cs_insn *, x86_reg reg, uint64_t limit);
                         ^
./dishlp.hpp:136:9: error: no matching member function for call to 'trace_back'
                                if (trace_back(st, ori, OP(ori, 1).mem.index, limit))
                                    ^~~~~~~~~~
./dishlp.hpp:88:13: note: candidate function [with c = std::deque<element, std::allocator<element> >] not viable: no known conversion from 'unsigned int' to 'x86_reg' for 3rd argument
int dishlp::trace_back(std::stack<element, c> *st,
            ^
./dishlp.hpp:38:12: note: candidate function not viable: requires 3 arguments, but 4 were provided
                cs_insn *trace_back(cs_insn *, x86_reg reg, uint64_t limit);
                         ^
./dishlp.hpp:142:5: error: no matching member function for call to 'trace_back'
                                trace_back(st, tmp, OP(tmp, 1).mem.index, limit);
                                ^~~~~~~~~~
./dishlp.hpp:88:13: note: candidate function [with c = std::deque<element, std::allocator<element> >] not viable: no known conversion from 'unsigned int' to 'x86_reg' for 3rd argument
int dishlp::trace_back(std::stack<element, c> *st,
            ^
./dishlp.hpp:38:12: note: candidate function not viable: requires 3 arguments, but 4 were provided
                cs_insn *trace_back(cs_insn *, x86_reg reg, uint64_t limit);
                         ^
./dishlp.hpp:143:5: error: no matching member function for call to 'trace_back'
                                trace_back(st, ori, OP(ori, 1).mem.index, limit);
                                ^~~~~~~~~~
./dishlp.hpp:88:13: note: candidate function [with c = std::deque<element, std::allocator<element> >] not viable: no known conversion from 'unsigned int' to 'x86_reg' for 3rd argument
int dishlp::trace_back(std::stack<element, c> *st,
            ^
./dishlp.hpp:38:12: note: candidate function not viable: requires 3 arguments, but 4 were provided
                cs_insn *trace_back(cs_insn *, x86_reg reg, uint64_t limit);

demov: node.cpp:76: void node::merge(): Assertion `n != nodes.end()' failed.

Hi, I've tried using demovfuscator on the binary, but got error

possibly movfuscated
Relocations:
sigaction at 8066018
exit at 8066014
fgets at 8066010
printf at 806600c
stdin at 860f360
Segments:
8048000 - 8064448 : R X
8065f40 - 860f34c : RW 
860f34c - 880f370 : RW 
The entry point is 804828c
parsing entry
dispatcher at 0x8048280
master_loop is at 0x8048307
sel_on is at 840f1b0
on is at 840f1b8
demov_equal@0x8069660
demov_mul_l@0x81ecd70
demov_mul_h@0x81fd280
demov_SYM_ALU_ADD8L@0x81e4730
demov_SYM_ALU_MUL_SUM8H@0x81e4a40
demov_SYM_ALU_MUL_SHL2@0x81e4d50
demov_SYM_ALU_MUL_SUMS@0x81e8d60
demov_or@0x81aa5d0
demov_SYM_ALU_TRUE@0x8066160
demov_SYM_ALU_CLAMP32@0x81e3f20
demov_SYM_ALU_MUL_SUMS@0x820ebd0
demov_xor@0x81baae0
demov_SYM_ALU_INV16@0x817a0b0
demov_SYM_ALU_FALSE@0x8066370
demov_SYM_ALU_B7@0x80681f0
reached end
SYM_SEL_DATA@0x840f1d0 : 0x2fc
SYM_ON@0x840f1b8 : 0x1c0
SYM_DATA@0x840f1d4 : 0x2fc
discard at 860f370
demov_bool_and: 124
demov_bool_xor: 3
demov_SYM_ALU_TRUE: 65
demov_SYM_ALU_FALSE: 44
demov_SYM_ALU_B7: 64
demov_equal: 144
demov_add: 116
demov_SYM_ALU_INV16: 32
demov_or: 15
demov_xor: 60
demov_SYM_ALU_CLAMP32: 1
demov_SYM_ALU_ADD8L: 20
demov_SYM_ALU_MUL_SUM8H: 10
demov_SYM_ALU_MUL_SHL2: 20
demov_SYM_ALU_MUL_SUMS: 10
demov_mul_l: 10
demov_mul_h: 10
demov_SYM_ALU_MUL_SUMS: 21
demov_sel_on: 69
analysing binary
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1bc
[840f1bc]
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1c8
Hit limit looking for 0x840f1c8
Hit limit looking for 0x840f1c8
Hit limit looking for 0x840f1c8
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x860f228
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x81ecd70
Hit limit looking for 0x81fd280
Hit limit looking for 0x81ecd70
Hit limit looking for 0x81fd280
Hit limit looking for 0x81ecd70
Hit limit looking for 0x81fd280
Hit limit looking for 0x81ecd70
Hit limit looking for 0x81fd280
Hit limit looking for 0x81ecd70
Hit limit looking for 0x81fd280
Hit limit looking for 0x81ecd70
Hit limit looking for 0x81fd280
Hit limit looking for 0x81ecd70
Hit limit looking for 0x81fd280
Hit limit looking for 0x81ecd70
Hit limit looking for 0x81fd280
Hit limit looking for 0x81ecd70
Hit limit looking for 0x81fd280
Hit limit looking for 0x81ecd70
Hit limit looking for 0x81fd280
Hit limit looking for 0x81e4d50
Hit limit looking for 0x81e4d50
Hit limit looking for 0x81e4d50
Hit limit looking for 0x81e4d50
Hit limit looking for 0x81e4d50
Hit limit looking for 0x81e4d50
Hit limit looking for 0x81e4d50
Hit limit looking for 0x81e4d50
Hit limit looking for 0x81e4d50
Hit limit looking for 0x81e4d50
Hit limit looking for 0x81e4d50
Hit limit looking for 0x81e4d50
Hit limit looking for 0x81e4d50
Hit limit looking for 0x81e4d50
Hit limit looking for 0x81e4d50
Hit limit looking for 0x81e4d50
Hit limit looking for 0x81e4d50
Hit limit looking for 0x81e4d50
Hit limit looking for 0x81e4d50
Hit limit looking for 0x81e4d50
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x860f228
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x81aa5d0
Hit limit looking for 0x81aa5d0
Hit limit looking for 0x81aa5d0
Hit limit looking for 0x81e3f20
Hit limit looking for 0x81caff0
Hit limit looking for 0x81aa5d0
Hit limit looking for 0x81aa5d0
Hit limit looking for 0x81aa5d0
Hit limit looking for 0x81aa5d0
Hit limit looking for 0x81aa5d0
Hit limit looking for 0x81aa5d0
Hit limit looking for 0x81aa5d0
Hit limit looking for 0x81aa5d0
Hit limit looking for 0x81aa5d0
Hit limit looking for 0x81aa5d0
Hit limit looking for 0x81aa5d0
Hit limit looking for 0x81aa5d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x820ebd0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x8066370
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x820ebd0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x8066370
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x820ebd0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x8066370
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x820ebd0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x8066370
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x820ebd0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x8066370
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x820ebd0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x8066370
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x820ebd0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x8066370
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x820ebd0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x8066370
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x820ebd0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x8066370
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x820ebd0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x8066370
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x820ebd0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x8066370
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x820ebd0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x8066370
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x820ebd0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x820ebd0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x840f1d0
Hit limit looking for 0x820ebd0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x840f1d0
Hit limit looking for 0x820ebd0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x820ebd0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x820ebd0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x860f228
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x8066120
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x8066120
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x840f1d0
Hit limit looking for 0x820ebd0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x820ebd0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x81baae0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x820ebd0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x860f228
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x8079f90
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x80681f0
Hit limit looking for 0x8066120
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8069660
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x8066100
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1c0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1d0
Hit limit looking for 0x840f1b0
reached end
target register: 840f1c8
second pass:
third pass:
Hit limit looking for err
Hit limit looking for err
Hit limit looking for err
Basic blocks:
demov: node.cpp:76: void node::merge(): Assertion `n != nodes.end()' failed.
Aborted (core dumped)

For more informatioin, I used ubuntu 20.04

Assertion, SIGSEGV solution

It is a like solution for cases like #21 and #22 .

compile your self
node.cpp uses the thing of #23 (pull requests)

issue while compiling

Hi,
I'm trying to install this tool in Ubuntu 16.4.1 i386, I installed the dependencies successful but when I tried to install demovfuscator I got the following errors.

how can I solve this issue?

A problem occured during compiling

root@kali:~/demovfuscator# make
clang++ -Wall -Wextra -pedantic -std=c++11 -g -c demov.cpp
In file included from demov.cpp:7:
In file included from ./demov.hpp:14:
In file included from ./dishlp.hpp:14:
./stackMachine.hpp:61:7: error: no matching function for call to 'Z3_get_numeral_uint64'
                if (Z3_get_numeral_uint64(ctx, cn,(unsigned long long*)  &ret)) {
                    ^~~~~~~~~~~~~~~~~~~~~
/usr/include/z3_api.h:4563:17: note: candidate function not viable: no known conversion from 'unsigned long long *' to 'uint64_t *'
      (aka 'unsigned long *') for 3rd argument
    bool Z3_API Z3_get_numeral_uint64(Z3_context c, Z3_ast v, uint64_t* u);
                ^
In file included from demov.cpp:7:
In file included from ./demov.hpp:14:
In file included from ./dishlp.hpp:14:
./stackMachine.hpp:78:14: error: call to member function 'bv_val' is ambiguous
                ret = ctx->bv_val((unsigned long long) cur.imm, 32);
                      ~~~~~^~~~~~
/usr/include/z3++.h:2931:26: note: candidate function
    inline expr context::bv_val(int n, unsigned sz) { sort s = bv_sort(sz); Z3_ast r = Z3_mk_int(m_ctx, n, s); check_error(); return expr(*this, r); }
                         ^
/usr/include/z3++.h:2932:26: note: candidate function
    inline expr context::bv_val(unsigned n, unsigned sz) { sort s = bv_sort(sz); Z3_ast r = Z3_mk_unsigned_int(m_ctx, n, s); check_error(); re...
                         ^
/usr/include/z3++.h:2933:26: note: candidate function
    inline expr context::bv_val(int64_t n, unsigned sz) { sort s = bv_sort(sz); Z3_ast r = Z3_mk_int64(m_ctx, n, s); check_error(); return exp...
                         ^
/usr/include/z3++.h:2934:26: note: candidate function
    inline expr context::bv_val(uint64_t n, unsigned sz) { sort s = bv_sort(sz); Z3_ast r = Z3_mk_unsigned_int64(m_ctx, n, s); check_error(); ...
                         ^
/usr/include/z3++.h:2935:26: note: candidate function not viable: no known conversion from 'unsigned long long' to 'const char *' for 1st argument
    inline expr context::bv_val(char const * n, unsigned sz) { sort s = bv_sort(sz); Z3_ast r = Z3_mk_numeral(m_ctx, n, s); check_error(); ret...
                         ^
/usr/include/z3++.h:2936:26: note: candidate function not viable: no known conversion from 'int' to 'const bool *' for 2nd argument
    inline expr context::bv_val(unsigned n, bool const* bits) {
                         ^
2 errors generated.

I installed all the dependencies(via github with latest versions).

nice work!

great job, congrats on releasing this tool! linked to your project from our websites now: http://www.capstone-engine.org/showcase.html & http://www.keystone-engine.org/showcase/

keep it up, cheers!

z3/z3++.h Not Found

While compiling from source, it shows up the error message

z3 is compiled from source
z3++.h is under /usr/include
Z3 version 4.5.1 - 64 bit

Compiled binary not available anymore on the website

Perhaps using the Github Releases would be a good alternative to hosting it?