You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
97 lines
3.6 KiB
97 lines
3.6 KiB
#!/usr/bin/env python |
|
|
|
# Capstone Python bindings, by Nguyen Anh Quynnh <aquynh@gmail.com> |
|
|
|
from __future__ import print_function |
|
from capstone import * |
|
from capstone.arm import * |
|
from xprint import to_hex, to_x, to_x_32 |
|
|
|
|
|
ARM_CODE = b"\xED\xFF\xFF\xEB\x04\xe0\x2d\xe5\x00\x00\x00\x00\xe0\x83\x22\xe5\xf1\x02\x03\x0e\x00\x00\xa0\xe3\x02\x30\xc1\xe7\x00\x00\x53\xe3" |
|
ARM_CODE2 = b"\xd1\xe8\x00\xf0\xf0\x24\x04\x07\x1f\x3c\xf2\xc0\x00\x00\x4f\xf0\x00\x01\x46\x6c" |
|
THUMB_CODE2 = b"\x4f\xf0\x00\x01\xbd\xe8\x00\x88\xd1\xe8\x00\xf0" |
|
THUMB_CODE = b"\x70\x47\xeb\x46\x83\xb0\xc9\x68\x1f\xb1" |
|
|
|
all_tests = ( |
|
(CS_ARCH_ARM, CS_MODE_ARM, ARM_CODE, "ARM", None), |
|
(CS_ARCH_ARM, CS_MODE_THUMB, THUMB_CODE, "Thumb", None), |
|
(CS_ARCH_ARM, CS_MODE_THUMB, ARM_CODE2, "Thumb-mixed", None), |
|
(CS_ARCH_ARM, CS_MODE_THUMB, THUMB_CODE2, "Thumb-2 & register named with numbers", CS_OPT_SYNTAX_NOREGNAME), |
|
) |
|
|
|
|
|
def print_insn_detail(insn): |
|
# print address, mnemonic and operands |
|
print("0x%x:\t%s\t%s" % (insn.address, insn.mnemonic, insn.op_str)) |
|
|
|
# "data" instruction generated by SKIPDATA option has no detail |
|
if insn.id == 0: |
|
return |
|
|
|
if len(insn.operands) > 0: |
|
print("\top_count: %u" % len(insn.operands)) |
|
c = 0 |
|
for i in insn.operands: |
|
if i.type == ARM_OP_REG: |
|
print("\t\toperands[%u].type: REG = %s" % (c, insn.reg_name(i.reg))) |
|
if i.type == ARM_OP_IMM: |
|
print("\t\toperands[%u].type: IMM = 0x%s" % (c, to_x_32(i.imm))) |
|
if i.type == ARM_OP_PIMM: |
|
print("\t\toperands[%u].type: P-IMM = %u" % (c, i.imm)) |
|
if i.type == ARM_OP_CIMM: |
|
print("\t\toperands[%u].type: C-IMM = %u" % (c, i.imm)) |
|
if i.type == ARM_OP_FP: |
|
print("\t\toperands[%u].type: FP = %f" % (c, i.fp)) |
|
if i.type == ARM_OP_MEM: |
|
print("\t\toperands[%u].type: MEM" % c) |
|
if i.mem.base != 0: |
|
print("\t\t\toperands[%u].mem.base: REG = %s" \ |
|
% (c, insn.reg_name(i.mem.base))) |
|
if i.mem.index != 0: |
|
print("\t\t\toperands[%u].mem.index: REG = %s" \ |
|
% (c, insn.reg_name(i.mem.index))) |
|
if i.mem.scale != 1: |
|
print("\t\t\toperands[%u].mem.scale: %u" \ |
|
% (c, i.mem.scale)) |
|
if i.mem.disp != 0: |
|
print("\t\t\toperands[%u].mem.disp: 0x%s" \ |
|
% (c, to_x_32(i.mem.disp))) |
|
|
|
if i.shift.type != ARM_SFT_INVALID and i.shift.value: |
|
print("\t\t\tShift: type = %u, value = %u\n" \ |
|
% (i.shift.type, i.shift.value)) |
|
c += 1 |
|
|
|
if insn.update_flags: |
|
print("\tUpdate-flags: True") |
|
if insn.writeback: |
|
print("\tWrite-back: True") |
|
if not insn.cc in [ARM_CC_AL, ARM_CC_INVALID]: |
|
print("\tCode condition: %u" % insn.cc) |
|
|
|
|
|
# ## Test class Cs |
|
def test_class(): |
|
|
|
for (arch, mode, code, comment, syntax) in all_tests: |
|
print("*" * 16) |
|
print("Platform: %s" % comment) |
|
print("Code: %s" % to_hex(code)) |
|
print("Disasm:") |
|
|
|
try: |
|
md = Cs(arch, mode) |
|
if syntax: |
|
md.syntax = syntax |
|
md.detail = True |
|
for insn in md.disasm(code, 0x1000): |
|
print_insn_detail(insn) |
|
print () |
|
print ("0x%x:\n" % (insn.address + insn.size)) |
|
except CsError as e: |
|
print("ERROR: %s" % e) |
|
|
|
|
|
if __name__ == '__main__': |
|
test_class()
|
|
|