1*9a0e4156SSadaf Ebrahimi#!/usr/bin/env python 2*9a0e4156SSadaf Ebrahimi 3*9a0e4156SSadaf Ebrahimi# Capstone Python bindings, by Nguyen Anh Quynnh <[email protected]> 4*9a0e4156SSadaf Ebrahimi 5*9a0e4156SSadaf Ebrahimifrom __future__ import print_function 6*9a0e4156SSadaf Ebrahimifrom capstone import * 7*9a0e4156SSadaf Ebrahimifrom capstone.arm64 import * 8*9a0e4156SSadaf Ebrahimifrom xprint import to_hex, to_x 9*9a0e4156SSadaf Ebrahimi 10*9a0e4156SSadaf Ebrahimi 11*9a0e4156SSadaf EbrahimiARM64_CODE = b"\x09\x00\x38\xd5\xbf\x40\x00\xd5\x0c\x05\x13\xd5\x20\x50\x02\x0e\x20\xe4\x3d\x0f\x00\x18\xa0\x5f\xa2\x00\xae\x9e\x9f\x37\x03\xd5\xbf\x33\x03\xd5\xdf\x3f\x03\xd5\x21\x7c\x02\x9b\x21\x7c\x00\x53\x00\x40\x21\x4b\xe1\x0b\x40\xb9\x20\x04\x81\xda\x20\x08\x02\x8b\x10\x5b\xe8\x3c" 12*9a0e4156SSadaf Ebrahimi 13*9a0e4156SSadaf Ebrahimiall_tests = ( 14*9a0e4156SSadaf Ebrahimi (CS_ARCH_ARM64, CS_MODE_ARM, ARM64_CODE, "ARM-64"), 15*9a0e4156SSadaf Ebrahimi ) 16*9a0e4156SSadaf Ebrahimi 17*9a0e4156SSadaf Ebrahimi 18*9a0e4156SSadaf Ebrahimidef print_insn_detail(insn): 19*9a0e4156SSadaf Ebrahimi # print address, mnemonic and operands 20*9a0e4156SSadaf Ebrahimi print("0x%x:\t%s\t%s" % (insn.address, insn.mnemonic, insn.op_str)) 21*9a0e4156SSadaf Ebrahimi 22*9a0e4156SSadaf Ebrahimi # "data" instruction generated by SKIPDATA option has no detail 23*9a0e4156SSadaf Ebrahimi if insn.id == 0: 24*9a0e4156SSadaf Ebrahimi return 25*9a0e4156SSadaf Ebrahimi 26*9a0e4156SSadaf Ebrahimi if len(insn.operands) > 0: 27*9a0e4156SSadaf Ebrahimi print("\top_count: %u" % len(insn.operands)) 28*9a0e4156SSadaf Ebrahimi c = -1 29*9a0e4156SSadaf Ebrahimi for i in insn.operands: 30*9a0e4156SSadaf Ebrahimi c += 1 31*9a0e4156SSadaf Ebrahimi if i.type == ARM64_OP_REG: 32*9a0e4156SSadaf Ebrahimi print("\t\toperands[%u].type: REG = %s" % (c, insn.reg_name(i.reg))) 33*9a0e4156SSadaf Ebrahimi if i.type == ARM64_OP_IMM: 34*9a0e4156SSadaf Ebrahimi print("\t\toperands[%u].type: IMM = 0x%s" % (c, to_x(i.imm))) 35*9a0e4156SSadaf Ebrahimi if i.type == ARM64_OP_CIMM: 36*9a0e4156SSadaf Ebrahimi print("\t\toperands[%u].type: C-IMM = %u" % (c, i.imm)) 37*9a0e4156SSadaf Ebrahimi if i.type == ARM64_OP_FP: 38*9a0e4156SSadaf Ebrahimi print("\t\toperands[%u].type: FP = %f" % (c, i.fp)) 39*9a0e4156SSadaf Ebrahimi if i.type == ARM64_OP_MEM: 40*9a0e4156SSadaf Ebrahimi print("\t\toperands[%u].type: MEM" % c) 41*9a0e4156SSadaf Ebrahimi if i.mem.base != 0: 42*9a0e4156SSadaf Ebrahimi print("\t\t\toperands[%u].mem.base: REG = %s" \ 43*9a0e4156SSadaf Ebrahimi % (c, insn.reg_name(i.mem.base))) 44*9a0e4156SSadaf Ebrahimi if i.mem.index != 0: 45*9a0e4156SSadaf Ebrahimi print("\t\t\toperands[%u].mem.index: REG = %s" \ 46*9a0e4156SSadaf Ebrahimi % (c, insn.reg_name(i.mem.index))) 47*9a0e4156SSadaf Ebrahimi if i.mem.disp != 0: 48*9a0e4156SSadaf Ebrahimi print("\t\t\toperands[%u].mem.disp: 0x%s" \ 49*9a0e4156SSadaf Ebrahimi % (c, to_x(i.mem.disp))) 50*9a0e4156SSadaf Ebrahimi if i.type == ARM64_OP_REG_MRS: 51*9a0e4156SSadaf Ebrahimi print("\t\toperands[%u].type: REG_MRS = 0x%x" % (c, i.reg)) 52*9a0e4156SSadaf Ebrahimi if i.type == ARM64_OP_REG_MSR: 53*9a0e4156SSadaf Ebrahimi print("\t\toperands[%u].type: REG_MSR = 0x%x" % (c, i.reg)) 54*9a0e4156SSadaf Ebrahimi if i.type == ARM64_OP_PSTATE: 55*9a0e4156SSadaf Ebrahimi print("\t\toperands[%u].type: PSTATE = 0x%x" % (c, i.pstate)) 56*9a0e4156SSadaf Ebrahimi if i.type == ARM64_OP_SYS: 57*9a0e4156SSadaf Ebrahimi print("\t\toperands[%u].type: SYS = 0x%x" % (c, i.sys)) 58*9a0e4156SSadaf Ebrahimi if i.type == ARM64_OP_PREFETCH: 59*9a0e4156SSadaf Ebrahimi print("\t\toperands[%u].type: PREFETCH = 0x%x" % (c, i.prefetch)) 60*9a0e4156SSadaf Ebrahimi if i.type == ARM64_OP_BARRIER: 61*9a0e4156SSadaf Ebrahimi print("\t\toperands[%u].type: BARRIER = 0x%x" % (c, i.barrier)) 62*9a0e4156SSadaf Ebrahimi 63*9a0e4156SSadaf Ebrahimi if i.shift.type != ARM64_SFT_INVALID and i.shift.value: 64*9a0e4156SSadaf Ebrahimi print("\t\t\tShift: type = %u, value = %u" % (i.shift.type, i.shift.value)) 65*9a0e4156SSadaf Ebrahimi 66*9a0e4156SSadaf Ebrahimi if i.ext != ARM64_EXT_INVALID: 67*9a0e4156SSadaf Ebrahimi print("\t\t\tExt: %u" % i.ext) 68*9a0e4156SSadaf Ebrahimi 69*9a0e4156SSadaf Ebrahimi if i.vas != ARM64_VAS_INVALID: 70*9a0e4156SSadaf Ebrahimi print("\t\t\tVector Arrangement Specifier: 0x%x" % i.vas) 71*9a0e4156SSadaf Ebrahimi 72*9a0e4156SSadaf Ebrahimi if i.vess != ARM64_VESS_INVALID: 73*9a0e4156SSadaf Ebrahimi print("\t\t\tVector Element Size Specifier: %u" % i.vess) 74*9a0e4156SSadaf Ebrahimi 75*9a0e4156SSadaf Ebrahimi if i.vector_index != -1: 76*9a0e4156SSadaf Ebrahimi print("\t\t\tVector Index: %u" % i.vector_index) 77*9a0e4156SSadaf Ebrahimi 78*9a0e4156SSadaf Ebrahimi if i.access == CS_AC_READ: 79*9a0e4156SSadaf Ebrahimi print("\t\toperands[%u].access: READ\n" % (c)) 80*9a0e4156SSadaf Ebrahimi elif i.access == CS_AC_WRITE: 81*9a0e4156SSadaf Ebrahimi print("\t\toperands[%u].access: WRITE\n" % (c)) 82*9a0e4156SSadaf Ebrahimi elif i.access == CS_AC_READ | CS_AC_WRITE: 83*9a0e4156SSadaf Ebrahimi print("\t\toperands[%u].access: READ | WRITE\n" % (c)) 84*9a0e4156SSadaf Ebrahimi 85*9a0e4156SSadaf Ebrahimi 86*9a0e4156SSadaf Ebrahimi if insn.writeback: 87*9a0e4156SSadaf Ebrahimi print("\tWrite-back: True") 88*9a0e4156SSadaf Ebrahimi if not insn.cc in [ARM64_CC_AL, ARM64_CC_INVALID]: 89*9a0e4156SSadaf Ebrahimi print("\tCode-condition: %u" % insn.cc) 90*9a0e4156SSadaf Ebrahimi if insn.update_flags: 91*9a0e4156SSadaf Ebrahimi print("\tUpdate-flags: True") 92*9a0e4156SSadaf Ebrahimi 93*9a0e4156SSadaf Ebrahimi (regs_read, regs_write) = insn.regs_access() 94*9a0e4156SSadaf Ebrahimi 95*9a0e4156SSadaf Ebrahimi if len(regs_read) > 0: 96*9a0e4156SSadaf Ebrahimi print("\tRegisters read:", end="") 97*9a0e4156SSadaf Ebrahimi for r in regs_read: 98*9a0e4156SSadaf Ebrahimi print(" %s" %(insn.reg_name(r)), end="") 99*9a0e4156SSadaf Ebrahimi print("") 100*9a0e4156SSadaf Ebrahimi 101*9a0e4156SSadaf Ebrahimi if len(regs_write) > 0: 102*9a0e4156SSadaf Ebrahimi print("\tRegisters modified:", end="") 103*9a0e4156SSadaf Ebrahimi for r in regs_write: 104*9a0e4156SSadaf Ebrahimi print(" %s" %(insn.reg_name(r)), end="") 105*9a0e4156SSadaf Ebrahimi print("") 106*9a0e4156SSadaf Ebrahimi 107*9a0e4156SSadaf Ebrahimi 108*9a0e4156SSadaf Ebrahimi# ## Test class Cs 109*9a0e4156SSadaf Ebrahimidef test_class(): 110*9a0e4156SSadaf Ebrahimi 111*9a0e4156SSadaf Ebrahimi for (arch, mode, code, comment) in all_tests: 112*9a0e4156SSadaf Ebrahimi print("*" * 16) 113*9a0e4156SSadaf Ebrahimi print("Platform: %s" % comment) 114*9a0e4156SSadaf Ebrahimi print("Code: %s" % to_hex(code)) 115*9a0e4156SSadaf Ebrahimi print("Disasm:") 116*9a0e4156SSadaf Ebrahimi 117*9a0e4156SSadaf Ebrahimi try: 118*9a0e4156SSadaf Ebrahimi md = Cs(arch, mode) 119*9a0e4156SSadaf Ebrahimi md.detail = True 120*9a0e4156SSadaf Ebrahimi for insn in md.disasm(code, 0x2c): 121*9a0e4156SSadaf Ebrahimi print_insn_detail(insn) 122*9a0e4156SSadaf Ebrahimi print () 123*9a0e4156SSadaf Ebrahimi print("0x%x:\n" % (insn.address + insn.size)) 124*9a0e4156SSadaf Ebrahimi except CsError as e: 125*9a0e4156SSadaf Ebrahimi print("ERROR: %s" % e) 126*9a0e4156SSadaf Ebrahimi 127*9a0e4156SSadaf Ebrahimi 128*9a0e4156SSadaf Ebrahimiif __name__ == '__main__': 129*9a0e4156SSadaf Ebrahimi test_class() 130