1*9a0e4156SSadaf Ebrahimi#!/usr/bin/env python 2*9a0e4156SSadaf Ebrahimi 3*9a0e4156SSadaf Ebrahimi# Capstone Python bindings, by Nguyen Anh Quynnh <[email protected]> 4*9a0e4156SSadaf Ebrahimifrom __future__ import print_function 5*9a0e4156SSadaf Ebrahimifrom capstone import * 6*9a0e4156SSadaf Ebrahimifrom capstone.ppc import * 7*9a0e4156SSadaf Ebrahimifrom xprint import to_hex, to_x_32 8*9a0e4156SSadaf Ebrahimi 9*9a0e4156SSadaf EbrahimiPPC_CODE = b"\x43\x20\x0c\x07\x41\x56\xff\x17\x80\x20\x00\x00\x80\x3f\x00\x00\x10\x43\x23\x0e\xd0\x44\x00\x80\x4c\x43\x22\x02\x2d\x03\x00\x80\x7c\x43\x20\x14\x7c\x43\x20\x93\x4f\x20\x00\x21\x4c\xc8\x00\x21\x40\x82\x00\x14" 10*9a0e4156SSadaf EbrahimiPPC_CODE2 = b"\x10\x60\x2a\x10\x10\x64\x28\x88\x7c\x4a\x5d\x0f" 11*9a0e4156SSadaf Ebrahimi 12*9a0e4156SSadaf Ebrahimiall_tests = ( 13*9a0e4156SSadaf Ebrahimi (CS_ARCH_PPC, CS_MODE_BIG_ENDIAN, PPC_CODE, "PPC-64"), 14*9a0e4156SSadaf Ebrahimi (CS_ARCH_PPC, CS_MODE_BIG_ENDIAN + CS_MODE_QPX, PPC_CODE2, "PPC-64 + QPX"), 15*9a0e4156SSadaf Ebrahimi ) 16*9a0e4156SSadaf Ebrahimi 17*9a0e4156SSadaf Ebrahimi 18*9a0e4156SSadaf Ebrahimidef print_insn_detail(insn): 19*9a0e4156SSadaf Ebrahimi # print address, mnemonic and operands 20*9a0e4156SSadaf Ebrahimi print("0x%x:\t%s\t%s" % (insn.address, insn.mnemonic, insn.op_str)) 21*9a0e4156SSadaf Ebrahimi 22*9a0e4156SSadaf Ebrahimi # "data" instruction generated by SKIPDATA option has no detail 23*9a0e4156SSadaf Ebrahimi if insn.id == 0: 24*9a0e4156SSadaf Ebrahimi return 25*9a0e4156SSadaf Ebrahimi 26*9a0e4156SSadaf Ebrahimi if len(insn.operands) > 0: 27*9a0e4156SSadaf Ebrahimi print("\top_count: %u" % len(insn.operands)) 28*9a0e4156SSadaf Ebrahimi c = 0 29*9a0e4156SSadaf Ebrahimi for i in insn.operands: 30*9a0e4156SSadaf Ebrahimi if i.type == PPC_OP_REG: 31*9a0e4156SSadaf Ebrahimi print("\t\toperands[%u].type: REG = %s" % (c, insn.reg_name(i.reg))) 32*9a0e4156SSadaf Ebrahimi if i.type == PPC_OP_IMM: 33*9a0e4156SSadaf Ebrahimi print("\t\toperands[%u].type: IMM = 0x%s" % (c, to_x_32(i.imm))) 34*9a0e4156SSadaf Ebrahimi if i.type == PPC_OP_MEM: 35*9a0e4156SSadaf Ebrahimi print("\t\toperands[%u].type: MEM" % c) 36*9a0e4156SSadaf Ebrahimi if i.mem.base != 0: 37*9a0e4156SSadaf Ebrahimi print("\t\t\toperands[%u].mem.base: REG = %s" \ 38*9a0e4156SSadaf Ebrahimi % (c, insn.reg_name(i.mem.base))) 39*9a0e4156SSadaf Ebrahimi if i.mem.disp != 0: 40*9a0e4156SSadaf Ebrahimi print("\t\t\toperands[%u].mem.disp: 0x%s" \ 41*9a0e4156SSadaf Ebrahimi % (c, to_x_32(i.mem.disp))) 42*9a0e4156SSadaf Ebrahimi if i.type == PPC_OP_CRX: 43*9a0e4156SSadaf Ebrahimi print("\t\toperands[%u].type: CRX" % c) 44*9a0e4156SSadaf Ebrahimi print("\t\t\toperands[%u].crx.scale: = %u" \ 45*9a0e4156SSadaf Ebrahimi % (c, i.crx.scale)) 46*9a0e4156SSadaf Ebrahimi if i.crx.reg != 0: 47*9a0e4156SSadaf Ebrahimi print("\t\t\toperands[%u].crx.reg: REG = %s" \ 48*9a0e4156SSadaf Ebrahimi % (c, insn.reg_name(i.crx.reg))) 49*9a0e4156SSadaf Ebrahimi if i.crx.cond != 0: 50*9a0e4156SSadaf Ebrahimi print("\t\t\toperands[%u].crx.cond: 0x%x" \ 51*9a0e4156SSadaf Ebrahimi % (c, i.crx.cond)) 52*9a0e4156SSadaf Ebrahimi c += 1 53*9a0e4156SSadaf Ebrahimi 54*9a0e4156SSadaf Ebrahimi if insn.bc: 55*9a0e4156SSadaf Ebrahimi print("\tBranch code: %u" % insn.bc) 56*9a0e4156SSadaf Ebrahimi if insn.bh: 57*9a0e4156SSadaf Ebrahimi print("\tBranch hint: %u" % insn.bh) 58*9a0e4156SSadaf Ebrahimi if insn.update_cr0: 59*9a0e4156SSadaf Ebrahimi print("\tUpdate-CR0: True") 60*9a0e4156SSadaf Ebrahimi 61*9a0e4156SSadaf Ebrahimi 62*9a0e4156SSadaf Ebrahimi# ## Test class Cs 63*9a0e4156SSadaf Ebrahimidef test_class(): 64*9a0e4156SSadaf Ebrahimi 65*9a0e4156SSadaf Ebrahimi for (arch, mode, code, comment) in all_tests: 66*9a0e4156SSadaf Ebrahimi print("*" * 16) 67*9a0e4156SSadaf Ebrahimi print("Platform: %s" % comment) 68*9a0e4156SSadaf Ebrahimi print("Code: %s" % to_hex(code)) 69*9a0e4156SSadaf Ebrahimi print("Disasm:") 70*9a0e4156SSadaf Ebrahimi 71*9a0e4156SSadaf Ebrahimi try: 72*9a0e4156SSadaf Ebrahimi md = Cs(arch, mode) 73*9a0e4156SSadaf Ebrahimi md.detail = True 74*9a0e4156SSadaf Ebrahimi for insn in md.disasm(code, 0x1000): 75*9a0e4156SSadaf Ebrahimi print_insn_detail(insn) 76*9a0e4156SSadaf Ebrahimi print () 77*9a0e4156SSadaf Ebrahimi print("0x%x:\n" % (insn.address + insn.size)) 78*9a0e4156SSadaf Ebrahimi except CsError as e: 79*9a0e4156SSadaf Ebrahimi print("ERROR: %s" % e) 80*9a0e4156SSadaf Ebrahimi 81*9a0e4156SSadaf Ebrahimi 82*9a0e4156SSadaf Ebrahimiif __name__ == '__main__': 83*9a0e4156SSadaf Ebrahimi test_class() 84