1*9a0e4156SSadaf Ebrahimi /* Capstone Disassembler Engine */
2*9a0e4156SSadaf Ebrahimi /* By Nguyen Anh Quynh <[email protected]>, 2013 */
3*9a0e4156SSadaf Ebrahimi
4*9a0e4156SSadaf Ebrahimi #include <stdio.h>
5*9a0e4156SSadaf Ebrahimi #include <stdlib.h>
6*9a0e4156SSadaf Ebrahimi
7*9a0e4156SSadaf Ebrahimi #include <capstone/platform.h>
8*9a0e4156SSadaf Ebrahimi #include <capstone/capstone.h>
9*9a0e4156SSadaf Ebrahimi
10*9a0e4156SSadaf Ebrahimi struct platform {
11*9a0e4156SSadaf Ebrahimi cs_arch arch;
12*9a0e4156SSadaf Ebrahimi cs_mode mode;
13*9a0e4156SSadaf Ebrahimi unsigned char *code;
14*9a0e4156SSadaf Ebrahimi size_t size;
15*9a0e4156SSadaf Ebrahimi const char *comment;
16*9a0e4156SSadaf Ebrahimi };
17*9a0e4156SSadaf Ebrahimi
18*9a0e4156SSadaf Ebrahimi static csh handle;
19*9a0e4156SSadaf Ebrahimi
print_string_hex(const char * comment,unsigned char * str,size_t len)20*9a0e4156SSadaf Ebrahimi static void print_string_hex(const char *comment, unsigned char *str, size_t len)
21*9a0e4156SSadaf Ebrahimi {
22*9a0e4156SSadaf Ebrahimi unsigned char *c;
23*9a0e4156SSadaf Ebrahimi
24*9a0e4156SSadaf Ebrahimi printf("%s", comment);
25*9a0e4156SSadaf Ebrahimi for (c = str; c < str + len; c++) {
26*9a0e4156SSadaf Ebrahimi printf("0x%02x ", *c & 0xff);
27*9a0e4156SSadaf Ebrahimi }
28*9a0e4156SSadaf Ebrahimi
29*9a0e4156SSadaf Ebrahimi printf("\n");
30*9a0e4156SSadaf Ebrahimi }
31*9a0e4156SSadaf Ebrahimi
print_insn_detail(cs_insn * ins)32*9a0e4156SSadaf Ebrahimi static void print_insn_detail(cs_insn *ins)
33*9a0e4156SSadaf Ebrahimi {
34*9a0e4156SSadaf Ebrahimi int i;
35*9a0e4156SSadaf Ebrahimi cs_mips *mips;
36*9a0e4156SSadaf Ebrahimi
37*9a0e4156SSadaf Ebrahimi // detail can be NULL on "data" instruction if SKIPDATA option is turned ON
38*9a0e4156SSadaf Ebrahimi if (ins->detail == NULL)
39*9a0e4156SSadaf Ebrahimi return;
40*9a0e4156SSadaf Ebrahimi
41*9a0e4156SSadaf Ebrahimi mips = &(ins->detail->mips);
42*9a0e4156SSadaf Ebrahimi if (mips->op_count)
43*9a0e4156SSadaf Ebrahimi printf("\top_count: %u\n", mips->op_count);
44*9a0e4156SSadaf Ebrahimi
45*9a0e4156SSadaf Ebrahimi for (i = 0; i < mips->op_count; i++) {
46*9a0e4156SSadaf Ebrahimi cs_mips_op *op = &(mips->operands[i]);
47*9a0e4156SSadaf Ebrahimi switch((int)op->type) {
48*9a0e4156SSadaf Ebrahimi default:
49*9a0e4156SSadaf Ebrahimi break;
50*9a0e4156SSadaf Ebrahimi case MIPS_OP_REG:
51*9a0e4156SSadaf Ebrahimi printf("\t\toperands[%u].type: REG = %s\n", i, cs_reg_name(handle, op->reg));
52*9a0e4156SSadaf Ebrahimi break;
53*9a0e4156SSadaf Ebrahimi case MIPS_OP_IMM:
54*9a0e4156SSadaf Ebrahimi printf("\t\toperands[%u].type: IMM = 0x%" PRIx64 "\n", i, op->imm);
55*9a0e4156SSadaf Ebrahimi break;
56*9a0e4156SSadaf Ebrahimi case MIPS_OP_MEM:
57*9a0e4156SSadaf Ebrahimi printf("\t\toperands[%u].type: MEM\n", i);
58*9a0e4156SSadaf Ebrahimi if (op->mem.base != MIPS_REG_INVALID)
59*9a0e4156SSadaf Ebrahimi printf("\t\t\toperands[%u].mem.base: REG = %s\n",
60*9a0e4156SSadaf Ebrahimi i, cs_reg_name(handle, op->mem.base));
61*9a0e4156SSadaf Ebrahimi if (op->mem.disp != 0)
62*9a0e4156SSadaf Ebrahimi printf("\t\t\toperands[%u].mem.disp: 0x%" PRIx64 "\n", i, op->mem.disp);
63*9a0e4156SSadaf Ebrahimi
64*9a0e4156SSadaf Ebrahimi break;
65*9a0e4156SSadaf Ebrahimi }
66*9a0e4156SSadaf Ebrahimi
67*9a0e4156SSadaf Ebrahimi }
68*9a0e4156SSadaf Ebrahimi
69*9a0e4156SSadaf Ebrahimi printf("\n");
70*9a0e4156SSadaf Ebrahimi }
71*9a0e4156SSadaf Ebrahimi
test()72*9a0e4156SSadaf Ebrahimi static void test()
73*9a0e4156SSadaf Ebrahimi {
74*9a0e4156SSadaf Ebrahimi //#define MIPS_CODE "\x8f\xa2\x00\x00"
75*9a0e4156SSadaf Ebrahimi //#define MIPS_CODE "\x00\x00\xa7\xac\x10\x00\xa2\x8f"
76*9a0e4156SSadaf Ebrahimi //#define MIPS_CODE "\x21\x30\xe6\x70" // clo $6, $7
77*9a0e4156SSadaf Ebrahimi //#define MIPS_CODE "\x00\x00\x00\x00" // nop
78*9a0e4156SSadaf Ebrahimi //#define MIPS_CODE "\xc6\x23\xe9\xe4" // swc1 $f9, 0x23c6($7)
79*9a0e4156SSadaf Ebrahimi //#define MIPS_CODE "\x21\x38\x00\x01" // move $7, $8
80*9a0e4156SSadaf Ebrahimi #define MIPS_CODE "\x0C\x10\x00\x97\x00\x00\x00\x00\x24\x02\x00\x0c\x8f\xa2\x00\x00\x34\x21\x34\x56"
81*9a0e4156SSadaf Ebrahimi //#define MIPS_CODE "\x04\x11\x00\x01" // bal 0x8
82*9a0e4156SSadaf Ebrahimi #define MIPS_CODE2 "\x56\x34\x21\x34\xc2\x17\x01\x00"
83*9a0e4156SSadaf Ebrahimi #define MIPS_32R6M "\x00\x07\x00\x07\x00\x11\x93\x7c\x01\x8c\x8b\x7c\x00\xc7\x48\xd0"
84*9a0e4156SSadaf Ebrahimi #define MIPS_32R6 "\xec\x80\x00\x19\x7c\x43\x22\xa0"
85*9a0e4156SSadaf Ebrahimi #define MIPS_64SD "\x70\x00\xb2\xff"
86*9a0e4156SSadaf Ebrahimi
87*9a0e4156SSadaf Ebrahimi struct platform platforms[] = {
88*9a0e4156SSadaf Ebrahimi {
89*9a0e4156SSadaf Ebrahimi CS_ARCH_MIPS,
90*9a0e4156SSadaf Ebrahimi (cs_mode)(CS_MODE_MIPS32 | CS_MODE_BIG_ENDIAN),
91*9a0e4156SSadaf Ebrahimi (unsigned char *)MIPS_CODE,
92*9a0e4156SSadaf Ebrahimi sizeof(MIPS_CODE) - 1,
93*9a0e4156SSadaf Ebrahimi "MIPS-32 (Big-endian)"
94*9a0e4156SSadaf Ebrahimi },
95*9a0e4156SSadaf Ebrahimi {
96*9a0e4156SSadaf Ebrahimi CS_ARCH_MIPS,
97*9a0e4156SSadaf Ebrahimi (cs_mode)(CS_MODE_MIPS64 | CS_MODE_LITTLE_ENDIAN),
98*9a0e4156SSadaf Ebrahimi (unsigned char *)MIPS_CODE2,
99*9a0e4156SSadaf Ebrahimi sizeof(MIPS_CODE2) - 1,
100*9a0e4156SSadaf Ebrahimi "MIPS-64-EL (Little-endian)"
101*9a0e4156SSadaf Ebrahimi },
102*9a0e4156SSadaf Ebrahimi {
103*9a0e4156SSadaf Ebrahimi CS_ARCH_MIPS,
104*9a0e4156SSadaf Ebrahimi (cs_mode)(CS_MODE_MIPS32R6 | CS_MODE_MICRO | CS_MODE_BIG_ENDIAN),
105*9a0e4156SSadaf Ebrahimi (unsigned char*)MIPS_32R6M,
106*9a0e4156SSadaf Ebrahimi sizeof(MIPS_32R6M) - 1,
107*9a0e4156SSadaf Ebrahimi "MIPS-32R6 | Micro (Big-endian)"
108*9a0e4156SSadaf Ebrahimi },
109*9a0e4156SSadaf Ebrahimi {
110*9a0e4156SSadaf Ebrahimi CS_ARCH_MIPS,
111*9a0e4156SSadaf Ebrahimi (cs_mode)(CS_MODE_MIPS32R6 | CS_MODE_BIG_ENDIAN),
112*9a0e4156SSadaf Ebrahimi (unsigned char*)MIPS_32R6,
113*9a0e4156SSadaf Ebrahimi sizeof(MIPS_32R6) - 1,
114*9a0e4156SSadaf Ebrahimi "MIPS-32R6 (Big-endian)"
115*9a0e4156SSadaf Ebrahimi },
116*9a0e4156SSadaf Ebrahimi {
117*9a0e4156SSadaf Ebrahimi CS_ARCH_MIPS,
118*9a0e4156SSadaf Ebrahimi (cs_mode)(CS_MODE_MIPS64 | CS_MODE_MIPS2 | CS_MODE_LITTLE_ENDIAN),
119*9a0e4156SSadaf Ebrahimi (unsigned char *)MIPS_64SD,
120*9a0e4156SSadaf Ebrahimi sizeof(MIPS_64SD) - 1,
121*9a0e4156SSadaf Ebrahimi "MIPS-64-EL + Mips II (Little-endian)"
122*9a0e4156SSadaf Ebrahimi },
123*9a0e4156SSadaf Ebrahimi {
124*9a0e4156SSadaf Ebrahimi CS_ARCH_MIPS,
125*9a0e4156SSadaf Ebrahimi (cs_mode)(CS_MODE_MIPS64 | CS_MODE_LITTLE_ENDIAN),
126*9a0e4156SSadaf Ebrahimi (unsigned char *)MIPS_64SD,
127*9a0e4156SSadaf Ebrahimi sizeof(MIPS_64SD) - 1,
128*9a0e4156SSadaf Ebrahimi "MIPS-64-EL (Little-endian)"
129*9a0e4156SSadaf Ebrahimi },
130*9a0e4156SSadaf Ebrahimi };
131*9a0e4156SSadaf Ebrahimi
132*9a0e4156SSadaf Ebrahimi uint64_t address = 0x1000;
133*9a0e4156SSadaf Ebrahimi cs_insn *insn;
134*9a0e4156SSadaf Ebrahimi int i;
135*9a0e4156SSadaf Ebrahimi size_t count;
136*9a0e4156SSadaf Ebrahimi
137*9a0e4156SSadaf Ebrahimi for (i = 0; i < sizeof(platforms)/sizeof(platforms[0]); i++) {
138*9a0e4156SSadaf Ebrahimi cs_err err = cs_open(platforms[i].arch, platforms[i].mode, &handle);
139*9a0e4156SSadaf Ebrahimi if (err) {
140*9a0e4156SSadaf Ebrahimi printf("Failed on cs_open() with error returned: %u\n", err);
141*9a0e4156SSadaf Ebrahimi abort();
142*9a0e4156SSadaf Ebrahimi }
143*9a0e4156SSadaf Ebrahimi
144*9a0e4156SSadaf Ebrahimi cs_option(handle, CS_OPT_DETAIL, CS_OPT_ON);
145*9a0e4156SSadaf Ebrahimi
146*9a0e4156SSadaf Ebrahimi count = cs_disasm(handle, platforms[i].code, platforms[i].size, address, 0, &insn);
147*9a0e4156SSadaf Ebrahimi if (count) {
148*9a0e4156SSadaf Ebrahimi size_t j;
149*9a0e4156SSadaf Ebrahimi
150*9a0e4156SSadaf Ebrahimi printf("****************\n");
151*9a0e4156SSadaf Ebrahimi printf("Platform: %s\n", platforms[i].comment);
152*9a0e4156SSadaf Ebrahimi print_string_hex("Code:", platforms[i].code, platforms[i].size);
153*9a0e4156SSadaf Ebrahimi printf("Disasm:\n");
154*9a0e4156SSadaf Ebrahimi
155*9a0e4156SSadaf Ebrahimi for (j = 0; j < count; j++) {
156*9a0e4156SSadaf Ebrahimi printf("0x%" PRIx64 ":\t%s\t%s\n", insn[j].address, insn[j].mnemonic, insn[j].op_str);
157*9a0e4156SSadaf Ebrahimi print_insn_detail(&insn[j]);
158*9a0e4156SSadaf Ebrahimi }
159*9a0e4156SSadaf Ebrahimi printf("0x%" PRIx64 ":\n", insn[j-1].address + insn[j-1].size);
160*9a0e4156SSadaf Ebrahimi
161*9a0e4156SSadaf Ebrahimi // free memory allocated by cs_disasm()
162*9a0e4156SSadaf Ebrahimi cs_free(insn, count);
163*9a0e4156SSadaf Ebrahimi } else {
164*9a0e4156SSadaf Ebrahimi printf("****************\n");
165*9a0e4156SSadaf Ebrahimi printf("Platform: %s\n", platforms[i].comment);
166*9a0e4156SSadaf Ebrahimi print_string_hex("Code:", platforms[i].code, platforms[i].size);
167*9a0e4156SSadaf Ebrahimi printf("ERROR: Failed to disasm given code!\n");
168*9a0e4156SSadaf Ebrahimi abort();
169*9a0e4156SSadaf Ebrahimi }
170*9a0e4156SSadaf Ebrahimi
171*9a0e4156SSadaf Ebrahimi printf("\n");
172*9a0e4156SSadaf Ebrahimi
173*9a0e4156SSadaf Ebrahimi cs_close(&handle);
174*9a0e4156SSadaf Ebrahimi }
175*9a0e4156SSadaf Ebrahimi }
176*9a0e4156SSadaf Ebrahimi
main()177*9a0e4156SSadaf Ebrahimi int main()
178*9a0e4156SSadaf Ebrahimi {
179*9a0e4156SSadaf Ebrahimi test();
180*9a0e4156SSadaf Ebrahimi
181*9a0e4156SSadaf Ebrahimi return 0;
182*9a0e4156SSadaf Ebrahimi }
183