blob: e9148e5d82bbbb58ef3fc3945851f2fccb0d3ba3 [file] [log] [blame]
Nguyen Anh Quynha6519b02014-04-16 20:03:55 +08001#!/usr/bin/env python
2
3# Capstone Python bindings, by Nguyen Anh Quynnh <aquynh@gmail.com>
4from __future__ import print_function
5import sys
6from capstone import *
7
Nguyen Anh Quynh4171e482014-04-16 20:44:10 +08008CODE32 = b"\xc0\xe0\x02"
Nguyen Anh Quynhd7110602014-04-23 12:40:58 +08009CODE32 += b"\xc0\xf6\x02" # sal dh, 0
10CODE32 += b"\xc1\xf6\x00" # sal esi, 0
Nguyen Anh Quynh33e16362014-04-20 11:32:00 +080011CODE32 += b"\x82\xc0\x00"
Nguyen Anh Quynhd7110602014-04-23 12:40:58 +080012CODE32 += b"\x0f\x1a\x00" # nop dword ptr [eax]
13CODE32 += b"\xf7\xc0\x11\x22\x33\x44" # test eax, 0x44332211
14CODE32 += b"\xf7\xc8\x11\x22\x33\x44" # test eax, 0x44332211
15CODE32 += b"\xf7\x88\x00\x00\x00\x00\x00\x00\x00\x00" # test dword ptr [eax], 0
16CODE32 += b"\xf6\x88\x00\x00\x00\x00\x00" # test byte ptr [eax], 0
17
Nguyen Anh Quynh191c0702014-04-24 22:50:54 +080018CODE32 += b"\xd9\xd8" # fstpnce st(0), st(0)
19CODE32 += b"\xdf\xdf" # fstp st(7), st(0)
20
21CODE32 += b"\x0f\x20\x00" # mov eax, cr0
22CODE32 += b"\x0f\x20\x40" # mov eax, cr0
23CODE32 += b"\x0f\x20\x80" # mov eax, cr0
24
25CODE32 += b"\x0f\x22\x00" # mov cr0, eax
26CODE32 += b"\x0f\x22\x40" # mov cr0, eax
27CODE32 += b"\x0f\x22\x80" # mov cr0, eax
28
29CODE32 += b"\x0f\x21\x00" # mov eax, dr0
30CODE32 += b"\x0f\x21\x40" # mov eax, dr0
31CODE32 += b"\x0f\x21\x80" # mov eax, dr0
32
33CODE32 += b"\x0f\x23\x00" # mov dr0, eax
34CODE32 += b"\x0f\x23\x40" # mov dr0, eax
35CODE32 += b"\x0f\x23\x80" # mov dr0, eax
36
Nguyen Anh Quynhb0082292014-11-16 19:08:25 +080037CODE32 += b"\x66\x2e\x0f\x58\xc0" # addpd xmm0, xmm0
38CODE32 += b"\x2e\x66\x0f\x58\xc0" # addpd xmm0, xmm0
Nguyen Anh Quynh57a902d2014-11-16 19:48:41 +080039CODE32 += b"\x66\xf2\x0f\x38\xf1\xc3" # crc32w %bx, %eax
Nguyen Anh Quynhb0082292014-11-16 19:08:25 +080040CODE32 += b"\xf2\x0f\x38\xf1\x8c\xcb\xef\xbe\xad\xde" # crc32l -0x21524111(%ebx, %ecx, 8), %ecx
41
Nguyen Anh Quynh668b96c2014-11-02 23:15:18 +080042CODE32_MEMREF = b"\x8b\x84\x91\x23\x01\x00\x00"
43CODE32_MEMREF += b"\x8b\x04\x95\x23\x01\x00\x00"
44CODE32_MEMREF += b"\x8b\x04\x95\xdd\xfe\xff\xff"
45CODE32_MEMREF += b"\xa1\x23\x01\x00\x00"
46CODE32_MEMREF += b"\xa1\x00\x00\x00\x00"
Nguyen Anh Quynhed0fbce2014-11-02 23:32:39 +080047CODE32_MEMREF += b"\xa1\xdd\xfe\xff\xff"
Nguyen Anh Quynhb87f8552014-11-02 23:38:35 +080048CODE32_MEMREF += b"\x8b\x04\x91"
Nguyen Anh Quynh668b96c2014-11-02 23:15:18 +080049
Nguyen Anh Quynhc3528972014-11-04 11:04:32 +080050CODE64_MEMREF = b"\xa3\x0b\x00\x00\x0f\xbe\xc0\x48\x83"
51CODE64_MEMREF += b"\xa0\x71\xfa\xff\x48\x85\xc0\x48\x89"
Nguyen Anh Quynha6519b02014-04-16 20:03:55 +080052
Nguyen Anh Quynhff7bba32014-11-03 16:32:06 +080053CODE32_ARITH = b"\x83\xe0\xf7"
54CODE32_ARITH += b"\x83\xe0\x10"
55CODE32_ARITH += b"\x83\xe0\x00"
56CODE32_ARITH += b"\x80\x23\x10"
57
58CODE64_ARITH = b"\x41\x83\xe0\xfa"
59CODE64_ARITH += b"\x48\x83\xe4\xf0"
60
Nguyen Anh Quynhc3528972014-11-04 11:04:32 +080061CODE32_IMM = b"\xc2\xb8\xc0"
62CODE32_IMM += b"\xc2\x0f\x92"
63CODE32_IMM += b"\x02\x2d\x00\x00\x00\x83"
64
Nguyen Anh Quynhff7bba32014-11-03 16:32:06 +080065
66
Nguyen Anh Quynha6519b02014-04-16 20:03:55 +080067_python3 = sys.version_info.major == 3
68
69all_tests = (
70 (CS_ARCH_X86, CS_MODE_32, CODE32, "X86 32 (Intel syntax)", 0),
Nguyen Anh Quynh668b96c2014-11-02 23:15:18 +080071 (CS_ARCH_X86, CS_MODE_32, CODE32, "X86 32 (ATT syntax)", CS_OPT_SYNTAX_ATT),
Nguyen Anh Quynhff7bba32014-11-03 16:32:06 +080072
Nguyen Anh Quynh668b96c2014-11-02 23:15:18 +080073 (CS_ARCH_X86, CS_MODE_32, CODE32_MEMREF, "X86 32 MemRef (Intel syntax)", 0),
74 (CS_ARCH_X86, CS_MODE_32, CODE32_MEMREF, "X86 32 MemRef (ATT syntax)", CS_OPT_SYNTAX_ATT),
Nguyen Anh Quynhc3528972014-11-04 11:04:32 +080075 (CS_ARCH_X86, CS_MODE_64, CODE64_MEMREF, "X86 64 (Intel syntax)", 0),
Nguyen Anh Quynhff7bba32014-11-03 16:32:06 +080076
77 (CS_ARCH_X86, CS_MODE_32, CODE32_ARITH, "X86 32 (Intel syntax)", 0),
Nguyen Anh Quynhff7bba32014-11-03 16:32:06 +080078 (CS_ARCH_X86, CS_MODE_64, CODE64_ARITH, "X86 64 (Intel syntax)", 0),
Nguyen Anh Quynhc3528972014-11-04 11:04:32 +080079
80 (CS_ARCH_X86, CS_MODE_32, CODE32_IMM, "X86 32 (Intel syntax)", 0),
81 (CS_ARCH_X86, CS_MODE_32, CODE32_IMM, "X86 32 (Intel syntax)", CS_OPT_SYNTAX_ATT),
Nguyen Anh Quynha6519b02014-04-16 20:03:55 +080082)
83
84
85def to_hex(s):
86 if _python3:
87 return " ".join("0x{0:02x}".format(c) for c in s) # <-- Python 3 is OK
88 else:
89 return " ".join("0x{0:02x}".format(ord(c)) for c in s)
90
91# ## Test cs_disasm_quick()
92def test_cs_disasm_quick():
93 for (arch, mode, code, comment, syntax) in all_tests:
94 print("Platform: %s" % comment)
95 print("Code: %s" %(to_hex(code))),
96 print("Disasm:")
Nguyen Anh Quynh668b96c2014-11-02 23:15:18 +080097 md = Cs(arch, mode)
98 if syntax != 0:
99 md.syntax = syntax
100 for insn in md.disasm(code, 0x1000):
101 print("0x%x:\t%s\t%s" % (insn.address, insn.mnemonic, insn.op_str))
102 print("--------")
Nguyen Anh Quynha6519b02014-04-16 20:03:55 +0800103
104
105if __name__ == '__main__':
106 test_cs_disasm_quick()