Nguyen Anh Quynh | f0c577f | 2014-04-10 16:09:15 +0800 | [diff] [blame] | 1 | #!/usr/bin/env python |
| 2 | |
| 3 | # Capstone Python bindings, by Nguyen Anh Quynnh <aquynh@gmail.com> |
| 4 | |
Nguyen Anh Quynh | 749046b | 2014-04-12 01:15:10 +0800 | [diff] [blame] | 5 | from __future__ import print_function |
Nguyen Anh Quynh | f0c577f | 2014-04-10 16:09:15 +0800 | [diff] [blame] | 6 | from capstone import * |
| 7 | import binascii |
Nguyen Anh Quynh | 1098329 | 2014-05-17 09:51:15 +0800 | [diff] [blame] | 8 | from xprint import to_x, to_hex, to_x_32 |
Nguyen Anh Quynh | f0c577f | 2014-04-10 16:09:15 +0800 | [diff] [blame] | 9 | |
Nguyen Anh Quynh | 749046b | 2014-04-12 01:15:10 +0800 | [diff] [blame] | 10 | |
| 11 | X86_CODE32 = b"\x8d\x4c\x32\x08\x01\xd8\x81\xc6\x34\x12\x00\x00\x00\x91\x92" |
| 12 | RANDOM_CODE = b"\xed\x00\x00\x00\x00\x1a\x5a\x0f\x1f\xff\xc2\x09\x80\x00\x00\x00\x07\xf7\xeb\x2a\xff\xff\x7f\x57\xe3\x01\xff\xff\x7f\x57\xeb\x00\xf0\x00\x00\x24\xb2\x4f\x00\x78" |
Nguyen Anh Quynh | f0c577f | 2014-04-10 16:09:15 +0800 | [diff] [blame] | 13 | |
| 14 | all_tests = ( |
| 15 | (CS_ARCH_X86, CS_MODE_32, X86_CODE32, "X86 32 (Intel syntax)", 0), |
Nguyen Anh Quynh | 1eccbab | 2014-04-10 17:48:19 +0800 | [diff] [blame] | 16 | (CS_ARCH_ARM, CS_MODE_ARM, RANDOM_CODE, "Arm", 0), |
Nguyen Anh Quynh | 749046b | 2014-04-12 01:15:10 +0800 | [diff] [blame] | 17 | ) |
Nguyen Anh Quynh | f0c577f | 2014-04-10 16:09:15 +0800 | [diff] [blame] | 18 | |
| 19 | |
Nguyen Anh Quynh | 749046b | 2014-04-12 01:15:10 +0800 | [diff] [blame] | 20 | # ## Test cs_disasm_quick() |
Nguyen Anh Quynh | f0c577f | 2014-04-10 16:09:15 +0800 | [diff] [blame] | 21 | def test_cs_disasm_quick(): |
| 22 | for (arch, mode, code, comment, syntax) in all_tests: |
| 23 | print('*' * 40) |
Nguyen Anh Quynh | 749046b | 2014-04-12 01:15:10 +0800 | [diff] [blame] | 24 | print("Platform: %s" % comment) |
Nguyen Anh Quynh | f0c577f | 2014-04-10 16:09:15 +0800 | [diff] [blame] | 25 | print("Disasm:"), |
Nguyen Anh Quynh | 749046b | 2014-04-12 01:15:10 +0800 | [diff] [blame] | 26 | print(to_hex(code)) |
Nguyen Anh Quynh | f0c577f | 2014-04-10 16:09:15 +0800 | [diff] [blame] | 27 | for insn in cs_disasm_quick(arch, mode, code, 0x1000): |
Nguyen Anh Quynh | 749046b | 2014-04-12 01:15:10 +0800 | [diff] [blame] | 28 | print("0x%x:\t%s\t%s" % (insn.address, insn.mnemonic, insn.op_str)) |
Nguyen Anh Quynh | f0c577f | 2014-04-10 16:09:15 +0800 | [diff] [blame] | 29 | print |
| 30 | |
| 31 | |
Nguyen Anh Quynh | 301d740 | 2014-04-10 22:34:27 +0800 | [diff] [blame] | 32 | # Sample callback for SKIPDATA option |
Nguyen Anh Quynh | cbc7dd9 | 2014-07-10 15:57:42 +0800 | [diff] [blame^] | 33 | def testcb(buffer, size, offset, userdata): |
Nguyen Anh Quynh | 301d740 | 2014-04-10 22:34:27 +0800 | [diff] [blame] | 34 | # always skip 2 bytes of data |
| 35 | return 2 |
| 36 | |
| 37 | |
Nguyen Anh Quynh | 749046b | 2014-04-12 01:15:10 +0800 | [diff] [blame] | 38 | # ## Test class Cs |
Nguyen Anh Quynh | f0c577f | 2014-04-10 16:09:15 +0800 | [diff] [blame] | 39 | def test_class(): |
| 40 | for (arch, mode, code, comment, syntax) in all_tests: |
| 41 | print('*' * 16) |
| 42 | print("Platform: %s" %comment) |
| 43 | print("Code: %s" % to_hex(code)) |
| 44 | print("Disasm:") |
| 45 | |
| 46 | try: |
| 47 | md = Cs(arch, mode) |
| 48 | |
| 49 | if syntax != 0: |
| 50 | md.syntax = syntax |
| 51 | |
| 52 | md.skipdata = True |
Nguyen Anh Quynh | 301d740 | 2014-04-10 22:34:27 +0800 | [diff] [blame] | 53 | |
Nguyen Anh Quynh | b64d1cf | 2014-04-10 23:05:28 +0800 | [diff] [blame] | 54 | # Default "data" instruction's name is ".byte". To rename it to "db", just uncomment |
| 55 | # the code below. |
| 56 | # md.skipdata_setup = ("db", None, None) |
| 57 | # NOTE: This example ignores SKIPDATA's callback (first None) & user_data (second None) |
| 58 | |
| 59 | # To customize the SKIPDATA callback, uncomment the line below. |
Nguyen Anh Quynh | 301d740 | 2014-04-10 22:34:27 +0800 | [diff] [blame] | 60 | # md.skipdata_setup = (".db", CS_SKIPDATA_CALLBACK(testcb), None) |
Nguyen Anh Quynh | f0c577f | 2014-04-10 16:09:15 +0800 | [diff] [blame] | 61 | |
| 62 | for insn in md.disasm(code, 0x1000): |
| 63 | #bytes = binascii.hexlify(insn.bytes) |
| 64 | #print("0x%x:\t%s\t%s\t// hex-code: %s" %(insn.address, insn.mnemonic, insn.op_str, bytes)) |
Nguyen Anh Quynh | 749046b | 2014-04-12 01:15:10 +0800 | [diff] [blame] | 65 | print("0x%x:\t%s\t%s" % (insn.address, insn.mnemonic, insn.op_str)) |
Nguyen Anh Quynh | f0c577f | 2014-04-10 16:09:15 +0800 | [diff] [blame] | 66 | |
| 67 | print("0x%x:" % (insn.address + insn.size)) |
| 68 | print |
| 69 | except CsError as e: |
Nguyen Anh Quynh | 749046b | 2014-04-12 01:15:10 +0800 | [diff] [blame] | 70 | print("ERROR: %s" % e) |
Nguyen Anh Quynh | f0c577f | 2014-04-10 16:09:15 +0800 | [diff] [blame] | 71 | |
| 72 | |
Nguyen Anh Quynh | 749046b | 2014-04-12 01:15:10 +0800 | [diff] [blame] | 73 | if __name__ == '__main__': |
| 74 | test_class() |