x64dbg
/
zydis
mirror of https://github.com/x64dbg/zydis
1
0
Fork 0
Code Releases Activity
zydis/src/Decoder.c

2402 lines
85 KiB
C
Raw Normal View History

Initial version 2.0 release
2016-05-26 03:25:48 +08:00
/***************************************************************************************************
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
Zyan Disassembler Library (Zydis)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
Original Author : Florian Bernd
* Permission is hereby granted, free of charge, to any person obtaining a copy
* of this software and associated documentation files (the "Software"), to deal
* in the Software without restriction, including without limitation the rights
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
* copies of the Software, and to permit persons to whom the Software is
* furnished to do so, subject to the following conditions:
*
* The above copyright notice and this permission notice shall be included in all
* copies or substantial portions of the Software.
*
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
* AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
* SOFTWARE.
***************************************************************************************************/
#include <string.h>
#include <Zydis/Status.h>
#include <Zydis/Decoder.h>
#include <Zydis/Internal/InstructionTable.h>
/* ============================================================================================== */
/* Internal functions */
/* ============================================================================================== */
/* ---------------------------------------------------------------------------------------------- */
/* Input helper functions */
/* ---------------------------------------------------------------------------------------------- */
/**
* @brief Reads one byte from the current read-position of the input data-source.
*
* @param decoder A pointer to the @c ZydisInstructionDecoder instance.
* @param info A pointer to the @c ZydisInstructionInfo struct.
* @param value A pointer to the memory that receives the byte from the input data-source.
*
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
* @return A zydis status code.
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
*
* If not empty, the internal buffer of the @c ZydisInstructionDecoder instance is used as temporary
* data-source, instead of reading the byte from the actual input data-source.
*
* This function may fail, if the @c ZYDIS_MAX_INSTRUCTION_LENGTH limit got exceeded, or no more
* data is available.
*/
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisInputPeek(ZydisInstructionDecoder* decoder, ZydisInstructionInfo* info,
uint8_t* value)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
ZYDIS_ASSERT(decoder);
ZYDIS_ASSERT(info);
ZYDIS_ASSERT(value);
if (info->length >= ZYDIS_MAX_INSTRUCTION_LENGTH)
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_INSTRUCTION_TOO_LONG;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Removed Input-struct. The input buffer is now directly passed to the ZydisDecodeInstruction function.
2017-01-11 18:20:24 +08:00
if (decoder->input.bufferLen > 0)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Removed Input-struct. The input buffer is now directly passed to the ZydisDecodeInstruction function.
2017-01-11 18:20:24 +08:00
*value = decoder->input.buffer[0];
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Removed Input-struct. The input buffer is now directly passed to the ZydisDecodeInstruction function.
2017-01-11 18:20:24 +08:00
return ZYDIS_STATUS_NO_MORE_DATA;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
/**
* @brief Increases the read-position of the input data-source by one byte.
*
* @param decoder A pointer to the @c ZydisInstructionDecoder instance
* @param info A pointer to the @c ZydisInstructionInfo struct.
*
* This function is supposed to get called ONLY after a successfull call of @c ZydisInputPeek.
*
* If not empty, the read-position of the @c ZydisInstructionDecoder instances internal buffer is
* increased, instead of the actual input data-sources read-position.
*
* This function increases the @c length field of the @c ZydisInstructionInfo struct by one and
* adds the current byte to the @c data array.
*/
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static void ZydisInputSkip(ZydisInstructionDecoder* decoder, ZydisInstructionInfo* info)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
ZYDIS_ASSERT(decoder);
ZYDIS_ASSERT(info);
ZYDIS_ASSERT(info->length < ZYDIS_MAX_INSTRUCTION_LENGTH);
Removed Input-struct. The input buffer is now directly passed to the ZydisDecodeInstruction function.
2017-01-11 18:20:24 +08:00
info->data[info->length++] = decoder->input.buffer++[0];
--decoder->input.bufferLen;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
/**
* @brief Reads one byte from the current read-position of the input data-source and increases the
* read-position by one byte afterwards.
*
* @param decoder A pointer to the @c ZydisInstructionDecoder instance.
* @param info A pointer to the @c ZydisInstructionInfo struct.
* @param value A pointer to the memory that receives the byte from the input data-source.
*
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
* @return A zydis status code.
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
*
* This function acts like a subsequent call of @c ZydisInputPeek and @c ZydisInputSkip.
*/
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisInputNext(ZydisInstructionDecoder* decoder, ZydisInstructionInfo* info,
uint8_t* value)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Removed Input-struct. The input buffer is now directly passed to the ZydisDecodeInstruction function.
2017-01-11 18:20:24 +08:00
ZYDIS_ASSERT(decoder);
ZYDIS_ASSERT(info);
ZYDIS_ASSERT(value);
if (info->length >= ZYDIS_MAX_INSTRUCTION_LENGTH)
{
return ZYDIS_STATUS_INSTRUCTION_TOO_LONG;
}
if (decoder->input.bufferLen > 0)
{
*value = decoder->input.buffer++[0];
info->data[info->length++] = *value;
--decoder->input.bufferLen;
return ZYDIS_STATUS_SUCCESS;
}
return ZYDIS_STATUS_NO_MORE_DATA;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
/* ---------------------------------------------------------------------------------------------- */
/* Decoder functions */
/* ---------------------------------------------------------------------------------------------- */
/**
Refactored docstrings to use uppercase abbreviations
2017-01-13 02:37:57 +08:00
* @brief Decodes the REX-prefix.
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
*
Refactored docstrings to use uppercase abbreviations
2017-01-13 02:37:57 +08:00
* @param rexByte The REX byte.
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
* @param info A pointer to the @c ZydisInstructionInfo struct.
*/
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static void ZydisDecodeREX(ZydisInstructionInfo* info, uint8_t rexByte)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
ZYDIS_ASSERT(info);
ZYDIS_ASSERT((rexByte & 0xF0) == 0x40);
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_HAS_REX;
info->details.rex.isDecoded = ZYDIS_TRUE;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
info->details.rex.data[0] = rexByte;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->details.rex.W = (rexByte >> 3) & 0x01;
info->details.rex.R = (rexByte >> 2) & 0x01;
info->details.rex.X = (rexByte >> 1) & 0x01;
info->details.rex.B = (rexByte >> 0) & 0x01;
// Update internal fields
info->details.internal.W = info->details.rex.W;
info->details.internal.R = info->details.rex.R;
info->details.internal.X = info->details.rex.X;
info->details.internal.B = info->details.rex.B;
}
/**
Refactored docstrings to use uppercase abbreviations
2017-01-13 02:37:57 +08:00
* @brief Decodes the XOP-prefix.
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
*
Refactored docstrings to use uppercase abbreviations
2017-01-13 02:37:57 +08:00
* @param xopByte1 The first XOP byte.
* @param xopByte2 The second XOP byte.
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
* @param info A pointer to the @c ZydisInstructionInfo struct.
*
* @return A zydis status code.
*/
static ZydisStatus ZydisDecodeXOP(uint8_t xopByte1, uint8_t xopByte2, ZydisInstructionInfo* info)
{
ZYDIS_ASSERT(info);
ZYDIS_ASSERT(((xopByte1 >> 0) & 0x1F) >= 8);
info->attributes |= ZYDIS_ATTRIB_HAS_XOP;
info->details.xop.isDecoded = ZYDIS_TRUE;
info->details.xop.data[0] = 0x8F;
info->details.xop.data[1] = xopByte1;
info->details.xop.data[2] = xopByte2;
info->details.xop.R = (xopByte1 >> 7) & 0x01;
info->details.xop.X = (xopByte1 >> 6) & 0x01;
info->details.xop.B = (xopByte1 >> 5) & 0x01;
info->details.xop.m_mmmm = (xopByte1 >> 0) & 0x1F;
if ((info->details.xop.m_mmmm < 0x08) || (info->details.xop.m_mmmm > 0x0A))
{
// Invalid according to the AMD documentation
return ZYDIS_STATUS_INVALID_MAP;
}
info->details.xop.W = (xopByte2 >> 7) & 0x01;
info->details.xop.vvvv = (xopByte2 >> 3) & 0x0F;
info->details.xop.L = (xopByte2 >> 2) & 0x01;
info->details.xop.pp = (xopByte2 >> 0) & 0x03;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
// Update internal fields
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->details.internal.W = info->details.xop.W;
info->details.internal.R = 0x01 & ~info->details.xop.R;
info->details.internal.X = 0x01 & ~info->details.xop.X;
info->details.internal.B = 0x01 & ~info->details.xop.B;
info->details.internal.L = info->details.xop.L;
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
/**
Refactored docstrings to use uppercase abbreviations
2017-01-13 02:37:57 +08:00
* @brief Decodes the VEX-prefix.
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
*
Refactored docstrings to use uppercase abbreviations
2017-01-13 02:37:57 +08:00
* @param vexOpcode The VEX opcode.
* @param vexByte1 The first VEX byte.
* @param vexByte2 The second VEX byte.
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
* @param info A pointer to the @c ZydisInstructionInfo struct.
*
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
* @return A zydis status code.
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
*/
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisDecodeVEX(uint8_t vexOpcode, uint8_t vexByte1, uint8_t vexByte2,
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
ZydisInstructionInfo* info)
{
ZYDIS_ASSERT(info);
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_HAS_VEX;
info->details.vex.isDecoded = ZYDIS_TRUE;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
info->details.vex.data[0] = vexOpcode;
switch (vexOpcode)
{
case 0xC4:
info->details.vex.data[1] = vexByte1;
info->details.vex.data[2] = vexByte2;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->details.vex.R = (vexByte1 >> 7) & 0x01;
info->details.vex.X = (vexByte1 >> 6) & 0x01;
info->details.vex.B = (vexByte1 >> 5) & 0x01;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
info->details.vex.m_mmmm = (vexByte1 >> 0) & 0x1F;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->details.vex.W = (vexByte2 >> 7) & 0x01;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
info->details.vex.vvvv = (vexByte2 >> 3) & 0x0F;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->details.vex.L = (vexByte2 >> 2) & 0x01;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
info->details.vex.pp = (vexByte2 >> 0) & 0x03;
break;
case 0xC5:
info->details.vex.data[1] = vexByte1;
info->details.vex.data[2] = 0;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->details.vex.R = (vexByte1 >> 7) & 0x01;
info->details.vex.X = 1;
info->details.vex.B = 1;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
info->details.vex.m_mmmm = 1;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->details.vex.W = 0;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
info->details.vex.vvvv = (vexByte1 >> 3) & 0x0F;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->details.vex.L = (vexByte1 >> 2) & 0x01;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
info->details.vex.pp = (vexByte1 >> 0) & 0x03;
break;
default:
ZYDIS_UNREACHABLE;
}
if ((info->details.vex.m_mmmm == 0x00) || (info->details.vex.m_mmmm > 0x03))
{
// Invalid according to the intel documentation
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_INVALID_MAP;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
// Update internal fields
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->details.internal.W = info->details.vex.W;
info->details.internal.R = 0x01 & ~info->details.vex.R;
info->details.internal.X = 0x01 & ~info->details.vex.X;
info->details.internal.B = 0x01 & ~info->details.vex.B;
info->details.internal.L = info->details.vex.L;
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
/**
Refactored docstrings to use uppercase abbreviations
2017-01-13 02:37:57 +08:00
* @brief Decodes the EVEX-prefix.
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
*
Refactored docstrings to use uppercase abbreviations
2017-01-13 02:37:57 +08:00
* @param evexByte1 The first EVEX byte.
* @param evexByte2 The second EVEX byte.
* @param evexByte3 The third EVEX byte.
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
* @param info A pointer to the @c ZydisInstructionInfo struct.
*
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
* @return A zydis status code.
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
*/
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisDecodeEVEX(uint8_t evexByte1, uint8_t evexByte2, uint8_t evexByte3,
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
ZydisInstructionInfo* info)
{
ZYDIS_ASSERT(info);
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_HAS_EVEX;
info->details.evex.isDecoded = ZYDIS_TRUE;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
info->details.evex.data[0] = 0x62;
info->details.evex.data[1] = evexByte1;
info->details.evex.data[2] = evexByte2;
info->details.evex.data[3] = evexByte3;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->details.evex.R = (evexByte1 >> 7) & 0x01;
info->details.evex.X = (evexByte1 >> 6) & 0x01;
info->details.evex.B = (evexByte1 >> 5) & 0x01;
info->details.evex.R2 = (evexByte1 >> 4) & 0x01;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
if (((evexByte1 >> 2) & 0x03) != 0x00)
{
// Invalid according to the intel documentation
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_MALFORMED_EVEX;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
info->details.evex.mm = (evexByte1 >> 0) & 0x03;
if (info->details.evex.mm == 0x00)
{
// Invalid according to the intel documentation
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_INVALID_MAP;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->details.evex.W = (evexByte2 >> 7) & 0x01;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
info->details.evex.vvvv = (evexByte2 >> 3) & 0x0F;
if (((evexByte2 >> 2) & 0x01) != 0x01)
{
// Invalid according to the intel documentation
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_MALFORMED_EVEX;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
info->details.evex.pp = (evexByte2 >> 0) & 0x03;
info->details.evex.z = (evexByte3 >> 7) & 0x01;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->details.evex.L2 = (evexByte3 >> 6) & 0x01;
info->details.evex.L = (evexByte3 >> 5) & 0x01;
info->details.evex.b = (evexByte3 >> 4) & 0x01;
info->details.evex.V2 = (evexByte3 >> 3) & 0x01;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
info->details.evex.aaa = (evexByte3 >> 0) & 0x07;
// Update internal fields
Fixed decoding of instructions with EVEX high-16 register specifiers (R', X, V')
2016-12-06 04:06:29 +08:00
info->details.internal.W = info->details.evex.W;
info->details.internal.R = 0x01 & ~info->details.evex.R;
info->details.internal.X = 0x01 & ~info->details.evex.X;
info->details.internal.B = 0x01 & ~info->details.evex.B;
info->details.internal.L = info->details.evex.L;
info->details.internal.R2 = 0x01 & ~info->details.evex.R2;
info->details.internal.V2 = 0x01 & ~info->details.evex.V2;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
/**
Refactored docstrings to use uppercase abbreviations
2017-01-13 02:37:57 +08:00
* @brief Decodes the ModRM-byte.
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
*
Refactored docstrings to use uppercase abbreviations
2017-01-13 02:37:57 +08:00
* @param modrmByte The ModRM byte.
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
* @param info A pointer to the @c ZydisInstructionInfo struct.
*/
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static void ZydisDecodeModRM(uint8_t modrmByte, ZydisInstructionInfo* info)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
ZYDIS_ASSERT(info);
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_HAS_MODRM;
info->details.modrm.isDecoded = ZYDIS_TRUE;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
info->details.modrm.data[0] = modrmByte;
info->details.modrm.mod = (modrmByte >> 6) & 0x03;
info->details.modrm.reg = (modrmByte >> 3) & 0x07;
info->details.modrm.rm = (modrmByte >> 0) & 0x07;
}
/**
Refactored docstrings to use uppercase abbreviations
2017-01-13 02:37:57 +08:00
* @brief Decodes the SIB-byte.
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
*
Refactored docstrings to use uppercase abbreviations
2017-01-13 02:37:57 +08:00
* @param sibByte The SIB byte.
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
* @param info A pointer to the @c ZydisInstructionInfo struct
*/
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static void ZydisDecodeSIB(uint8_t sibByte, ZydisInstructionInfo* info)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
ZYDIS_ASSERT(info);
ZYDIS_ASSERT(info->details.modrm.isDecoded);
ZYDIS_ASSERT((info->details.modrm.rm & 0x7) == 4);
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_HAS_SIB;
info->details.sib.isDecoded = ZYDIS_TRUE;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
info->details.sib.data[0] = sibByte;
info->details.sib.scale = (sibByte >> 6) & 0x03;
info->details.sib.index = (sibByte >> 3) & 0x07;
info->details.sib.base = (sibByte >> 0) & 0x07;
}
/* ---------------------------------------------------------------------------------------------- */
/**
* @brief Collects optional instruction prefixes.
*
* @param decoder A pointer to the @c ZydisInstructionDecoder decoder instance.
* @param info A pointer to the @c ZydisInstructionInfo struct.
*
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
* @return A zydis status code.
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
*
* This function sets the corresponding flag for each prefix and automatically decodes the last
Refactored docstrings to use uppercase abbreviations
2017-01-13 02:37:57 +08:00
* REX-prefix (if exists).
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
*/
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisCollectOptionalPrefixes(ZydisInstructionDecoder* decoder,
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
ZydisInstructionInfo* info)
{
ZYDIS_ASSERT(decoder);
ZYDIS_ASSERT(info);
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZydisBool done = ZYDIS_FALSE;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
do
{
uint8_t prefixByte;
ZYDIS_CHECK(ZydisInputPeek(decoder, info, &prefixByte));
switch (prefixByte)
{
case 0xF0:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
++info->details.prefixes.hasF0;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case 0xF2:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
decoder->hasUnusedPrefixF2F3 = 0xF2;
++info->details.prefixes.hasF2;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case 0xF3:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
decoder->hasUnusedPrefixF2F3 = 0xF3;
++info->details.prefixes.hasF3;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case 0x2E:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
++info->details.prefixes.has2E;
decoder->lastSegmentPrefix = 0x2E;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case 0x36:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
++info->details.prefixes.has36;
decoder->lastSegmentPrefix = 0x36;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case 0x3E:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
++info->details.prefixes.has3E;
decoder->lastSegmentPrefix = 0x3E;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case 0x26:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
++info->details.prefixes.has26;
decoder->lastSegmentPrefix = 0x26;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case 0x64:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
++info->details.prefixes.has64;
decoder->lastSegmentPrefix = 0x64;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case 0x65:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
++info->details.prefixes.has65;
decoder->lastSegmentPrefix = 0x65;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case 0x66:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
decoder->hasUnusedPrefix66 = 0x66;
++info->details.prefixes.has66;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case 0x67:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
++info->details.prefixes.has67;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
default:
if ((decoder->disassemblerMode == ZYDIS_DISASSEMBLER_MODE_64BIT) &&
(prefixByte & 0xF0) == 0x40)
{
info->details.rex.data[0] = prefixByte;
} else
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
done = ZYDIS_TRUE;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
break;
}
if (!done)
{
ZydisInputSkip(decoder, info);
}
} while (!done);
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
if (info->details.rex.data[0])
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZydisDecodeREX(info, info->details.rex.data[0]);
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
return ZYDIS_STATUS_SUCCESS;
}
/* ---------------------------------------------------------------------------------------------- */
/**
* @brief Decodes an immediate operand.
*
* @param decoder A pointer to the @c ZydisInstructionDecoder decoder instance.
* @param info A pointer to the @c ZydisInstructionInfo struct.
* @param operand A pointer to the @c ZydisOperandInfo struct.
* @param physicalSize The physical size of the immediate operand.
* @param isSigned Set @c true, if the immediate value is signed or @c false, if not.
*
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
* @return A zydis status code.
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
*/
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisDecodeOperandImmediate(ZydisInstructionDecoder* decoder,
ZydisInstructionInfo* info, ZydisOperandInfo* operand, uint8_t physicalSize,
ZydisBool isSigned)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
ZYDIS_ASSERT(decoder);
ZYDIS_ASSERT(info);
ZYDIS_ASSERT(operand);
operand->type = ZYDIS_OPERAND_TYPE_IMMEDIATE;
operand->imm.isSigned = isSigned;
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
operand->imm.dataSize = physicalSize;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->imm.dataOffset = info->length;
switch (physicalSize)
{
case 8:
{
Added support for instructions with 5 operands * optimized table structure to support instructions with 5 operands (vpermil2ps, vpermil2pd) * updated InstructionEditor
2016-09-13 11:26:55 +08:00
// We have to store a copy of the imm8 value for instructions that encode different operands
// in the lo and hi part of the immediate.
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
if (decoder->imm8initialized)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
operand->imm.value.ubyte = decoder->imm8;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
} else
{
Added support for instructions with 5 operands * optimized table structure to support instructions with 5 operands (vpermil2ps, vpermil2pd) * updated InstructionEditor
2016-09-13 11:26:55 +08:00
uint8_t immediate;
ZYDIS_CHECK(ZydisInputNext(decoder, info, &immediate));
if (isSigned)
{
operand->imm.value.sqword = (int8_t)immediate;
} else
{
operand->imm.value.uqword = immediate;
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
decoder->imm8initialized = ZYDIS_TRUE;
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
decoder->imm8 = operand->imm.value.ubyte;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
break;
}
case 16:
{
uint16_t data[2] = { 0, 0 };
ZYDIS_CHECK(ZydisInputNext(decoder, info, (uint8_t*)&data[1]));
ZYDIS_CHECK(ZydisInputNext(decoder, info, (uint8_t*)&data[0]));
uint16_t immediate;
immediate = (data[0] << 8) | data[1];
if (isSigned)
{
operand->imm.value.sqword = (int16_t)immediate;
} else
{
operand->imm.value.uqword = immediate;
}
break;
}
case 32:
{
uint32_t data[4] = { 0, 0, 0, 0 };
for (int i = sizeof(data) / sizeof(data[0]); i > 0; --i)
{
ZYDIS_CHECK(ZydisInputNext(decoder, info, (uint8_t*)&data[i - 1]));
}
uint32_t immediate;
immediate = (data[0] << 24) | (data[1] << 16) | (data[2] << 8) | data[3];
if (isSigned)
{
operand->imm.value.sqword = (int32_t)immediate;
} else
{
operand->imm.value.uqword = immediate;
}
break;
}
case 64:
{
uint64_t data[8] = { 0, 0, 0, 0, 0, 0, 0, 0 };
for (int i = sizeof(data) / sizeof(data[0]); i > 0; --i)
{
ZYDIS_CHECK(ZydisInputNext(decoder, info, (uint8_t*)&data[i - 1]));
}
uint64_t immediate;
immediate = (data[0] << 56) | (data[1] << 48) | (data[2] << 40) | (data[3] << 32) |
(data[4] << 24) | (data[5] << 16) | (data[6] << 8) | data[7];
if (isSigned)
{
operand->imm.value.sqword = (int64_t)immediate;
} else
{
operand->imm.value.uqword = immediate;
}
break;
}
default:
ZYDIS_UNREACHABLE;
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
/**
* @brief Decodes an register-operand.
*
* @param info A pointer to the @c ZydisInstructionInfo struct.
* @param operand A pointer to the @c ZydisOperandInfo struct.
* @param registerClass The register class.
* @param registerId The register id.
*
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
* @return A zydis status code.
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
*/
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisDecodeOperandRegister(ZydisInstructionInfo* info,
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
ZydisOperandInfo* operand, ZydisRegisterClass registerClass, uint8_t registerId)
{
ZYDIS_ASSERT(info);
ZYDIS_ASSERT(operand);
operand->type = ZYDIS_OPERAND_TYPE_REGISTER;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
if (registerClass == ZYDIS_REGCLASS_GPR8)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
if ((info->attributes & ZYDIS_ATTRIB_HAS_REX) && (registerId >= 4))
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
operand->reg = ZYDIS_REGISTER_SPL + (registerId - 4);
} else
{
operand->reg = ZYDIS_REGISTER_AL + registerId;
}
if (operand->reg > ZYDIS_REGISTER_R15B)
{
operand->reg = ZYDIS_REGISTER_NONE;
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
// TODO: Return critical error, if an invalid register was found
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
} else
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->reg = ZydisRegisterEncode(registerClass, registerId);
if (!operand->reg)
{
Minor bugfixes
2017-01-20 07:01:56 +08:00
return ZYDIS_STATUS_BAD_REGISTER;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
}
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
/**
Refactored docstrings to use uppercase abbreviations
2017-01-13 02:37:57 +08:00
* @brief Decodes a memory or register operand encoded in the ModRM.rm field.
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
*
* @param decoder A pointer to the @c ZydisInstructionDecoder decoder instance.
* @param info A pointer to the @c ZydisInstructionInfo struct.
* @param operand A pointer to the @c ZydisOperandInfo struct.
* @param registerClass The register class.
*
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
* @return A zydis status code.
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
*/
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisDecodeOperandModrmRm(ZydisInstructionDecoder* decoder,
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
ZydisInstructionInfo* info, ZydisOperandInfo* operand, ZydisRegisterClass registerClass)
{
ZYDIS_ASSERT(decoder);
ZYDIS_ASSERT(info);
ZYDIS_ASSERT(operand);
ZYDIS_ASSERT(info->details.modrm.isDecoded);
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
uint8_t modrm_rm = (info->details.internal.B << 3) | info->details.modrm.rm;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
if (info->details.modrm.mod == 3)
{
Fixed decoding of instructions with EVEX high-16 register specifiers (R', X, V')
2016-12-06 04:06:29 +08:00
return ZydisDecodeOperandRegister(info, operand, registerClass,
(info->details.internal.X << 4) | modrm_rm);
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
operand->type = ZYDIS_OPERAND_TYPE_MEMORY;
uint8_t displacementSize = 0;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
// TODO: Some instructions (like the MPX ones) do not accept the address-size prefix
info->attributes |= ZYDIS_ATTRIB_ACCEPTS_ADDRESSSIZE;
if (info->details.prefixes.has67)
{
info->attributes |= ZYDIS_ATTRIB_HAS_ADDRESSSIZE;
}
Bugfixes and Support for some more registers Zydis: - Fixed operand-size of some instructions in 64-bit mode - Fixed operand decoding of the "movq MM, GPR" instruction - Added table-registers (GDRT, LDTR, IDTR, TR) - Added test-registers (TR0..TR7) - Added BNDCFG and BNDSTATUS registers - Added MXCR register InstructionEditor: - The code-generator now eliminates duplicate instruction-definitions to optimize the size of the generated tables - Fixed conflict indication for some operand type/encoding combinations - Added conflict indication for X86Flags
2016-11-14 09:10:59 +08:00
switch (decoder->disassemblerMode)
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
case ZYDIS_DISASSEMBLER_MODE_16BIT: // TODO: Set ZYDIS_ATTRIB_ACCEPTS_ADDRESSSIZE and ZYDIS_ATTRIB_HAS_ADDRESSSIZE after getting the instruction definition
operand->mem.addressSize = (info->attributes & ZYDIS_ATTRIB_HAS_ADDRESSSIZE) ? 32 : 16;
Bugfixes and Support for some more registers Zydis: - Fixed operand-size of some instructions in 64-bit mode - Fixed operand decoding of the "movq MM, GPR" instruction - Added table-registers (GDRT, LDTR, IDTR, TR) - Added test-registers (TR0..TR7) - Added BNDCFG and BNDSTATUS registers - Added MXCR register InstructionEditor: - The code-generator now eliminates duplicate instruction-definitions to optimize the size of the generated tables - Fixed conflict indication for some operand type/encoding combinations - Added conflict indication for X86Flags
2016-11-14 09:10:59 +08:00
break;
case ZYDIS_DISASSEMBLER_MODE_32BIT:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->mem.addressSize = (info->attributes & ZYDIS_ATTRIB_HAS_ADDRESSSIZE) ? 16 : 32;
Bugfixes and Support for some more registers Zydis: - Fixed operand-size of some instructions in 64-bit mode - Fixed operand decoding of the "movq MM, GPR" instruction - Added table-registers (GDRT, LDTR, IDTR, TR) - Added test-registers (TR0..TR7) - Added BNDCFG and BNDSTATUS registers - Added MXCR register InstructionEditor: - The code-generator now eliminates duplicate instruction-definitions to optimize the size of the generated tables - Fixed conflict indication for some operand type/encoding combinations - Added conflict indication for X86Flags
2016-11-14 09:10:59 +08:00
break;
case ZYDIS_DISASSEMBLER_MODE_64BIT:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->mem.addressSize = (info->attributes & ZYDIS_ATTRIB_HAS_ADDRESSSIZE) ? 32 : 64;
Bugfixes and Support for some more registers Zydis: - Fixed operand-size of some instructions in 64-bit mode - Fixed operand decoding of the "movq MM, GPR" instruction - Added table-registers (GDRT, LDTR, IDTR, TR) - Added test-registers (TR0..TR7) - Added BNDCFG and BNDSTATUS registers - Added MXCR register InstructionEditor: - The code-generator now eliminates duplicate instruction-definitions to optimize the size of the generated tables - Fixed conflict indication for some operand type/encoding combinations - Added conflict indication for X86Flags
2016-11-14 09:10:59 +08:00
break;
default:
ZYDIS_UNREACHABLE;
}
switch (operand->mem.addressSize)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
case 16:
{
static const ZydisRegister bases[] =
{
ZYDIS_REGISTER_BX, ZYDIS_REGISTER_BX, ZYDIS_REGISTER_BP, ZYDIS_REGISTER_BP,
ZYDIS_REGISTER_SI, ZYDIS_REGISTER_DI, ZYDIS_REGISTER_BP, ZYDIS_REGISTER_BX
};
static const ZydisRegister indices[] =
{
ZYDIS_REGISTER_SI, ZYDIS_REGISTER_DI, ZYDIS_REGISTER_SI, ZYDIS_REGISTER_DI,
ZYDIS_REGISTER_NONE, ZYDIS_REGISTER_NONE, ZYDIS_REGISTER_NONE, ZYDIS_REGISTER_NONE
};
operand->mem.base = bases[modrm_rm & 0x07];
operand->mem.index = indices[modrm_rm & 0x07];
operand->mem.scale = 0;
if ((info->details.modrm.mod == 0) && (modrm_rm == 6))
{
displacementSize = 16;
operand->mem.base = ZYDIS_REGISTER_NONE;
} else if (info->details.modrm.mod == 1)
{
displacementSize = 8;
} else if (info->details.modrm.mod == 2)
{
displacementSize = 16;
}
break;
}
case 32:
{
operand->mem.base = ZYDIS_REGISTER_EAX + modrm_rm;
switch (info->details.modrm.mod)
{
case 0:
if (modrm_rm == 5)
{
if (decoder->disassemblerMode == ZYDIS_DISASSEMBLER_MODE_64BIT)
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_IS_RELATIVE;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->mem.base = ZYDIS_REGISTER_EIP;
} else
{
operand->mem.base = ZYDIS_REGISTER_NONE;
}
displacementSize = 32;
}
break;
case 1:
displacementSize = 8;
break;
case 2:
displacementSize = 32;
break;
default:
ZYDIS_UNREACHABLE;
}
if ((modrm_rm & 0x07) == 4)
{
if (!info->details.sib.isDecoded)
{
uint8_t sibByte;
ZYDIS_CHECK(ZydisInputNext(decoder, info, &sibByte));
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZydisDecodeSIB(sibByte, info);
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
uint8_t sib_index = (info->details.internal.X << 3) | info->details.sib.index;
uint8_t sib_base = (info->details.internal.B << 3) | info->details.sib.base;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->mem.base = ZYDIS_REGISTER_EAX + sib_base;
operand->mem.index = ZYDIS_REGISTER_EAX + sib_index;
operand->mem.scale = (1 << info->details.sib.scale) & ~1;
if (operand->mem.index == ZYDIS_REGISTER_ESP)
{
operand->mem.index = ZYDIS_REGISTER_NONE;
operand->mem.scale = 0;
}
if (operand->mem.base == ZYDIS_REGISTER_EBP)
{
if (info->details.modrm.mod == 0)
{
operand->mem.base = ZYDIS_REGISTER_NONE;
}
displacementSize = (info->details.modrm.mod == 1) ? 8 : 32;
}
} else
{
operand->mem.index = ZYDIS_REGISTER_NONE;
operand->mem.scale = 0;
}
break;
}
case 64:
{
operand->mem.base = ZYDIS_REGISTER_RAX + modrm_rm;
switch (info->details.modrm.mod)
{
case 0:
if (modrm_rm == 5)
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_IS_RELATIVE;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->mem.base = ZYDIS_REGISTER_RIP;
displacementSize = 32;
}
break;
case 1:
displacementSize = 8;
break;
case 2:
displacementSize = 32;
break;
default:
ZYDIS_UNREACHABLE;
}
if ((modrm_rm & 0x07) == 4)
{
if (!info->details.sib.isDecoded)
{
uint8_t sibByte;
ZYDIS_CHECK(ZydisInputNext(decoder, info, &sibByte));
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZydisDecodeSIB(sibByte, info);
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
uint8_t sib_index = (info->details.internal.X << 3) | info->details.sib.index;
uint8_t sib_base = (info->details.internal.B << 3) | info->details.sib.base;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->mem.base = ZYDIS_REGISTER_RAX + sib_base;
operand->mem.index = ZYDIS_REGISTER_RAX + sib_index;
operand->mem.scale = (1 << info->details.sib.scale) & ~1;
if (operand->mem.index == ZYDIS_REGISTER_RSP)
{
operand->mem.index = ZYDIS_REGISTER_NONE;
operand->mem.scale = 0;
}
if ((operand->mem.base == ZYDIS_REGISTER_RBP) ||
(operand->mem.base == ZYDIS_REGISTER_R13))
{
if (info->details.modrm.mod == 0)
{
operand->mem.base = ZYDIS_REGISTER_NONE;
}
displacementSize = (info->details.modrm.mod == 1) ? 8 : 32;
}
} else
{
operand->mem.index = ZYDIS_REGISTER_NONE;
operand->mem.scale = 0;
}
break;
}
default:
ZYDIS_UNREACHABLE;
}
if (displacementSize)
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(
ZydisDecodeOperandImmediate(decoder, info, operand, displacementSize, ZYDIS_TRUE));
decoder->imm8initialized = ZYDIS_FALSE;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->type = ZYDIS_OPERAND_TYPE_MEMORY;
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
operand->mem.disp.dataSize = displacementSize;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->mem.disp.value.sqword = operand->imm.value.sqword;
operand->mem.disp.dataOffset = operand->imm.dataOffset;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->imm.isSigned = ZYDIS_FALSE;
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
operand->imm.dataSize = 0;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->imm.value.sqword = 0;
operand->imm.dataOffset = 0;
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
/**
* @brief Decodes an instruction-operand.
*
* @param decoder A pointer to the @c ZydisInstructionDecoder decoder instance.
* @param info A pointer to the @c ZydisInstructionInfo struct.
* @param operand A pointer to the @c ZydisOperandInfo struct.
* @param type The sementic operand-type.
* @param encoding The operand encoding.
*
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
* @return A zydis status code.
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
*/
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisDecodeOperand(ZydisInstructionDecoder* decoder, ZydisInstructionInfo* info,
ZydisOperandInfo* operand, ZydisSemanticOperandType type, ZydisOperandEncoding encoding)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
ZYDIS_ASSERT(decoder);
ZYDIS_ASSERT(info);
ZYDIS_ASSERT(operand);
// Fixed registers
switch (type)
{
case ZYDIS_SEM_OPERAND_TYPE_AL:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->visibility = ZYDIS_OPERAND_VISIBILITY_IMPLICIT;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->size = 8;
operand->type = ZYDIS_OPERAND_TYPE_REGISTER;
operand->reg = ZYDIS_REGISTER_AL;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_CL:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->visibility = ZYDIS_OPERAND_VISIBILITY_IMPLICIT;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->size = 8;
operand->type = ZYDIS_OPERAND_TYPE_REGISTER;
operand->reg = ZYDIS_REGISTER_CL;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_AX:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->visibility = ZYDIS_OPERAND_VISIBILITY_IMPLICIT;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->size = 16;
operand->type = ZYDIS_OPERAND_TYPE_REGISTER;
operand->reg = ZYDIS_REGISTER_AX;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_DX:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->visibility = ZYDIS_OPERAND_VISIBILITY_IMPLICIT;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->size = 16;
operand->type = ZYDIS_OPERAND_TYPE_REGISTER;
operand->reg = ZYDIS_REGISTER_DX;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Minor refactorings and bugfixes
2016-11-24 17:57:23 +08:00
case ZYDIS_SEM_OPERAND_TYPE_ECX:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->visibility = ZYDIS_OPERAND_VISIBILITY_IMPLICIT;
Minor refactorings and bugfixes
2016-11-24 17:57:23 +08:00
operand->size = 32;
operand->type = ZYDIS_OPERAND_TYPE_REGISTER;
operand->reg = ZYDIS_REGISTER_ECX;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_EAX:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->visibility = ZYDIS_OPERAND_VISIBILITY_IMPLICIT;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->size = 32;
operand->type = ZYDIS_OPERAND_TYPE_REGISTER;
operand->reg = ZYDIS_REGISTER_EAX;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_RAX:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->visibility = ZYDIS_OPERAND_VISIBILITY_IMPLICIT;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->size = 64;
operand->type = ZYDIS_OPERAND_TYPE_REGISTER;
operand->reg = ZYDIS_REGISTER_RAX;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_ES:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->visibility = ZYDIS_OPERAND_VISIBILITY_IMPLICIT;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->size = 16;
operand->type = ZYDIS_OPERAND_TYPE_REGISTER;
operand->reg = ZYDIS_REGISTER_ES;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_CS:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->visibility = ZYDIS_OPERAND_VISIBILITY_IMPLICIT;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->size = 16;
operand->type = ZYDIS_OPERAND_TYPE_REGISTER;
operand->reg = ZYDIS_REGISTER_CS;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_SS:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->visibility = ZYDIS_OPERAND_VISIBILITY_IMPLICIT;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->size = 16;
operand->type = ZYDIS_OPERAND_TYPE_REGISTER;
operand->reg = ZYDIS_REGISTER_SS;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_DS:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->visibility = ZYDIS_OPERAND_VISIBILITY_IMPLICIT;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->size = 16;
operand->type = ZYDIS_OPERAND_TYPE_REGISTER;
operand->reg = ZYDIS_REGISTER_DS;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_GS:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->visibility = ZYDIS_OPERAND_VISIBILITY_IMPLICIT;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->size = 16;
operand->type = ZYDIS_OPERAND_TYPE_REGISTER;
operand->reg = ZYDIS_REGISTER_GS;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_FS:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->visibility = ZYDIS_OPERAND_VISIBILITY_IMPLICIT;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->size = 16;
operand->type = ZYDIS_OPERAND_TYPE_REGISTER;
operand->reg = ZYDIS_REGISTER_FS;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_ST0:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->visibility = ZYDIS_OPERAND_VISIBILITY_IMPLICIT;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->size = 80;
operand->type = ZYDIS_OPERAND_TYPE_REGISTER;
operand->reg = ZYDIS_REGISTER_ST0;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
default:
break;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
// Register operands
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZydisRegisterClass registerClass = ZYDIS_REGCLASS_INVALID;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
switch (type)
{
case ZYDIS_SEM_OPERAND_TYPE_GPR8:
operand->size = 8;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
registerClass = ZYDIS_REGCLASS_GPR8;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_GPR16:
operand->size = 16;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
registerClass = ZYDIS_REGCLASS_GPR16;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_GPR32:
operand->size = 32;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
registerClass = ZYDIS_REGCLASS_GPR32;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_GPR64:
operand->size = 64;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
registerClass = ZYDIS_REGCLASS_GPR64;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
Added support for test-register operands (TR0..TR7) - New instructions: "mov TR, GPR32" and "mov GPR32, TR"
2016-11-14 10:39:17 +08:00
case ZYDIS_SEM_OPERAND_TYPE_TR:
Minor bugfixes and refactorings
2016-11-21 21:55:17 +08:00
operand->size = 32;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
registerClass = ZYDIS_REGCLASS_TEST;
Added support for test-register operands (TR0..TR7) - New instructions: "mov TR, GPR32" and "mov GPR32, TR"
2016-11-14 10:39:17 +08:00
break;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_CR:
operand->size = (decoder->disassemblerMode == ZYDIS_DISASSEMBLER_MODE_64BIT) ? 64 : 32;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
registerClass = ZYDIS_REGCLASS_CONTROL;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_DR:
operand->size = (decoder->disassemblerMode == ZYDIS_DISASSEMBLER_MODE_64BIT) ? 64 : 32;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
registerClass = ZYDIS_REGCLASS_DEBUG;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_FPR:
operand->size = 80;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
registerClass = ZYDIS_REGCLASS_X87;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_SREG:
operand->size = 16;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
registerClass = ZYDIS_REGCLASS_SEGMENT;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_VR64:
operand->size = 64;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
registerClass = ZYDIS_REGCLASS_MMX;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_VR128:
operand->size = 128;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
registerClass = ZYDIS_REGCLASS_XMM;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_VR256:
operand->size = 256;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
registerClass = ZYDIS_REGCLASS_YMM;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_VR512:
operand->size = 512;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
registerClass = ZYDIS_REGCLASS_ZMM;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_MSKR:
operand->size = 64;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
registerClass = ZYDIS_REGCLASS_MASK;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_BNDR:
operand->size = 128;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
registerClass = ZYDIS_REGCLASS_BOUND;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
default:
break;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
if (registerClass != ZYDIS_REGCLASS_INVALID)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
switch (encoding)
{
case ZYDIS_OPERAND_ENCODING_REG:
ZYDIS_ASSERT(info->details.modrm.isDecoded);
return ZydisDecodeOperandRegister(info, operand, registerClass,
Fixed decoding of instructions with EVEX high-16 register specifiers (R', X, V')
2016-12-06 04:06:29 +08:00
(info->details.internal.R2 << 4) |
(info->details.internal.R << 3) | info->details.modrm.reg);
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_OPERAND_ENCODING_RM:
case ZYDIS_OPERAND_ENCODING_RM_CD2:
case ZYDIS_OPERAND_ENCODING_RM_CD4:
case ZYDIS_OPERAND_ENCODING_RM_CD8:
case ZYDIS_OPERAND_ENCODING_RM_CD16:
case ZYDIS_OPERAND_ENCODING_RM_CD32:
case ZYDIS_OPERAND_ENCODING_RM_CD64:
ZYDIS_ASSERT(info->details.modrm.isDecoded);
return ZydisDecodeOperandModrmRm(decoder, info, operand, registerClass);
case ZYDIS_OPERAND_ENCODING_OPCODE:
{
uint8_t registerId = (info->opcode & 0x0F);
if (registerId > 7)
{
registerId = registerId - 8;
}
return ZydisDecodeOperandRegister(info, operand, registerClass,
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
(info->details.internal.B << 3) | registerId);
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
case ZYDIS_OPERAND_ENCODING_VVVV:
switch (info->encoding)
{
case ZYDIS_INSTRUCTION_ENCODING_VEX:
ZYDIS_ASSERT(info->details.vex.isDecoded);
return ZydisDecodeOperandRegister(info, operand, registerClass,
(0x0F & ~info->details.vex.vvvv));
case ZYDIS_INSTRUCTION_ENCODING_EVEX:
ZYDIS_ASSERT(info->details.evex.isDecoded);
return ZydisDecodeOperandRegister(info, operand, registerClass,
Fixed decoding of instructions with EVEX high-16 register specifiers (R', X, V')
2016-12-06 04:06:29 +08:00
(info->details.internal.V2 << 4) | (0x0F & ~info->details.evex.vvvv));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_INSTRUCTION_ENCODING_XOP:
ZYDIS_ASSERT(info->details.xop.isDecoded);
return ZydisDecodeOperandRegister(info, operand, registerClass,
(0x0F & ~info->details.xop.vvvv));
default:
ZYDIS_UNREACHABLE;
}
break;
Added support for instructions with 5 operands * optimized table structure to support instructions with 5 operands (vpermil2ps, vpermil2pd) * updated InstructionEditor
2016-09-13 11:26:55 +08:00
case ZYDIS_OPERAND_ENCODING_IMM8_HI:
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
ZYDIS_ASSERT((info->encoding == ZYDIS_INSTRUCTION_ENCODING_VEX) ||
(info->encoding == ZYDIS_INSTRUCTION_ENCODING_EVEX) ||
(info->encoding == ZYDIS_INSTRUCTION_ENCODING_XOP));
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(ZydisDecodeOperandImmediate(decoder, info, operand, 8, ZYDIS_FALSE));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
ZYDIS_CHECK(ZydisDecodeOperandRegister(info, operand, registerClass,
(operand->imm.value.ubyte & 0xF0) >> 4));
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
operand->imm.dataSize = 0;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->imm.dataOffset = 0;
operand->imm.value.uqword = 0;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
default:
ZYDIS_UNREACHABLE;
}
}
// Memory operands
uint8_t evexCD8Scale = 0;
switch (encoding)
{
case ZYDIS_OPERAND_ENCODING_RM_CD2:
evexCD8Scale = 2;
break;
case ZYDIS_OPERAND_ENCODING_RM_CD4:
evexCD8Scale = 4;
break;
case ZYDIS_OPERAND_ENCODING_RM_CD8:
evexCD8Scale = 8;
break;
case ZYDIS_OPERAND_ENCODING_RM_CD16:
evexCD8Scale = 16;
break;
case ZYDIS_OPERAND_ENCODING_RM_CD32:
evexCD8Scale = 32;
break;
case ZYDIS_OPERAND_ENCODING_RM_CD64:
evexCD8Scale = 64;
break;
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
default:
break;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
};
ZydisRegister vsibBaseRegister = ZYDIS_REGISTER_NONE;
switch (type)
{
case ZYDIS_SEM_OPERAND_TYPE_MEM:
operand->size = 0;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(ZydisDecodeOperandModrmRm(decoder, info, operand, ZYDIS_REGCLASS_INVALID));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_MEM8:
operand->size = 8;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(ZydisDecodeOperandModrmRm(decoder, info, operand, ZYDIS_REGCLASS_INVALID));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_MEM16:
operand->size = 16;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(ZydisDecodeOperandModrmRm(decoder, info, operand, ZYDIS_REGCLASS_INVALID));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_MEM32_BCST2:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->avx.broadcast = ZYDIS_AVX512_BCSTMODE_2;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_MEM32_BCST4:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
if (info->avx.broadcast == ZYDIS_AVX512_BCSTMODE_INVALID)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->avx.broadcast = ZYDIS_AVX512_BCSTMODE_4;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
case ZYDIS_SEM_OPERAND_TYPE_MEM32_BCST8:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
if (info->avx.broadcast == ZYDIS_AVX512_BCSTMODE_INVALID)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->avx.broadcast = ZYDIS_AVX512_BCSTMODE_8;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
case ZYDIS_SEM_OPERAND_TYPE_MEM32_BCST16:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
if (info->avx.broadcast == ZYDIS_AVX512_BCSTMODE_INVALID)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->avx.broadcast = ZYDIS_AVX512_BCSTMODE_16;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
case ZYDIS_SEM_OPERAND_TYPE_MEM32:
operand->size = 32;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(ZydisDecodeOperandModrmRm(decoder, info, operand, ZYDIS_REGCLASS_INVALID));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_MEM64_BCST2:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->avx.broadcast = ZYDIS_AVX512_BCSTMODE_2;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_MEM64_BCST4:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
if (info->avx.broadcast == ZYDIS_AVX512_BCSTMODE_INVALID)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->avx.broadcast = ZYDIS_AVX512_BCSTMODE_4;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
case ZYDIS_SEM_OPERAND_TYPE_MEM64_BCST8:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
if (info->avx.broadcast == ZYDIS_AVX512_BCSTMODE_INVALID)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->avx.broadcast = ZYDIS_AVX512_BCSTMODE_8;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
case ZYDIS_SEM_OPERAND_TYPE_MEM64_BCST16:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
if (info->avx.broadcast == ZYDIS_AVX512_BCSTMODE_INVALID)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->avx.broadcast = ZYDIS_AVX512_BCSTMODE_16;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
case ZYDIS_SEM_OPERAND_TYPE_MEM64:
operand->size = 64;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(ZydisDecodeOperandModrmRm(decoder, info, operand, ZYDIS_REGCLASS_INVALID));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_MEM80:
ZYDIS_ASSERT(evexCD8Scale == 0);
operand->size = 80;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZydisDecodeOperandModrmRm(decoder, info, operand, ZYDIS_REGCLASS_INVALID);
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_MEM112:
ZYDIS_ASSERT(evexCD8Scale == 0);
operand->size = 112;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZydisDecodeOperandModrmRm(decoder, info, operand, ZYDIS_REGCLASS_INVALID);
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_MEM128:
operand->size = 128;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(ZydisDecodeOperandModrmRm(decoder, info, operand, ZYDIS_REGCLASS_INVALID));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_MEM224:
ZYDIS_ASSERT(evexCD8Scale == 0);
operand->size = 224;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZydisDecodeOperandModrmRm(decoder, info, operand, ZYDIS_REGCLASS_INVALID);
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_MEM256:
operand->size = 256;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(ZydisDecodeOperandModrmRm(decoder, info, operand, ZYDIS_REGCLASS_INVALID));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_MEM512:
operand->size = 512;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(ZydisDecodeOperandModrmRm(decoder, info, operand, ZYDIS_REGCLASS_INVALID));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_M1616:
ZYDIS_ASSERT(evexCD8Scale == 0);
operand->size = 32;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZydisDecodeOperandModrmRm(decoder, info, operand, ZYDIS_REGCLASS_INVALID);
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_M1632:
ZYDIS_ASSERT(evexCD8Scale == 0);
operand->size = 48;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZydisDecodeOperandModrmRm(decoder, info, operand, ZYDIS_REGCLASS_INVALID);
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_M1664:
ZYDIS_ASSERT(evexCD8Scale == 0);
operand->size = 80;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZydisDecodeOperandModrmRm(decoder, info, operand, ZYDIS_REGCLASS_INVALID);
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_MEM32_VSIBX:
vsibBaseRegister = ZYDIS_REGISTER_XMM0;
operand->size = 32;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(ZydisDecodeOperandModrmRm(decoder, info, operand, ZYDIS_REGCLASS_INVALID));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_MEM32_VSIBY:
vsibBaseRegister = ZYDIS_REGISTER_YMM0;
operand->size = 32;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(ZydisDecodeOperandModrmRm(decoder, info, operand, ZYDIS_REGCLASS_INVALID));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_MEM32_VSIBZ:
vsibBaseRegister = ZYDIS_REGISTER_ZMM0;
operand->size = 32;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(ZydisDecodeOperandModrmRm(decoder, info, operand, ZYDIS_REGCLASS_INVALID));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_MEM64_VSIBX:
vsibBaseRegister = ZYDIS_REGISTER_XMM0;
operand->size = 64;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(ZydisDecodeOperandModrmRm(decoder, info, operand, ZYDIS_REGCLASS_INVALID));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_MEM64_VSIBY:
vsibBaseRegister = ZYDIS_REGISTER_YMM0;
operand->size = 64;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(ZydisDecodeOperandModrmRm(decoder, info, operand, ZYDIS_REGCLASS_INVALID));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_MEM64_VSIBZ:
vsibBaseRegister = ZYDIS_REGISTER_ZMM0;
operand->size = 64;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(ZydisDecodeOperandModrmRm(decoder, info, operand, ZYDIS_REGCLASS_INVALID));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
default:
break;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
if (evexCD8Scale)
{
ZYDIS_ASSERT(info->encoding == ZYDIS_INSTRUCTION_ENCODING_EVEX);
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
if (operand->mem.disp.dataSize == 8)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
operand->mem.disp.value.sdword *= evexCD8Scale;
}
}
if (vsibBaseRegister)
{
if (info->details.modrm.rm != 0x04)
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_INVALID_VSIB;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Bugfixes and Support for some more registers Zydis: - Fixed operand-size of some instructions in 64-bit mode - Fixed operand decoding of the "movq MM, GPR" instruction - Added table-registers (GDRT, LDTR, IDTR, TR) - Added test-registers (TR0..TR7) - Added BNDCFG and BNDSTATUS registers - Added MXCR register InstructionEditor: - The code-generator now eliminates duplicate instruction-definitions to optimize the size of the generated tables - Fixed conflict indication for some operand type/encoding combinations - Added conflict indication for X86Flags
2016-11-14 09:10:59 +08:00
switch (operand->mem.addressSize)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
case 16:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_INVALID_VSIB;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case 32:
Fixed decoding of instructions with EVEX high-16 register specifiers (R', X, V')
2016-12-06 04:06:29 +08:00
operand->mem.index = operand->mem.index - ZYDIS_REGISTER_EAX + vsibBaseRegister +
((info->details.evex.V2 == 1) ? 0 : 16);
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case 64:
Fixed decoding of instructions with EVEX high-16 register specifiers (R', X, V')
2016-12-06 04:06:29 +08:00
operand->mem.index = operand->mem.index - ZYDIS_REGISTER_RAX + vsibBaseRegister +
((info->details.evex.V2 == 1) ? 0 : 16);
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
default:
ZYDIS_UNREACHABLE;
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
// Immediate operands
switch (type)
{
case ZYDIS_SEM_OPERAND_TYPE_FIXED1:
Fixed decoding of instructions with EVEX high-16 register specifiers (R', X, V')
2016-12-06 04:06:29 +08:00
operand->visibility = ZYDIS_OPERAND_VISIBILITY_IMPLICIT;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->type = ZYDIS_OPERAND_TYPE_IMMEDIATE;
operand->size = 8;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->imm.isSigned = ZYDIS_TRUE;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->imm.value.ubyte = 1;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_REL8:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_IS_RELATIVE;
operand->imm.isRelative = ZYDIS_TRUE;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_IMM8:
operand->size = 8;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->imm.isSigned = ZYDIS_TRUE;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_IMM8U:
operand->size = 8;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->imm.isSigned = ZYDIS_FALSE;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_REL16:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_IS_RELATIVE;
operand->imm.isRelative = ZYDIS_TRUE;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_IMM16:
operand->size = 16;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->imm.isSigned = ZYDIS_TRUE;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_REL32:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_IS_RELATIVE;
operand->imm.isRelative = ZYDIS_TRUE;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_IMM32:
operand->size = 32;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->imm.isSigned = ZYDIS_TRUE;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_SEM_OPERAND_TYPE_REL64:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_IS_RELATIVE;
operand->imm.isRelative = ZYDIS_TRUE;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_IMM64:
operand->size = 64;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->imm.isSigned = ZYDIS_TRUE;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
default:
break;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
switch (type)
{
case ZYDIS_SEM_OPERAND_TYPE_REL8:
case ZYDIS_SEM_OPERAND_TYPE_IMM8:
case ZYDIS_SEM_OPERAND_TYPE_IMM8U:
case ZYDIS_SEM_OPERAND_TYPE_REL16:
case ZYDIS_SEM_OPERAND_TYPE_IMM16:
case ZYDIS_SEM_OPERAND_TYPE_REL32:
case ZYDIS_SEM_OPERAND_TYPE_IMM32:
case ZYDIS_SEM_OPERAND_TYPE_REL64:
case ZYDIS_SEM_OPERAND_TYPE_IMM64:
switch (encoding)
{
Added support for instructions with 5 operands * optimized table structure to support instructions with 5 operands (vpermil2ps, vpermil2pd) * updated InstructionEditor
2016-09-13 11:26:55 +08:00
case ZYDIS_OPERAND_ENCODING_IMM8_LO:
ZYDIS_CHECK(
ZydisDecodeOperandImmediate(decoder, info, operand, 8, operand->imm.isSigned));
operand->imm.value.ubyte &= 0x0F;
break;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_OPERAND_ENCODING_IMM8:
return ZydisDecodeOperandImmediate(decoder, info, operand, 8, operand->imm.isSigned);
case ZYDIS_OPERAND_ENCODING_IMM16:
return ZydisDecodeOperandImmediate(decoder, info, operand, 16, operand->imm.isSigned);
case ZYDIS_OPERAND_ENCODING_IMM32:
return ZydisDecodeOperandImmediate(decoder, info, operand, 32, operand->imm.isSigned);
case ZYDIS_OPERAND_ENCODING_IMM64:
return ZydisDecodeOperandImmediate(decoder, info, operand, 64, operand->imm.isSigned);
default:
ZYDIS_UNREACHABLE;
}
break;
case ZYDIS_SEM_OPERAND_TYPE_PTR1616:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(ZydisDecodeOperandImmediate(decoder, info, operand, 16, ZYDIS_FALSE));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->ptr.offset = operand->imm.value.uword;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(ZydisDecodeOperandImmediate(decoder, info, operand, 16, ZYDIS_FALSE));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->ptr.segment = operand->imm.value.uword;
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
operand->imm.dataSize = 0;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->imm.dataOffset = 0;
operand->imm.value.uqword = 0;
operand->type = ZYDIS_OPERAND_TYPE_POINTER;
operand->size = 32;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_PTR1632:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(ZydisDecodeOperandImmediate(decoder, info, operand, 32, ZYDIS_FALSE));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->ptr.offset = operand->imm.value.udword;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(ZydisDecodeOperandImmediate(decoder, info, operand, 16, ZYDIS_FALSE));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->ptr.segment = operand->imm.value.uword;
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
operand->imm.dataSize = 0;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->imm.dataOffset = 0;
operand->imm.value.uqword = 0;
operand->type = ZYDIS_OPERAND_TYPE_POINTER;
operand->size = 48;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_PTR1664:
// TODO: ?
assert(0);
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
default:
break;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
// Moffs
switch (type)
{
case ZYDIS_SEM_OPERAND_TYPE_MOFFS16:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(ZydisDecodeOperandImmediate(decoder, info, operand, 16, ZYDIS_FALSE));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->type = ZYDIS_OPERAND_TYPE_MEMORY;
operand->size = 16;
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
operand->mem.disp.dataSize = 16;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->mem.disp.dataOffset = operand->imm.dataOffset;
operand->mem.disp.value.sword = operand->imm.value.sword;
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
operand->imm.dataSize = 0;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->imm.dataOffset = 0;
operand->imm.value.uqword = 0;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_MOFFS32:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(ZydisDecodeOperandImmediate(decoder, info, operand, 32, ZYDIS_FALSE));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->type = ZYDIS_OPERAND_TYPE_MEMORY;
operand->size = 32;
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
operand->mem.disp.dataSize = 32;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->mem.disp.dataOffset = operand->imm.dataOffset;
operand->mem.disp.value.sdword = operand->imm.value.sdword;
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
operand->imm.dataSize = 0;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->imm.dataOffset = 0;
operand->imm.value.uqword = 0;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
case ZYDIS_SEM_OPERAND_TYPE_MOFFS64:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(ZydisDecodeOperandImmediate(decoder, info, operand, 64, ZYDIS_FALSE));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->type = ZYDIS_OPERAND_TYPE_MEMORY;
operand->size = 64;
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
operand->mem.disp.dataSize = 64;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->mem.disp.dataOffset = operand->imm.dataOffset;
operand->mem.disp.value.sqword = operand->imm.value.sqword;
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
operand->imm.dataSize = 0;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
operand->imm.dataOffset = 0;
operand->imm.value.uqword = 0;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
default:
break;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
// SrcIdx and DstIdx operands
uint8_t srcidx = 0;
uint8_t dstidx = 0;
switch (type)
{
case ZYDIS_SEM_OPERAND_TYPE_SRCIDX8:
srcidx = 8;
break;
case ZYDIS_SEM_OPERAND_TYPE_SRCIDX16:
srcidx = 16;
break;
case ZYDIS_SEM_OPERAND_TYPE_SRCIDX32:
srcidx = 32;
break;
case ZYDIS_SEM_OPERAND_TYPE_SRCIDX64:
srcidx = 64;
break;
case ZYDIS_SEM_OPERAND_TYPE_DSTIDX8:
dstidx = 8;
break;
case ZYDIS_SEM_OPERAND_TYPE_DSTIDX16:
dstidx = 16;
break;
case ZYDIS_SEM_OPERAND_TYPE_DSTIDX32:
dstidx = 32;
break;
case ZYDIS_SEM_OPERAND_TYPE_DSTIDX64:
dstidx = 64;
break;
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
default:
break;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
if (srcidx || dstidx)
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_ACCEPTS_ADDRESSSIZE;
if (info->details.prefixes.has67)
{
info->attributes |= ZYDIS_ATTRIB_HAS_ADDRESSSIZE;
}
Bugfixes and Support for some more registers Zydis: - Fixed operand-size of some instructions in 64-bit mode - Fixed operand decoding of the "movq MM, GPR" instruction - Added table-registers (GDRT, LDTR, IDTR, TR) - Added test-registers (TR0..TR7) - Added BNDCFG and BNDSTATUS registers - Added MXCR register InstructionEditor: - The code-generator now eliminates duplicate instruction-definitions to optimize the size of the generated tables - Fixed conflict indication for some operand type/encoding combinations - Added conflict indication for X86Flags
2016-11-14 09:10:59 +08:00
switch (decoder->disassemblerMode)
{
case ZYDIS_DISASSEMBLER_MODE_16BIT:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->mem.addressSize = (info->attributes & ZYDIS_ATTRIB_HAS_ADDRESSSIZE) ? 32 : 16;
Bugfixes and Support for some more registers Zydis: - Fixed operand-size of some instructions in 64-bit mode - Fixed operand decoding of the "movq MM, GPR" instruction - Added table-registers (GDRT, LDTR, IDTR, TR) - Added test-registers (TR0..TR7) - Added BNDCFG and BNDSTATUS registers - Added MXCR register InstructionEditor: - The code-generator now eliminates duplicate instruction-definitions to optimize the size of the generated tables - Fixed conflict indication for some operand type/encoding combinations - Added conflict indication for X86Flags
2016-11-14 09:10:59 +08:00
break;
case ZYDIS_DISASSEMBLER_MODE_32BIT:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->mem.addressSize = (info->attributes & ZYDIS_ATTRIB_HAS_ADDRESSSIZE) ? 16 : 32;
Bugfixes and Support for some more registers Zydis: - Fixed operand-size of some instructions in 64-bit mode - Fixed operand decoding of the "movq MM, GPR" instruction - Added table-registers (GDRT, LDTR, IDTR, TR) - Added test-registers (TR0..TR7) - Added BNDCFG and BNDSTATUS registers - Added MXCR register InstructionEditor: - The code-generator now eliminates duplicate instruction-definitions to optimize the size of the generated tables - Fixed conflict indication for some operand type/encoding combinations - Added conflict indication for X86Flags
2016-11-14 09:10:59 +08:00
break;
case ZYDIS_DISASSEMBLER_MODE_64BIT:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->mem.addressSize = (info->attributes & ZYDIS_ATTRIB_HAS_ADDRESSSIZE) ? 32 : 64;
Bugfixes and Support for some more registers Zydis: - Fixed operand-size of some instructions in 64-bit mode - Fixed operand decoding of the "movq MM, GPR" instruction - Added table-registers (GDRT, LDTR, IDTR, TR) - Added test-registers (TR0..TR7) - Added BNDCFG and BNDSTATUS registers - Added MXCR register InstructionEditor: - The code-generator now eliminates duplicate instruction-definitions to optimize the size of the generated tables - Fixed conflict indication for some operand type/encoding combinations - Added conflict indication for X86Flags
2016-11-14 09:10:59 +08:00
break;
default:
ZYDIS_UNREACHABLE;
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
registerClass = ZYDIS_REGCLASS_INVALID;
Bugfixes and Support for some more registers Zydis: - Fixed operand-size of some instructions in 64-bit mode - Fixed operand decoding of the "movq MM, GPR" instruction - Added table-registers (GDRT, LDTR, IDTR, TR) - Added test-registers (TR0..TR7) - Added BNDCFG and BNDSTATUS registers - Added MXCR register InstructionEditor: - The code-generator now eliminates duplicate instruction-definitions to optimize the size of the generated tables - Fixed conflict indication for some operand type/encoding combinations - Added conflict indication for X86Flags
2016-11-14 09:10:59 +08:00
switch (operand->mem.addressSize)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
case 16:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
registerClass = ZYDIS_REGCLASS_GPR16;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case 32:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
registerClass = ZYDIS_REGCLASS_GPR32;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case 64:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
registerClass = ZYDIS_REGCLASS_GPR64;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
default:
ZYDIS_UNREACHABLE;
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
operand->visibility = ZYDIS_OPERAND_VISIBILITY_IMPLICIT;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
if (srcidx)
{
ZYDIS_CHECK(ZydisDecodeOperandRegister(info, operand, registerClass, 6));
operand->type = ZYDIS_OPERAND_TYPE_MEMORY;
operand->size = srcidx;
operand->mem.segment = ZYDIS_REGISTER_DS;
operand->mem.base = operand->reg;
operand->reg = ZYDIS_REGISTER_NONE;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
if (dstidx)
{
ZYDIS_CHECK(ZydisDecodeOperandRegister(info, operand, registerClass, 7));
operand->type = ZYDIS_OPERAND_TYPE_MEMORY;
operand->size = dstidx;
operand->mem.base = operand->reg;
operand->mem.segment = ZYDIS_REGISTER_ES;
operand->reg = ZYDIS_REGISTER_NONE;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
/**
* @brief Decodes all instruction-operands.
*
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
* @param decoder A pointer to the @c ZydisInstructionDecoder decoder instance.
* @param info A pointer to the @c ZydisInstructionInfo struct.
* @param operands A pointer to the first operand-definition of the instruction.
* @param operandCount The number of operands.
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
*
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
* @return A zydis status code.
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
*/
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisDecodeOperands(ZydisInstructionDecoder* decoder,
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
ZydisInstructionInfo* info, const ZydisOperandDefinition* operands, uint8_t operandCount)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
ZYDIS_ASSERT(decoder);
ZYDIS_ASSERT(info);
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
ZYDIS_ASSERT(operands);
Minor refactorings and bugfixes
2016-11-24 17:57:23 +08:00
ZYDIS_ASSERT((operandCount > 0) && (operandCount < 6));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
info->operandCount = operandCount;
Complete rewrite of the instruction-formatter - Added hooking functionality to support custom instruction-formatting - Added FormatterHooks demo that demonstrates the hooking functionality InstructionEditor: - Fixed issues with still non-deterministic output on code-generation
2016-11-26 20:08:37 +08:00
for (uint8_t i = 0; i < operandCount; ++i)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
if (operands[i].type == ZYDIS_SEM_OPERAND_TYPE_UNUSED)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
break;
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->operands[i].id = i;
ZYDIS_CHECK(ZydisDecodeOperand(decoder, info, &info->operands[i], operands[i].type,
operands[i].encoding));
info->operands[i].encoding = operands[i].encoding;
info->operands[i].action = operands[i].action;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
// Adjust segment register for memory operands
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
if (info->operands[i].type == ZYDIS_OPERAND_TYPE_MEMORY)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_ACCEPTS_SEGMENT;
switch (decoder->lastSegmentPrefix)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
case 0x2E:
info->attributes |= ZYDIS_ATTRIB_HAS_SEGMENT_CS;
info->operands[i].mem.segment = ZYDIS_REGISTER_CS;
decoder->lastSegmentPrefix = 0;
break;
case 0x36:
info->attributes |= ZYDIS_ATTRIB_HAS_SEGMENT_SS;
info->operands[i].mem.segment = ZYDIS_REGISTER_SS;
decoder->lastSegmentPrefix = 0;
break;
case 0x3E:
info->attributes |= ZYDIS_ATTRIB_HAS_SEGMENT_DS;
info->operands[i].mem.segment = ZYDIS_REGISTER_DS;
decoder->lastSegmentPrefix = 0;
break;
case 0x26:
info->attributes |= ZYDIS_ATTRIB_HAS_SEGMENT_ES;
info->operands[i].mem.segment = ZYDIS_REGISTER_ES;
decoder->lastSegmentPrefix = 0;
break;
case 0x64:
info->attributes |= ZYDIS_ATTRIB_HAS_SEGMENT_FS;
info->operands[i].mem.segment = ZYDIS_REGISTER_FS;
decoder->lastSegmentPrefix = 0;
break;
case 0x65:
info->attributes |= ZYDIS_ATTRIB_HAS_SEGMENT_GS;
info->operands[i].mem.segment = ZYDIS_REGISTER_GS;
decoder->lastSegmentPrefix = 0;
break;
default:
if ((info->operands[i].mem.base == ZYDIS_REGISTER_RSP) ||
(info->operands[i].mem.base == ZYDIS_REGISTER_RBP) ||
(info->operands[i].mem.base == ZYDIS_REGISTER_ESP) ||
(info->operands[i].mem.base == ZYDIS_REGISTER_EBP) ||
(info->operands[i].mem.base == ZYDIS_REGISTER_SP) ||
(info->operands[i].mem.base == ZYDIS_REGISTER_BP))
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->operands[i].mem.segment = ZYDIS_REGISTER_SS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
} else
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->operands[i].mem.segment = ZYDIS_REGISTER_DS;
};
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
}
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
/* ---------------------------------------------------------------------------------------------- */
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
/**
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
* @brief Applies additional information from the instruction-definition to the
* @c ZydisInstructionInfo struct.
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
*
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
* @param decoder A pointer to the @c ZydisInstructionDecoder decoder instance.
* @param info A pointer to the @c ZydisInstructionInfo struct.
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
*/
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static void ZydisApplyInstructionDefinition(ZydisInstructionDecoder* decoder,
ZydisInstructionInfo* info)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
ZYDIS_ASSERT(info);
Minor refactorings and bugfixes
2016-11-24 17:57:23 +08:00
ZYDIS_ASSERT(info->details.internal.definition);
const ZydisInstructionDefinition* definition =
(ZydisInstructionDefinition*)info->details.internal.definition;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
// Set prefix-flags
if (definition->acceptsLock)
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_ACCEPTS_LOCK;
if (info->details.prefixes.hasF0)
{
info->attributes |= ZYDIS_ATTRIB_HAS_LOCK;
}
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
}
if (definition->acceptsREP)
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_ACCEPTS_REP;
}
if (definition->acceptsREPEREPNE)
{
info->attributes |= ZYDIS_ATTRIB_ACCEPTS_REPE | ZYDIS_ATTRIB_ACCEPTS_REPNE;
}
if (definition->acceptsBOUND)
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_ACCEPTS_BOUND;
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
}
Minor refactorings and bugfixes
2016-11-24 17:57:23 +08:00
if (definition->acceptsXACQUIRE)
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_ACCEPTS_XACQUIRE;
Minor refactorings and bugfixes
2016-11-24 17:57:23 +08:00
}
if (definition->acceptsXRELEASE)
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_ACCEPTS_XRELEASE;
Minor refactorings and bugfixes
2016-11-24 17:57:23 +08:00
}
if (definition->acceptsHLEWithoutLock)
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_ACCEPTS_HLE_WITHOUT_LOCK;
}
switch (decoder->hasUnusedPrefixF2F3)
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
case 0xF2:
if (info->attributes & ZYDIS_ATTRIB_ACCEPTS_REPNE)
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_HAS_REPNE;
break;
}
if (info->attributes & ZYDIS_ATTRIB_ACCEPTS_XACQUIRE)
{
if ((info->attributes & ZYDIS_ATTRIB_HAS_LOCK) || (definition->acceptsHLEWithoutLock))
{
info->attributes |= ZYDIS_ATTRIB_HAS_XACQUIRE;
break;
}
}
if (info->attributes & ZYDIS_ATTRIB_ACCEPTS_BOUND)
{
info->attributes |= ZYDIS_ATTRIB_HAS_BOUND;
break;
}
break;
case 0xF3:
if (info->attributes & ZYDIS_ATTRIB_ACCEPTS_REP)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_HAS_REP;
break;
}
if (info->attributes & ZYDIS_ATTRIB_ACCEPTS_REPE)
{
info->attributes |= ZYDIS_ATTRIB_HAS_REPE;
break;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
if (info->attributes & ZYDIS_ATTRIB_ACCEPTS_XRELEASE)
{
if ((info->attributes & ZYDIS_ATTRIB_HAS_LOCK) || (definition->acceptsHLEWithoutLock))
{
info->attributes |= ZYDIS_ATTRIB_HAS_XRELEASE;
break;
}
}
break;
default:
break;
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
if (definition->acceptsBranchHints)
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_ACCEPTS_BRANCH_HINTS;
switch (decoder->lastSegmentPrefix)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
case 0x2E:
info->attributes |= ZYDIS_ATTRIB_HAS_BRANCH_NOT_TAKEN;
break;
case 0x3E:
info->attributes |= ZYDIS_ATTRIB_HAS_BRANCH_TAKEN;
break;
default:
break;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
}
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
Fixed decoding of instructions with EVEX high-16 register specifiers (R', X, V')
2016-12-06 04:06:29 +08:00
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
/* ---------------------------------------------------------------------------------------------- */
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisNodeHandlerOpcode(ZydisInstructionDecoder* decoder,
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
ZydisInstructionInfo* info, uint16_t* index)
{
ZYDIS_ASSERT(decoder);
ZYDIS_ASSERT(info);
ZYDIS_ASSERT(index);
// Handle possible encoding-prefix and opcode-map changes
switch (info->encoding)
{
case ZYDIS_INSTRUCTION_ENCODING_DEFAULT:
ZYDIS_CHECK(ZydisInputNext(decoder, info, &info->opcode));
switch (info->opcodeMap)
{
case ZYDIS_OPCODE_MAP_DEFAULT:
switch (info->opcode)
{
case 0x0F:
info->opcodeMap = ZYDIS_OPCODE_MAP_0F;
break;
case 0xC4:
case 0xC5:
case 0x62:
{
uint8_t nextInput;
ZYDIS_CHECK(ZydisInputPeek(decoder, info, &nextInput));
Removed Input-struct. The input buffer is now directly passed to the ZydisDecodeInstruction function.
2017-01-11 18:20:24 +08:00
if ((nextInput & 0xF0) >= 0xC0)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
if (info->attributes & ZYDIS_ATTRIB_HAS_REX)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_ILLEGAL_REX;
}
if ((decoder->hasUnusedPrefixF2F3) || (decoder->hasUnusedPrefix66))
{
return ZYDIS_STATUS_ILLEGAL_LEGACY_PFX;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
uint8_t prefixBytes[3];
switch (info->opcode)
{
case 0xC4:
// Read additional 3-byte vex-prefix data
ZYDIS_ASSERT(!info->details.vex.isDecoded);
ZYDIS_CHECK(ZydisInputNext(decoder, info, &prefixBytes[0]));
ZYDIS_CHECK(ZydisInputNext(decoder, info, &prefixBytes[1]));
break;
case 0xC5:
// Read additional 2-byte vex-prefix data
ZYDIS_ASSERT(!info->details.vex.isDecoded);
ZYDIS_CHECK(ZydisInputNext(decoder, info, &prefixBytes[0]));
break;
case 0x62:
// Read additional evex-prefix data
ZYDIS_ASSERT(!info->details.evex.isDecoded);
ZYDIS_CHECK(ZydisInputNext(decoder, info, &prefixBytes[0]));
ZYDIS_CHECK(ZydisInputNext(decoder, info, &prefixBytes[1]));
ZYDIS_CHECK(ZydisInputNext(decoder, info, &prefixBytes[2]));
break;
default:
ZYDIS_UNREACHABLE;
}
switch (info->opcode)
{
case 0xC4:
case 0xC5:
// Decode vex-prefix
info->encoding = ZYDIS_INSTRUCTION_ENCODING_VEX;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(
ZydisDecodeVEX(info->opcode, prefixBytes[0], prefixBytes[1], info));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
info->opcodeMap = info->details.vex.m_mmmm;
break;
case 0x62:
// Decode evex-prefix
info->encoding = ZYDIS_INSTRUCTION_ENCODING_EVEX;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(
ZydisDecodeEVEX(prefixBytes[0], prefixBytes[1], prefixBytes[2], info));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
info->opcodeMap = info->details.evex.mm;
break;
default:
ZYDIS_UNREACHABLE;
}
}
break;
}
case 0x8F:
{
uint8_t nextInput;
ZYDIS_CHECK(ZydisInputPeek(decoder, info, &nextInput));
if (((nextInput >> 0) & 0x1F) >= 8)
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
if (info->attributes & ZYDIS_ATTRIB_HAS_REX)
{
return ZYDIS_STATUS_ILLEGAL_REX;
}
if ((decoder->hasUnusedPrefixF2F3) || (decoder->hasUnusedPrefix66))
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_ILLEGAL_LEGACY_PFX;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
uint8_t prefixBytes[2];
// Read additional xop-prefix data
ZYDIS_ASSERT(!info->details.xop.isDecoded);
ZYDIS_CHECK(ZydisInputNext(decoder, info, &prefixBytes[0]));
ZYDIS_CHECK(ZydisInputNext(decoder, info, &prefixBytes[1]));
// Decode xop-prefix
info->encoding = ZYDIS_INSTRUCTION_ENCODING_XOP;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZYDIS_CHECK(ZydisDecodeXOP(prefixBytes[0], prefixBytes[1], info));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
info->opcodeMap = ZYDIS_OPCODE_MAP_XOP8 + info->details.xop.m_mmmm - 0x08;
}
break;
}
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
default:
break;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
break;
case ZYDIS_OPCODE_MAP_0F:
switch (info->opcode)
{
case 0x0F:
info->encoding = ZYDIS_INSTRUCTION_ENCODING_3DNOW;
info->opcodeMap = ZYDIS_OPCODE_MAP_DEFAULT;
break;
case 0x38:
info->opcodeMap = ZYDIS_OPCODE_MAP_0F38;
break;
case 0x3A:
info->opcodeMap = ZYDIS_OPCODE_MAP_0F3A;
break;
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
default:
break;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
break;
case ZYDIS_OPCODE_MAP_0F38:
case ZYDIS_OPCODE_MAP_0F3A:
case ZYDIS_OPCODE_MAP_XOP8:
case ZYDIS_OPCODE_MAP_XOP9:
case ZYDIS_OPCODE_MAP_XOPA:
// Nothing to do here
break;
default:
ZYDIS_UNREACHABLE;
}
break;
case ZYDIS_INSTRUCTION_ENCODING_3DNOW:
// All 3dnow (0x0F 0x0F) instructions are using the same operand encoding. We just
// decode a random (pi2fw) instruction and extract the actual opcode later.
*index = 0x0C;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
default:
ZYDIS_CHECK(ZydisInputNext(decoder, info, &info->opcode));
break;
}
*index = info->opcode;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisNodeHandlerXop(ZydisInstructionInfo* info, uint16_t* index)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
ZYDIS_ASSERT(info);
ZYDIS_ASSERT(index);
switch (info->encoding)
{
case ZYDIS_INSTRUCTION_ENCODING_DEFAULT:
*index = 0;
break;
case ZYDIS_INSTRUCTION_ENCODING_XOP:
ZYDIS_ASSERT(info->details.xop.isDecoded);
*index = (info->details.xop.m_mmmm - 0x08) + 1;
break;
default:
ZYDIS_UNREACHABLE;
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisNodeHandlerMode(ZydisInstructionDecoder* decoder,
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
uint16_t* index)
{
ZYDIS_ASSERT(decoder);
ZYDIS_ASSERT(index);
*index = (decoder->disassemblerMode == ZYDIS_DISASSEMBLER_MODE_64BIT) ? 0 : 1;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisNodeHandlerVex(ZydisInstructionInfo* info, uint16_t* index)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
ZYDIS_ASSERT(info);
ZYDIS_ASSERT(index);
switch (info->encoding)
{
case ZYDIS_INSTRUCTION_ENCODING_DEFAULT:
*index = 0;
break;
case ZYDIS_INSTRUCTION_ENCODING_VEX:
ZYDIS_ASSERT(info->details.vex.isDecoded);
*index = info->details.vex.m_mmmm + (info->details.vex.pp << 2);
break;
case ZYDIS_INSTRUCTION_ENCODING_EVEX:
ZYDIS_ASSERT(info->details.evex.isDecoded);
*index = info->details.evex.mm + (info->details.evex.pp << 2);
break;
default:
ZYDIS_UNREACHABLE;
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisNodeHandlerMandatoryPrefix(ZydisInstructionDecoder* decoder,
Fixed decoding of instructions with EVEX high-16 register specifiers (R', X, V')
2016-12-06 04:06:29 +08:00
uint16_t* index)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
ZYDIS_ASSERT(index);
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
// 0x66 has precedence over 0xF2 and 0xF3
if (decoder->hasUnusedPrefix66)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
decoder->hasUnusedPrefix66 = 0;
*index = 1;
} else
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
switch (decoder->hasUnusedPrefixF2F3)
{
case 0xF3:
decoder->hasUnusedPrefixF2F3 = 0;
*index = 2;
break;
case 0xF2:
decoder->hasUnusedPrefixF2F3 = 0;
*index = 3;
break;
default:
break;
}
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisNodeHandlerModrmMod(ZydisInstructionDecoder* decoder,
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
ZydisInstructionInfo* info, uint16_t* index)
{
ZYDIS_ASSERT(decoder);
ZYDIS_ASSERT(info);
ZYDIS_ASSERT(index);
if (!info->details.modrm.isDecoded)
{
uint8_t modrmByte;
ZYDIS_CHECK(ZydisInputNext(decoder, info, &modrmByte));
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZydisDecodeModRM(modrmByte, info);
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
*index = (info->details.modrm.mod == 0x3) ? 1 : 0;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisNodeHandlerModrmReg(ZydisInstructionDecoder* decoder,
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
ZydisInstructionInfo* info, uint16_t* index)
{
ZYDIS_ASSERT(decoder);
ZYDIS_ASSERT(info);
ZYDIS_ASSERT(index);
if (!info->details.modrm.isDecoded)
{
uint8_t modrmByte;
ZYDIS_CHECK(ZydisInputNext(decoder, info, &modrmByte));
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZydisDecodeModRM(modrmByte, info);
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
*index = info->details.modrm.reg;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisNodeHandlerModrmRm(ZydisInstructionDecoder* decoder,
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
ZydisInstructionInfo* info, uint16_t* index)
{
ZYDIS_ASSERT(decoder);
ZYDIS_ASSERT(info);
ZYDIS_ASSERT(index);
if (!info->details.modrm.isDecoded)
{
uint8_t modrmByte;
ZYDIS_CHECK(ZydisInputNext(decoder, info, &modrmByte));
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZydisDecodeModRM(modrmByte, info);
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
*index = info->details.modrm.rm;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisNodeHandlerOperandSize(ZydisInstructionDecoder* decoder,
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
ZydisInstructionInfo* info, uint16_t* index)
{
ZYDIS_ASSERT(decoder);
ZYDIS_ASSERT(info);
ZYDIS_ASSERT(index);
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_ACCEPTS_OPERANDSIZE;
if (decoder->hasUnusedPrefix66)
{
info->attributes |= ZYDIS_ATTRIB_HAS_OPERANDSIZE;
decoder->hasUnusedPrefix66 = 0;
}
Bugfixes and Support for some more registers Zydis: - Fixed operand-size of some instructions in 64-bit mode - Fixed operand decoding of the "movq MM, GPR" instruction - Added table-registers (GDRT, LDTR, IDTR, TR) - Added test-registers (TR0..TR7) - Added BNDCFG and BNDSTATUS registers - Added MXCR register InstructionEditor: - The code-generator now eliminates duplicate instruction-definitions to optimize the size of the generated tables - Fixed conflict indication for some operand type/encoding combinations - Added conflict indication for X86Flags
2016-11-14 09:10:59 +08:00
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
switch (decoder->disassemblerMode)
{
case ZYDIS_DISASSEMBLER_MODE_16BIT:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
*index = (info->attributes & ZYDIS_ATTRIB_HAS_OPERANDSIZE) ? 1 : 0;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_DISASSEMBLER_MODE_32BIT:
case ZYDIS_DISASSEMBLER_MODE_64BIT:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
*index = (info->attributes & ZYDIS_ATTRIB_HAS_OPERANDSIZE) ? 0 : 1;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
default:
ZYDIS_UNREACHABLE;
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisNodeHandlerAddressSize(ZydisInstructionDecoder* decoder,
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
ZydisInstructionInfo* info, uint16_t* index)
{
ZYDIS_ASSERT(decoder);
ZYDIS_ASSERT(info);
ZYDIS_ASSERT(index);
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
info->attributes |= ZYDIS_ATTRIB_ACCEPTS_ADDRESSSIZE;
if (info->details.prefixes.has67)
{
info->attributes |= ZYDIS_ATTRIB_HAS_ADDRESSSIZE;
}
Bugfixes and Support for some more registers Zydis: - Fixed operand-size of some instructions in 64-bit mode - Fixed operand decoding of the "movq MM, GPR" instruction - Added table-registers (GDRT, LDTR, IDTR, TR) - Added test-registers (TR0..TR7) - Added BNDCFG and BNDSTATUS registers - Added MXCR register InstructionEditor: - The code-generator now eliminates duplicate instruction-definitions to optimize the size of the generated tables - Fixed conflict indication for some operand type/encoding combinations - Added conflict indication for X86Flags
2016-11-14 09:10:59 +08:00
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
switch (decoder->disassemblerMode)
{
case ZYDIS_DISASSEMBLER_MODE_16BIT:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
*index = (info->attributes & ZYDIS_ATTRIB_HAS_ADDRESSSIZE) ? 1 : 0;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_DISASSEMBLER_MODE_32BIT:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
*index = (info->attributes & ZYDIS_ATTRIB_HAS_ADDRESSSIZE) ? 0 : 1;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_DISASSEMBLER_MODE_64BIT:
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
*index = (info->attributes & ZYDIS_ATTRIB_HAS_ADDRESSSIZE) ? 1 : 2;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
default:
ZYDIS_UNREACHABLE;
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisNodeHandlerRexW(ZydisInstructionInfo* info, uint16_t* index)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
ZYDIS_ASSERT(info);
ZYDIS_ASSERT(index);
switch (info->encoding)
{
case ZYDIS_INSTRUCTION_ENCODING_DEFAULT:
// nothing to do here
break;
case ZYDIS_INSTRUCTION_ENCODING_VEX:
ZYDIS_ASSERT(info->details.vex.isDecoded);
break;
case ZYDIS_INSTRUCTION_ENCODING_EVEX:
ZYDIS_ASSERT(info->details.evex.isDecoded);
break;
case ZYDIS_INSTRUCTION_ENCODING_XOP:
ZYDIS_ASSERT(info->details.xop.isDecoded);
break;
default:
ZYDIS_UNREACHABLE;
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
*index = info->details.internal.W;
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisNodeHandlerVexL(ZydisInstructionInfo* info, uint16_t* index)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
ZYDIS_ASSERT(info);
ZYDIS_ASSERT(index);
switch (info->encoding)
{
case ZYDIS_INSTRUCTION_ENCODING_VEX:
ZYDIS_ASSERT(info->details.vex.isDecoded);
break;
case ZYDIS_INSTRUCTION_ENCODING_EVEX:
ZYDIS_ASSERT(info->details.evex.isDecoded);
break;
case ZYDIS_INSTRUCTION_ENCODING_XOP:
ZYDIS_ASSERT(info->details.xop.isDecoded);
break;
default:
ZYDIS_UNREACHABLE;
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
*index = info->details.internal.L;
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisNodeHandlerEvexL2(ZydisInstructionInfo* info, uint16_t* index)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
ZYDIS_ASSERT(info);
ZYDIS_ASSERT(index);
ZYDIS_ASSERT(info->encoding == ZYDIS_INSTRUCTION_ENCODING_EVEX);
ZYDIS_ASSERT(info->details.evex.isDecoded);
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
*index = info->details.evex.L2;
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisNodeHandlerEvexB(ZydisInstructionInfo* info, uint16_t* index)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
ZYDIS_ASSERT(info);
ZYDIS_ASSERT(index);
ZYDIS_ASSERT(info->encoding == ZYDIS_INSTRUCTION_ENCODING_EVEX);
ZYDIS_ASSERT(info->details.evex.isDecoded);
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
*index = info->details.evex.b;
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
/**
* @brief Uses the instruction-table to decode the bytestream until an instruction-definition
* is found.
*
* @param decoder A pointer to the instruction decoder instance.
* @param info A pointer to the instruction-info struct.
*
* @return A zydis decoder status code.
*/
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
static ZydisStatus ZydisDecodeOpcode(ZydisInstructionDecoder* decoder,
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
ZydisInstructionInfo* info)
{
ZYDIS_ASSERT(decoder);
ZYDIS_ASSERT(info);
// Iterate through the instruction table
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
const ZydisInstructionTableNode* node = ZydisInstructionTableGetRootNode();
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
ZydisInstructionTableNodeType nodeType;
do
{
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
nodeType = node->type;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
uint16_t index = 0;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZydisStatus status = 0;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
switch (nodeType)
{
case ZYDIS_NODETYPE_INVALID:
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_DECODING_ERROR;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
Added support for instructions with 5 operands * optimized table structure to support instructions with 5 operands (vpermil2ps, vpermil2pd) * updated InstructionEditor
2016-09-13 11:26:55 +08:00
case ZYDIS_NODETYPE_DEFINITION_0OP:
case ZYDIS_NODETYPE_DEFINITION_1OP:
case ZYDIS_NODETYPE_DEFINITION_2OP:
case ZYDIS_NODETYPE_DEFINITION_3OP:
case ZYDIS_NODETYPE_DEFINITION_4OP:
case ZYDIS_NODETYPE_DEFINITION_5OP:
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
const ZydisInstructionDefinition* definition = NULL;
const ZydisOperandDefinition* operands = NULL;
uint8_t operandCount;
ZydisInstructionTableGetDefinition(node, &definition, &operands, &operandCount);
ZYDIS_ASSERT(definition);
Minor refactorings and bugfixes
2016-11-24 17:57:23 +08:00
ZYDIS_ASSERT(operands || (operandCount == 0));
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
info->mnemonic = (ZydisInstructionMnemonic)definition->mnemonic;
Minor refactorings and bugfixes
2016-11-24 17:57:23 +08:00
info->details.internal.definition = (void*)definition;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZydisApplyInstructionDefinition(decoder, info);
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
if (info->encoding == ZYDIS_INSTRUCTION_ENCODING_3DNOW)
{
// Save input-buffer state and decode dummy operands
Added encoder stub, made decoder input const
2017-01-12 22:12:09 +08:00
const uint8_t* buffer = decoder->input.buffer;
Removed Input-struct. The input buffer is now directly passed to the ZydisDecodeInstruction function.
2017-01-11 18:20:24 +08:00
size_t bufferLen = decoder->input.bufferLen;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
uint8_t length = info->length;
Minor refactorings and bugfixes
2016-11-24 17:57:23 +08:00
ZYDIS_ASSERT(operandCount == 2);
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
ZYDIS_CHECK(ZydisDecodeOperands(decoder, info, operands, operandCount));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
// Read actual 3dnow opcode
ZYDIS_CHECK(ZydisInputNext(decoder, info, &info->opcode));
// Restore input-buffer state
Removed Input-struct. The input buffer is now directly passed to the ZydisDecodeInstruction function.
2017-01-11 18:20:24 +08:00
decoder->input.buffer = buffer;
decoder->input.bufferLen = bufferLen;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
info->length = length;
node = ZydisInstructionTableGetRootNode();
node = ZydisInstructionTableGetChildNode(node, 0x0F);
node = ZydisInstructionTableGetChildNode(node, 0x0F);
node = ZydisInstructionTableGetChildNode(node, info->opcode);
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
if (node->type == ZYDIS_NODETYPE_INVALID)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_DECODING_ERROR;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
node = ZydisInstructionTableGetChildNode(node,
(info->details.modrm.mod == 0x3) ? 1 : 0);
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
// Decode actual operands and fix the instruction-info
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
ZydisInstructionTableGetDefinition(node, &definition, &operands, &operandCount);
ZYDIS_ASSERT(definition);
Minor refactorings and bugfixes
2016-11-24 17:57:23 +08:00
ZYDIS_ASSERT(operands && (operandCount == 2));
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
Internal changes and optimizations of the generated tables and the InstructionEditor
2016-11-23 01:12:05 +08:00
info->mnemonic = (ZydisInstructionMnemonic)definition->mnemonic;
Minor refactorings and bugfixes
2016-11-24 17:57:23 +08:00
info->details.internal.definition = (void*)definition;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
ZydisApplyInstructionDefinition(decoder, info);
ZYDIS_CHECK(ZydisDecodeOperands(decoder, info, operands, operandCount));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
return ZydisInputNext(decoder, info, &info->opcode);
}
Minor refactorings and bugfixes
2016-11-24 17:57:23 +08:00
if (operandCount != 0)
{
ZYDIS_CHECK(ZydisDecodeOperands(decoder, info, operands, operandCount));
}
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
case ZYDIS_NODETYPE_FILTER_OPCODE:
status = ZydisNodeHandlerOpcode(decoder, info, &index);
break;
case ZYDIS_NODETYPE_FILTER_VEX:
status = ZydisNodeHandlerVex(info, &index);
break;
case ZYDIS_NODETYPE_FILTER_XOP:
status = ZydisNodeHandlerXop(info, &index);
break;
case ZYDIS_NODETYPE_FILTER_MODE:
status = ZydisNodeHandlerMode(decoder, &index);
break;
case ZYDIS_NODETYPE_FILTER_MANDATORYPREFIX:
Fixed decoding of instructions with EVEX high-16 register specifiers (R', X, V')
2016-12-06 04:06:29 +08:00
status = ZydisNodeHandlerMandatoryPrefix(decoder, &index);
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
break;
case ZYDIS_NODETYPE_FILTER_MODRMMOD:
status = ZydisNodeHandlerModrmMod(decoder, info, &index);
break;
case ZYDIS_NODETYPE_FILTER_MODRMREG:
status = ZydisNodeHandlerModrmReg(decoder, info, &index);
break;
case ZYDIS_NODETYPE_FILTER_MODRMRM:
status = ZydisNodeHandlerModrmRm(decoder, info, &index);
break;
case ZYDIS_NODETYPE_FILTER_OPERANDSIZE:
status = ZydisNodeHandlerOperandSize(decoder, info, &index);
break;
case ZYDIS_NODETYPE_FILTER_ADDRESSSIZE:
status = ZydisNodeHandlerAddressSize(decoder, info, &index);
break;
case ZYDIS_NODETYPE_FILTER_REXW:
status = ZydisNodeHandlerRexW(info, &index);
break;
case ZYDIS_NODETYPE_FILTER_VEXL:
status = ZydisNodeHandlerVexL(info, &index);
break;
case ZYDIS_NODETYPE_FILTER_EVEXL2:
status = ZydisNodeHandlerEvexL2(info, &index);
break;
case ZYDIS_NODETYPE_FILTER_EVEXB:
status = ZydisNodeHandlerEvexB(info, &index);
break;
default:
ZYDIS_UNREACHABLE;
}
ZYDIS_CHECK(status);
node = ZydisInstructionTableGetChildNode(node, index);
Added support for instructions with 5 operands * optimized table structure to support instructions with 5 operands (vpermil2ps, vpermil2pd) * updated InstructionEditor
2016-09-13 11:26:55 +08:00
} while((nodeType != ZYDIS_NODETYPE_INVALID) &&
(nodeType != ZYDIS_NODETYPE_DEFINITION_0OP) &&
(nodeType != ZYDIS_NODETYPE_DEFINITION_1OP) &&
(nodeType != ZYDIS_NODETYPE_DEFINITION_2OP) &&
(nodeType != ZYDIS_NODETYPE_DEFINITION_3OP) &&
(nodeType != ZYDIS_NODETYPE_DEFINITION_4OP) &&
(nodeType != ZYDIS_NODETYPE_DEFINITION_5OP));
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
return ZYDIS_STATUS_SUCCESS;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
}
/* ---------------------------------------------------------------------------------------------- */
/* ============================================================================================== */
/* Exported functions */
/* ============================================================================================== */
ZydisStatus ZydisDecoderInitInstructionDecoder(ZydisInstructionDecoder* decoder,
Removed Input-struct. The input buffer is now directly passed to the ZydisDecodeInstruction function.
2017-01-11 18:20:24 +08:00
ZydisDisassemblerMode disassemblerMode)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
if (!decoder || (
(disassemblerMode != ZYDIS_DISASSEMBLER_MODE_16BIT) &&
(disassemblerMode != ZYDIS_DISASSEMBLER_MODE_32BIT) &&
(disassemblerMode != ZYDIS_DISASSEMBLER_MODE_64BIT)))
{
return ZYDIS_STATUS_INVALID_PARAMETER;
}
decoder->disassemblerMode = disassemblerMode;
Removed Input-struct. The input buffer is now directly passed to the ZydisDecodeInstruction function.
2017-01-11 18:20:24 +08:00
decoder->input.buffer = NULL;
decoder->input.bufferLen = 0;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
return ZYDIS_STATUS_SUCCESS;
}
Removed Input-struct. The input buffer is now directly passed to the ZydisDecodeInstruction function.
2017-01-11 18:20:24 +08:00
ZydisStatus ZydisDecoderDecodeInstruction(ZydisInstructionDecoder* decoder,
Minor refactorings - The instruction pointer is now directly passed to the ZydisDecoderDecodeInstruction function - Removed the user-data pointer in the ZydisOperandInfo struct
2017-01-13 03:14:12 +08:00
const void* buffer, size_t bufferLen, uint64_t instructionPointer, ZydisInstructionInfo* info)
Removed Input-struct. The input buffer is now directly passed to the ZydisDecodeInstruction function.
2017-01-11 18:20:24 +08:00
{
Minor refactorings - The instruction pointer is now directly passed to the ZydisDecoderDecodeInstruction function - Removed the user-data pointer in the ZydisOperandInfo struct
2017-01-13 03:14:12 +08:00
return ZydisDecoderDecodeInstructionEx(decoder, buffer, bufferLen, instructionPointer, 0, info);
Removed Input-struct. The input buffer is now directly passed to the ZydisDecodeInstruction function.
2017-01-11 18:20:24 +08:00
}
ZydisStatus ZydisDecoderDecodeInstructionEx(ZydisInstructionDecoder* decoder,
Minor refactorings - The instruction pointer is now directly passed to the ZydisDecoderDecodeInstruction function - Removed the user-data pointer in the ZydisOperandInfo struct
2017-01-13 03:14:12 +08:00
const void* buffer, size_t bufferLen, uint64_t instructionPointer, ZydisDecoderFlags flags,
ZydisInstructionInfo* info)
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
Removed Input-struct. The input buffer is now directly passed to the ZydisDecodeInstruction function.
2017-01-11 18:20:24 +08:00
(void)flags;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
if (!decoder)
{
return ZYDIS_STATUS_INVALID_PARAMETER;
}
Removed Input-struct. The input buffer is now directly passed to the ZydisDecodeInstruction function.
2017-01-11 18:20:24 +08:00
if (!buffer || (bufferLen == 0))
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
{
return ZYDIS_STATUS_NO_MORE_DATA;
}
Removed Input-struct. The input buffer is now directly passed to the ZydisDecodeInstruction function.
2017-01-11 18:20:24 +08:00
decoder->input.buffer = (uint8_t*)buffer;
decoder->input.bufferLen = bufferLen;
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
decoder->hasUnusedPrefix66 = 0;
decoder->hasUnusedPrefixF2F3 = 0;
decoder->lastSegmentPrefix = 0;
decoder->imm8initialized = ZYDIS_FALSE;
Minor refactorings and further preparation for advanced features
2016-11-12 05:03:26 +08:00
Minor refactorings - The instruction pointer is now directly passed to the ZydisDecoderDecodeInstruction function - Removed the user-data pointer in the ZydisOperandInfo struct
2017-01-13 03:14:12 +08:00
void* userData = info->userData;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
memset(info, 0, sizeof(*info));
info->mode = decoder->disassemblerMode;
Minor refactorings - The instruction pointer is now directly passed to the ZydisDecoderDecodeInstruction function - Removed the user-data pointer in the ZydisOperandInfo struct
2017-01-13 03:14:12 +08:00
info->instrAddress = instructionPointer;
info->userData = userData;
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
Removed Input-struct. The input buffer is now directly passed to the ZydisDecodeInstruction function.
2017-01-11 18:20:24 +08:00
ZYDIS_CHECK(ZydisCollectOptionalPrefixes(decoder, info));
ZYDIS_CHECK(ZydisDecodeOpcode(decoder, info));
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
Removed Input-struct. The input buffer is now directly passed to the ZydisDecodeInstruction function.
2017-01-11 18:20:24 +08:00
// TODO: The index, dest and mask regs for AVX2 gathers must be different.
// TODO: More EVEX UD conditions (page 81)
Fixed decoding of instructions with EVEX high-16 register specifiers (R', X, V')
2016-12-06 04:06:29 +08:00
// Set AVX-512 info
if (info->encoding == ZYDIS_INSTRUCTION_ENCODING_EVEX)
{
const ZydisInstructionDefinition* definition =
(ZydisInstructionDefinition*)info->details.internal.definition;
switch (definition->evexContext)
{
case ZYDIS_EVEX_CONTEXT_INVALID:
if (info->details.evex.b)
{
return ZYDIS_STATUS_DECODING_ERROR; // TODO:
}
break;
case ZYDIS_EVEX_CONTEXT_BC:
break;
case ZYDIS_EVEX_CONTEXT_RC:
info->avx.roundingMode =
(((info->details.evex.L2 & 0x01) << 1) | info->details.evex.L) + 1;
break;
case ZYDIS_EVEX_CONTEXT_SAE:
info->avx.hasSAE = ZYDIS_TRUE;
break;
default:
info->avx.broadcast = ZYDIS_AVX512_BCSTMODE_INVALID;
}
switch (definition->evexMaskPolicy)
{
case ZYDIS_AVX512_MASKPOLICY_MASK_ACCEPTED:
info->avx.maskRegister = ZYDIS_REGISTER_K0 + info->details.evex.aaa;
break;
case ZYDIS_AVX512_MASKPOLICY_MASK_REQUIRED:
if (info->details.evex.aaa == 0)
{
Removed Input-struct. The input buffer is now directly passed to the ZydisDecodeInstruction function.
2017-01-11 18:20:24 +08:00
return ZYDIS_STATUS_INVALID_MASK;
Fixed decoding of instructions with EVEX high-16 register specifiers (R', X, V')
2016-12-06 04:06:29 +08:00
}
info->avx.maskRegister = ZYDIS_REGISTER_K0 + info->details.evex.aaa;
break;
case ZYDIS_AVX512_MASKPOLICY_MASK_FORBIDDEN:
if (info->details.evex.aaa != 0)
{
Removed Input-struct. The input buffer is now directly passed to the ZydisDecodeInstruction function.
2017-01-11 18:20:24 +08:00
return ZYDIS_STATUS_INVALID_MASK;
Fixed decoding of instructions with EVEX high-16 register specifiers (R', X, V')
2016-12-06 04:06:29 +08:00
}
info->avx.maskRegister = ZYDIS_REGISTER_K0;
break;
default:
ZYDIS_UNREACHABLE;
}
Removed Input-struct. The input buffer is now directly passed to the ZydisDecodeInstruction function.
2017-01-11 18:20:24 +08:00
if (info->details.evex.z)
Fixed decoding of instructions with EVEX high-16 register specifiers (R', X, V')
2016-12-06 04:06:29 +08:00
{
Removed Input-struct. The input buffer is now directly passed to the ZydisDecodeInstruction function.
2017-01-11 18:20:24 +08:00
if (!definition->evexZeroMaskAccepted)
{
return ZYDIS_STATUS_INVALID_MASK;
}
info->avx.maskMode = ZYDIS_AVX512_MASKMODE_MERGE;
Fixed decoding of instructions with EVEX high-16 register specifiers (R', X, V')
2016-12-06 04:06:29 +08:00
} else
{
info->avx.maskMode = ZYDIS_AVX512_MASKMODE_MERGE;
}
}
Refactorings and bugfixes - Added support for the BOUND prefix - Added support for more detailed operand-actions (read, write, readwrite, cond. read, cond. write, read + cond. write, write + cond. read) - Added operand-visibility info (explicit, implicit, hidden) - Fixed some bugs in the prefix-decoding routines - Removed stdbool.h dependency and introduced custom boolean-type for better portability
2016-12-05 09:24:01 +08:00
// Replace XCHG rAX, rAX with NOP alias
if (info->mnemonic == ZYDIS_MNEMONIC_XCHG)
{
if (((info->operands[0].reg == ZYDIS_REGISTER_RAX) &&
(info->operands[1].reg == ZYDIS_REGISTER_RAX)) ||
((info->operands[0].reg == ZYDIS_REGISTER_EAX) &&
(info->operands[1].reg == ZYDIS_REGISTER_EAX)) ||
((info->operands[0].reg == ZYDIS_REGISTER_AX) &&
(info->operands[1].reg == ZYDIS_REGISTER_AX)))
{
info->mnemonic = ZYDIS_MNEMONIC_NOP;
info->operandCount = 0;
memset(&info->operands[0], 0, sizeof(ZydisOperandInfo) * 2);
}
}
Initial version 2.0 release
2016-05-26 03:25:48 +08:00
return ZYDIS_STATUS_SUCCESS;
}
/* ============================================================================================== */