x64dbg
/
zydis
mirror of https://github.com/x64dbg/zydis
1
0
Fork 0
Code Releases Activity
zydis/tools/ZydisInfo.c

657 lines
22 KiB
C
Raw Normal View History

Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
/***************************************************************************************************
Zyan Disassembler Library (Zydis)
Original Author : Florian Bernd
* Permission is hereby granted, free of charge, to any person obtaining a copy
* of this software and associated documentation files (the "Software"), to deal
* in the Software without restriction, including without limitation the rights
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
* copies of the Software, and to permit persons to whom the Software is
* furnished to do so, subject to the following conditions:
*
* The above copyright notice and this permission notice shall be included in all
* copies or substantial portions of the Software.
*
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
* AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
* SOFTWARE.
***************************************************************************************************/
/**
* @file
Added some undocumented `PREFETCH` instructions
2017-11-17 01:47:42 +08:00
* @brief Disassembles a given hex-buffer and prints detailed information about the decoded
* instruction, the operands and additional attributes.
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
*/
Minor interface changes - Reverted last change - Removed `ZydisFormatterInitEx` - Added `ZydisFormatterSetAttribute`
2017-11-03 09:24:02 +08:00
#include <stdlib.h>
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
#include <stdio.h>
#include <inttypes.h>
#include <string.h>
#include <Zydis/Zydis.h>
/* ============================================================================================== */
/* Helper functions */
/* ============================================================================================== */
const char* ZydisFormatStatus(ZydisStatus status)
{
static const char* strings[] =
{
"SUCCESS",
"INVALID_PARAMETER",
"INVALID_OPERATION",
Further improvements to the `ZydisInfo` tool
2017-07-15 09:36:11 +08:00
"INSUFFICIENT_BUFFER_SIZE",
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
"NO_MORE_DATA",
"DECODING_ERROR",
"INSTRUCTION_TOO_LONG",
"BAD_REGISTER",
"ILLEGAL_LOCK",
"ILLEGAL_LEGACY_PFX",
"ILLEGAL_REX",
"INVALID_MAP",
"MALFORMED_EVEX",
"MALFORMED_MVEX",
"INVALID_MASK",
"IMPOSSIBLE_INSTRUCTION",
"INSUFFICIENT_BUFFER_SIZE"
};
ZYDIS_ASSERT(status < ZYDIS_ARRAY_SIZE(strings));
return strings[status];
}
/* ============================================================================================== */
/* Print functions */
/* ============================================================================================== */
void printOperands(ZydisDecodedInstruction* instruction)
{
Improved `ZydisInfo` tool
2017-07-15 04:55:32 +08:00
fputs("== [ OPERANDS ] =====================================================", stdout);
fputs("=======================================\n", stdout);
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
fputs("## TYPE VISIBILITY ACTION ENCODING SIZE NELEM ELEMSZ", stdout);
fputs(" ELEMTYPE VALUE\n", stdout);
Minor bugfixes
2017-07-19 02:02:32 +08:00
fputs("-- --------- ---------- ------ ------------ ---- ----- ------", stdout);
fputs(" -------- ---------------------------\n", stdout);
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
uint8_t immId = 0;
for (uint8_t i = 0; i < instruction->operandCount; ++i)
{
static const char* operandTypes[] =
{
"UNUSED",
"REGISTER",
"MEMORY",
"POINTER",
"IMMEDIATE"
};
static const char* operandVisibilities[] =
{
"INVALID",
"EXPLICIT",
"IMPLICIT",
"HIDDEN"
};
static const char* operandActions[] =
{
"INV",
"R",
"W",
"RW",
"CR",
"CW",
"RCW",
"CRW"
};
static const char* elementTypes[] =
{
"INVALID",
"STRUCT",
"UINT",
"INT",
"FLOAT16",
"FLOAT32",
"FLOAT64",
"FLOAT80",
"LONGBCD"
};
static const char* operandEncodings[] =
{
"NONE",
"MODRM_REG",
"MODRM_RM",
"OPCODE",
"NDSNDD",
"IS4",
"MASK",
"DISP8",
"DISP16",
"DISP32",
"DISP64",
"DISP16_32_64",
"DISP32_32_64",
"DISP16_32_32",
"UIMM8",
"UIMM16",
"UIMM32",
"UIMM64",
"UIMM16_32_64",
"UIMM32_32_64",
"UIMM16_32_32",
"SIMM8",
"SIMM16",
"SIMM32",
"SIMM64",
"SIMM16_32_64",
"SIMM32_32_64",
"SIMM16_32_32",
"JIMM8",
"JIMM16",
"JIMM32",
"JIMM64",
"JIMM16_32_64",
"JIMM32_32_64",
"JIMM16_32_32"
};
Improved support for MPX instructions
2017-10-27 02:10:51 +08:00
static const char* memopTypes[] =
{
"INVALID",
"MEM",
"AGEN",
"MIB"
};
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
printf("%2d %9s %10s %6s %12s %5d %4d %6d %8s",
i,
operandTypes[instruction->operands[i].type],
operandVisibilities[instruction->operands[i].visibility],
operandActions[instruction->operands[i].action],
operandEncodings[instruction->operands[i].encoding],
instruction->operands[i].size,
instruction->operands[i].elementCount,
instruction->operands[i].elementSize,
elementTypes[instruction->operands[i].elementType]);
switch (instruction->operands[i].type)
{
case ZYDIS_OPERAND_TYPE_REGISTER:
Minor refactorings
2017-09-20 21:46:51 +08:00
printf(" %27s", ZydisRegisterGetString(instruction->operands[i].reg.value));
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
break;
case ZYDIS_OPERAND_TYPE_MEMORY:
Improved support for MPX instructions
2017-10-27 02:10:51 +08:00
printf(" TYPE =%20s\n", memopTypes[instruction->operands[i].mem.type]);
printf(" %84s =%20s\n",
"SEG ", ZydisRegisterGetString(instruction->operands[i].mem.segment));
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
printf(" %84s =%20s\n",
"BASE ", ZydisRegisterGetString(instruction->operands[i].mem.base));
printf(" %84s =%20s\n",
"INDEX", ZydisRegisterGetString(instruction->operands[i].mem.index));
printf(" %84s =%20d\n", "SCALE", instruction->operands[i].mem.scale);
printf(" %84s = 0x%016"PRIX64,
"DISP ", instruction->operands[i].mem.disp.value);
break;
case ZYDIS_OPERAND_TYPE_POINTER:
break;
case ZYDIS_OPERAND_TYPE_IMMEDIATE:
if (instruction->operands[i].imm.isSigned)
{
Minor bugfixes
2017-07-19 22:56:12 +08:00
printf(" (%s %s %2d) 0x%016" PRIX64,
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
instruction->operands[i].imm.isSigned ? "S" : "U",
instruction->operands[i].imm.isRelative ? "R" : "_",
instruction->raw.imm[immId].size,
instruction->operands[i].imm.value.s);
} else
{
printf(" SIGN =%20s\n", instruction->operands[i].imm.isSigned ? "Y" : "N");
printf(" %84s =%20s\n",
"REL ", instruction->operands[i].imm.isRelative ? "Y" : "N");
printf(" %84s = %2d\n",
"SIZE ", instruction->raw.imm[immId].size);
Minor bugfixes
2017-07-19 22:56:12 +08:00
printf(" %84s = 0x%016" PRIX64,
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
"VALUE", instruction->operands[i].imm.value.u);
}
++immId;
break;
default:
ZYDIS_UNREACHABLE;
}
puts("");
}
Minor bugfixes
2017-07-19 02:02:32 +08:00
fputs("-- --------- ---------- ------ ------------ ---- ----- ------", stdout);
fputs(" -------- ---------------------------\n", stdout);
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
}
Improved `ZydisInfo` tool
2017-07-15 04:55:32 +08:00
void printFlags(ZydisDecodedInstruction* instruction)
{
static const char* flagNames[] =
{
"CF",
"PF",
"AF",
"ZF",
"SF",
"TF",
"IF",
"DF",
"OF",
"IOPL",
"NT",
"RF",
"VM",
"AC",
"VIF",
"VIP",
"ID",
"C0",
"C1",
"C2",
"C3"
};
static const char* flagActions[] =
{
" ",
"T",
"M",
"0",
"1",
"U"
};
fputs("== [ FLAGS ] =====================================================", stdout);
fputs("=======================================\n", stdout);
printf(" ACTIONS: ");
uint8_t c = 0;
Minor refactorings - Adjusted datatype of some enums - Renamed some things - `ZydisDecodedInstruction.flags` -> `ZydisDecodedInstruction.accessedFlags` - `ZydisDecodedInstruction.meta.roundingMode` -> `ZydisDecodedInstruction.meta.rounding.mode` - `ZydisDecodedInstruction.meta.swizzleMode` -> `ZydisDecodedInstruction.meta.swizzle.mode` - `ZydisDecodedInstruction.meta.conversionMode` -> `ZydisDecodedInstruction.meta.conversion.mode` - `ZydisGetCPUFlagsByAction` -> `ZydisGetAccessedFlagsByAction`
2017-09-11 03:43:52 +08:00
for (ZydisCPUFlag i = 0; i < ZYDIS_ARRAY_SIZE(instruction->accessedFlags); ++i)
Improved `ZydisInfo` tool
2017-07-15 04:55:32 +08:00
{
Minor refactorings - Adjusted datatype of some enums - Renamed some things - `ZydisDecodedInstruction.flags` -> `ZydisDecodedInstruction.accessedFlags` - `ZydisDecodedInstruction.meta.roundingMode` -> `ZydisDecodedInstruction.meta.rounding.mode` - `ZydisDecodedInstruction.meta.swizzleMode` -> `ZydisDecodedInstruction.meta.swizzle.mode` - `ZydisDecodedInstruction.meta.conversionMode` -> `ZydisDecodedInstruction.meta.conversion.mode` - `ZydisGetCPUFlagsByAction` -> `ZydisGetAccessedFlagsByAction`
2017-09-11 03:43:52 +08:00
if (instruction->accessedFlags[i].action != ZYDIS_CPUFLAG_ACTION_NONE)
Improved `ZydisInfo` tool
2017-07-15 04:55:32 +08:00
{
Fixed formatting bug in ZydisInfo tool
2017-07-25 04:03:41 +08:00
if (c && (c % 8 == 0))
{
printf("\n ");
}
Improved `ZydisInfo` tool
2017-07-15 04:55:32 +08:00
++c;
Minor refactorings - Adjusted datatype of some enums - Renamed some things - `ZydisDecodedInstruction.flags` -> `ZydisDecodedInstruction.accessedFlags` - `ZydisDecodedInstruction.meta.roundingMode` -> `ZydisDecodedInstruction.meta.rounding.mode` - `ZydisDecodedInstruction.meta.swizzleMode` -> `ZydisDecodedInstruction.meta.swizzle.mode` - `ZydisDecodedInstruction.meta.conversionMode` -> `ZydisDecodedInstruction.meta.conversion.mode` - `ZydisGetCPUFlagsByAction` -> `ZydisGetAccessedFlagsByAction`
2017-09-11 03:43:52 +08:00
printf("[%-4s: %s] ", flagNames[i], flagActions[instruction->accessedFlags[i].action]);
Improved `ZydisInfo` tool
2017-07-15 04:55:32 +08:00
}
}
puts(c ? "" : "none");
ZydisCPUFlagMask flags, temp;
Minor refactorings - Adjusted datatype of some enums - Renamed some things - `ZydisDecodedInstruction.flags` -> `ZydisDecodedInstruction.accessedFlags` - `ZydisDecodedInstruction.meta.roundingMode` -> `ZydisDecodedInstruction.meta.rounding.mode` - `ZydisDecodedInstruction.meta.swizzleMode` -> `ZydisDecodedInstruction.meta.swizzle.mode` - `ZydisDecodedInstruction.meta.conversionMode` -> `ZydisDecodedInstruction.meta.conversion.mode` - `ZydisGetCPUFlagsByAction` -> `ZydisGetAccessedFlagsByAction`
2017-09-11 03:43:52 +08:00
ZydisGetAccessedFlagsByAction(instruction, ZYDIS_CPUFLAG_ACTION_TESTED, &flags);
Minor bugfixes
2017-07-19 22:56:12 +08:00
printf(" READ: 0x%08" PRIX32 "\n", flags);
Minor refactorings - Adjusted datatype of some enums - Renamed some things - `ZydisDecodedInstruction.flags` -> `ZydisDecodedInstruction.accessedFlags` - `ZydisDecodedInstruction.meta.roundingMode` -> `ZydisDecodedInstruction.meta.rounding.mode` - `ZydisDecodedInstruction.meta.swizzleMode` -> `ZydisDecodedInstruction.meta.swizzle.mode` - `ZydisDecodedInstruction.meta.conversionMode` -> `ZydisDecodedInstruction.meta.conversion.mode` - `ZydisGetCPUFlagsByAction` -> `ZydisGetAccessedFlagsByAction`
2017-09-11 03:43:52 +08:00
ZydisGetAccessedFlagsByAction(instruction, ZYDIS_CPUFLAG_ACTION_MODIFIED, &flags);
ZydisGetAccessedFlagsByAction(instruction, ZYDIS_CPUFLAG_ACTION_SET_0, &temp);
Improved `ZydisInfo` tool
2017-07-15 04:55:32 +08:00
flags |= temp;
Minor refactorings - Adjusted datatype of some enums - Renamed some things - `ZydisDecodedInstruction.flags` -> `ZydisDecodedInstruction.accessedFlags` - `ZydisDecodedInstruction.meta.roundingMode` -> `ZydisDecodedInstruction.meta.rounding.mode` - `ZydisDecodedInstruction.meta.swizzleMode` -> `ZydisDecodedInstruction.meta.swizzle.mode` - `ZydisDecodedInstruction.meta.conversionMode` -> `ZydisDecodedInstruction.meta.conversion.mode` - `ZydisGetCPUFlagsByAction` -> `ZydisGetAccessedFlagsByAction`
2017-09-11 03:43:52 +08:00
ZydisGetAccessedFlagsByAction(instruction, ZYDIS_CPUFLAG_ACTION_SET_1, &temp);
Improved `ZydisInfo` tool
2017-07-15 04:55:32 +08:00
flags |= temp;
Minor bugfixes
2017-07-19 22:56:12 +08:00
printf(" WRITTEN: 0x%08" PRIX32 "\n", flags);
Minor refactorings - Adjusted datatype of some enums - Renamed some things - `ZydisDecodedInstruction.flags` -> `ZydisDecodedInstruction.accessedFlags` - `ZydisDecodedInstruction.meta.roundingMode` -> `ZydisDecodedInstruction.meta.rounding.mode` - `ZydisDecodedInstruction.meta.swizzleMode` -> `ZydisDecodedInstruction.meta.swizzle.mode` - `ZydisDecodedInstruction.meta.conversionMode` -> `ZydisDecodedInstruction.meta.conversion.mode` - `ZydisGetCPUFlagsByAction` -> `ZydisGetAccessedFlagsByAction`
2017-09-11 03:43:52 +08:00
ZydisGetAccessedFlagsByAction(instruction, ZYDIS_CPUFLAG_ACTION_UNDEFINED, &flags);
Minor bugfixes
2017-07-19 22:56:12 +08:00
printf(" UNDEFINED: 0x%08" PRIX32 "\n", flags);
Improved `ZydisInfo` tool
2017-07-15 04:55:32 +08:00
}
void printAVXInfo(ZydisDecodedInstruction* instruction)
{
static const char* broadcastStrings[] =
{
"NONE",
"1_TO_2",
"1_TO_4",
"1_TO_8",
"1_TO_16",
"1_TO_32",
"1_TO_64",
"2_TO_4",
"2_TO_8",
"2_TO_16",
"4_TO_8",
"4_TO_16",
"8_TO_16"
};
static const char* maskModeStrings[] =
{
"NONE",
"MERGE",
"ZERO"
};
static const char* roundingModeStrings[] =
{
"DEFAULT",
"RN",
"RD",
"RU",
"RZ"
};
static const char* swizzleModeStrings[] =
{
"NONE",
"DCBA",
"CDAB",
"BADC",
"DACB",
"AAAA",
"BBBB",
"CCCC",
"DDDD"
};
static const char* conversionModeStrings[] =
{
"NONE",
"FLOAT16",
"SINT8",
"UINT8",
"SINT16",
"UINT16"
};
fputs("== [ AVX ] =====================================================", stdout);
fputs("=======================================\n", stdout);
printf(" VECTORLEN: %03d\n", instruction->avx.vectorLength);
printf(" BROADCAST: %s%s", broadcastStrings[instruction->avx.broadcast.mode],
instruction->avx.broadcast.isStatic ? " (static)" : "");
switch (instruction->encoding)
{
case ZYDIS_INSTRUCTION_ENCODING_EVEX:
Minor refactorings - Adjusted datatype of some enums - Renamed some things - `ZydisDecodedInstruction.flags` -> `ZydisDecodedInstruction.accessedFlags` - `ZydisDecodedInstruction.meta.roundingMode` -> `ZydisDecodedInstruction.meta.rounding.mode` - `ZydisDecodedInstruction.meta.swizzleMode` -> `ZydisDecodedInstruction.meta.swizzle.mode` - `ZydisDecodedInstruction.meta.conversionMode` -> `ZydisDecodedInstruction.meta.conversion.mode` - `ZydisGetCPUFlagsByAction` -> `ZydisGetAccessedFlagsByAction`
2017-09-11 03:43:52 +08:00
printf("\n ROUNDING: %s", roundingModeStrings[instruction->avx.rounding.mode]);
Improved `ZydisInfo` tool
2017-07-15 04:55:32 +08:00
printf("\n SAE: %s", instruction->avx.hasSAE ? "Y" : "N");
printf("\n MASK: %s [%5s]%s", ZydisRegisterGetString(instruction->avx.mask.reg),
maskModeStrings[instruction->avx.mask.mode],
instruction->avx.mask.isControlMask ? " (control-mask)" : "");
break;
case ZYDIS_INSTRUCTION_ENCODING_MVEX:
Minor refactorings - Adjusted datatype of some enums - Renamed some things - `ZydisDecodedInstruction.flags` -> `ZydisDecodedInstruction.accessedFlags` - `ZydisDecodedInstruction.meta.roundingMode` -> `ZydisDecodedInstruction.meta.rounding.mode` - `ZydisDecodedInstruction.meta.swizzleMode` -> `ZydisDecodedInstruction.meta.swizzle.mode` - `ZydisDecodedInstruction.meta.conversionMode` -> `ZydisDecodedInstruction.meta.conversion.mode` - `ZydisGetCPUFlagsByAction` -> `ZydisGetAccessedFlagsByAction`
2017-09-11 03:43:52 +08:00
printf("\n ROUNDING: %s", roundingModeStrings[instruction->avx.rounding.mode]);
Improved `ZydisInfo` tool
2017-07-15 04:55:32 +08:00
printf("\n SAE: %s", instruction->avx.hasSAE ? "Y" : "N");
printf("\n MASK: %s [MERGE]", ZydisRegisterGetString(instruction->avx.mask.reg));
printf("\n EH: %s", instruction->avx.hasEvictionHint ? "Y" : "N");
Minor refactorings - Adjusted datatype of some enums - Renamed some things - `ZydisDecodedInstruction.flags` -> `ZydisDecodedInstruction.accessedFlags` - `ZydisDecodedInstruction.meta.roundingMode` -> `ZydisDecodedInstruction.meta.rounding.mode` - `ZydisDecodedInstruction.meta.swizzleMode` -> `ZydisDecodedInstruction.meta.swizzle.mode` - `ZydisDecodedInstruction.meta.conversionMode` -> `ZydisDecodedInstruction.meta.conversion.mode` - `ZydisGetCPUFlagsByAction` -> `ZydisGetAccessedFlagsByAction`
2017-09-11 03:43:52 +08:00
printf("\n SWIZZLE: %s", swizzleModeStrings[instruction->avx.swizzle.mode]);
printf("\n CONVERT: %s", conversionModeStrings[instruction->avx.conversion.mode]);
Improved `ZydisInfo` tool
2017-07-15 04:55:32 +08:00
break;
default:
break;
}
puts("");
}
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
void printInstruction(ZydisDecodedInstruction* instruction)
{
Improved `ZydisInfo` tool
2017-07-15 04:55:32 +08:00
static const char* opcodeMapStrings[] =
{
"DEFAULT",
"0F",
"0F38",
"0F3A",
"0F0F",
"XOP8",
"XOP9",
"XOPA"
};
static const char* instructionEncodingStrings[] =
{
"",
"DEFAULT",
"3DNOW",
"XOP",
"VEX",
"EVEX",
"MVEX"
};
Tables fixes and more meta-info - Added exception-class meta-info - Added CMake option for shared-libraries - Fixed some instruction-definitions - Updated VersionInfo.rc
2017-09-06 23:05:05 +08:00
static const char* exceptionClassStrings[] =
{
"NONE",
"SSE1",
"SSE2",
"SSE3",
"SSE4",
"SSE5",
"SSE7",
"AVX1",
"AVX2",
"AVX3",
"AVX4",
"AVX5",
"AVX6",
"AVX7",
"AVX8",
"AVX11",
"AVX12",
"E1",
"E1NF",
"E2",
"E2NF",
"E3",
"E3NF",
"E4",
"E4NF",
"E5",
"E5NF",
"E6",
"E6NF",
"E7NM",
"E7NM128",
"E9NF",
"E10",
"E10NF",
"E11",
"E11NF",
"E12",
"E12NP",
"K20",
"K21"
};
Added attribute info to `ZydisInfo` tool
2017-09-23 01:09:14 +08:00
struct
{
ZydisInstructionAttributes attrMask;
const char* str;
} attributeMap[] =
{
Minor refactorings
2017-09-24 01:53:48 +08:00
{ ZYDIS_ATTRIB_HAS_MODRM, "HAS_MODRM" },
{ ZYDIS_ATTRIB_HAS_SIB, "HAS_SIB" },
{ ZYDIS_ATTRIB_HAS_REX, "HAS_REX" },
{ ZYDIS_ATTRIB_HAS_XOP, "HAS_XOP" },
{ ZYDIS_ATTRIB_HAS_VEX, "HAS_VEX" },
{ ZYDIS_ATTRIB_HAS_EVEX, "HAS_EVEX" },
{ ZYDIS_ATTRIB_HAS_MVEX, "HAS_MVEX" },
{ ZYDIS_ATTRIB_IS_RELATIVE, "IS_RELATIVE" },
{ ZYDIS_ATTRIB_IS_PRIVILEGED, "IS_PRIVILEGED" },
{ ZYDIS_ATTRIB_IS_FAR_BRANCH, "IS_FAR_BRANCH" },
{ ZYDIS_ATTRIB_ACCEPTS_LOCK, "ACCEPTS_LOCK" },
{ ZYDIS_ATTRIB_ACCEPTS_REP, "ACCEPTS_REP" },
{ ZYDIS_ATTRIB_ACCEPTS_REPE, "ACCEPTS_REPE" },
{ ZYDIS_ATTRIB_ACCEPTS_REPZ, "ACCEPTS_REPZ" },
{ ZYDIS_ATTRIB_ACCEPTS_REPNE, "ACCEPTS_REPNE" },
{ ZYDIS_ATTRIB_ACCEPTS_REPNZ, "ACCEPTS_REPNZ" },
{ ZYDIS_ATTRIB_ACCEPTS_BOUND, "ACCEPTS_BOUND" },
{ ZYDIS_ATTRIB_ACCEPTS_XACQUIRE, "ACCEPTS_XACQUIRE" },
{ ZYDIS_ATTRIB_ACCEPTS_XRELEASE, "ACCEPTS_XRELEASE" },
{ ZYDIS_ATTRIB_ACCEPTS_HLE_WITHOUT_LOCK, "ACCEPTS_HLE_WITHOUT_LOCK" },
{ ZYDIS_ATTRIB_ACCEPTS_BRANCH_HINTS, "ACCEPTS_BRANCH_HINTS" },
{ ZYDIS_ATTRIB_ACCEPTS_SEGMENT, "ACCEPTS_SEGMENT" },
{ ZYDIS_ATTRIB_HAS_LOCK, "HAS_LOCK" },
{ ZYDIS_ATTRIB_HAS_REP, "HAS_REP" },
{ ZYDIS_ATTRIB_HAS_REPE, "HAS_REPE" },
{ ZYDIS_ATTRIB_HAS_REPZ, "HAS_REPZ" },
{ ZYDIS_ATTRIB_HAS_REPNE, "HAS_REPNE" },
{ ZYDIS_ATTRIB_HAS_REPNZ, "HAS_REPNZ" },
{ ZYDIS_ATTRIB_HAS_BOUND, "HAS_BOUND" },
{ ZYDIS_ATTRIB_HAS_XACQUIRE, "HAS_XACQUIRE" },
{ ZYDIS_ATTRIB_HAS_XRELEASE, "HAS_XRELEASE" },
{ ZYDIS_ATTRIB_HAS_BRANCH_NOT_TAKEN, "HAS_BRANCH_NOT_TAKEN" },
{ ZYDIS_ATTRIB_HAS_BRANCH_TAKEN, "HAS_BRANCH_TAKEN" },
{ ZYDIS_ATTRIB_HAS_SEGMENT, "HAS_SEGMENT" },
{ ZYDIS_ATTRIB_HAS_SEGMENT_CS, "HAS_SEGMENT_CS" },
{ ZYDIS_ATTRIB_HAS_SEGMENT_SS, "HAS_SEGMENT_SS" },
{ ZYDIS_ATTRIB_HAS_SEGMENT_DS, "HAS_SEGMENT_DS" },
{ ZYDIS_ATTRIB_HAS_SEGMENT_ES, "HAS_SEGMENT_ES" },
{ ZYDIS_ATTRIB_HAS_SEGMENT_FS, "HAS_SEGMENT_FS" },
{ ZYDIS_ATTRIB_HAS_SEGMENT_GS, "HAS_SEGMENT_GS" },
{ ZYDIS_ATTRIB_HAS_OPERANDSIZE, "HAS_OPERANDSIZE" },
{ ZYDIS_ATTRIB_HAS_ADDRESSSIZE, "HAS_ADDRESSSIZE" }
Added attribute info to `ZydisInfo` tool
2017-09-23 01:09:14 +08:00
};
Improved `ZydisInfo` tool
2017-07-15 04:55:32 +08:00
fputs("== [ BASIC ] =====================================================", stdout);
fputs("=======================================\n", stdout);
Minor bugfixes
2017-07-19 22:56:12 +08:00
printf(" MNEMONIC: %s [ENC: %s, MAP: %s, OPC: %02X]\n",
Improved `ZydisInfo` tool
2017-07-15 04:55:32 +08:00
ZydisMnemonicGetString(instruction->mnemonic),
instructionEncodingStrings[instruction->encoding],
opcodeMapStrings[instruction->opcodeMap],
instruction->opcode);
Minor bugfixes
2017-07-19 22:56:12 +08:00
printf(" LENGTH: %2d\n", instruction->length);
printf(" SSZ: %2d\n", instruction->stackWidth);
Fixed formatting of signed 8-bit immediate operands (again) - Renamed `operandSize` to `operandWidth` - The `operandWidth` field is now set to 8-bit, if the instruction performs a byte-operation
2017-09-22 04:16:37 +08:00
printf(" EOSZ: %2d\n", instruction->operandWidth);
Minor bugfixes
2017-07-19 22:56:12 +08:00
printf(" EASZ: %2d\n", instruction->addressWidth);
Internal refactorings and new meta-info - Imported meta-info from Intel XED - Added instruction-category meta-info to the `ZydisDecodedInstruction` struct - Added isa-set meta-info to the `ZydisDecodedInstruction` struct - Added isa-extension meta-info to the `ZydisDecodedInstruction` struct
2017-09-05 23:35:23 +08:00
printf(" CATEGORY: %s\n", ZydisCategoryGetString(instruction->meta.category));
printf(" ISA-SET: %s\n", ZydisISASetGetString(instruction->meta.isaSet));
printf(" ISA-EXT: %s\n", ZydisISAExtGetString(instruction->meta.isaExt));
Tables fixes and more meta-info - Added exception-class meta-info - Added CMake option for shared-libraries - Fixed some instruction-definitions - Updated VersionInfo.rc
2017-09-06 23:05:05 +08:00
printf(" EXCEPTIONS: %s\n", exceptionClassStrings[instruction->meta.exceptionClass]);
Minor refactorings
2017-09-24 01:53:48 +08:00
if (instruction->attributes)
Added attribute info to `ZydisInfo` tool
2017-09-23 01:09:14 +08:00
{
Minor refactorings
2017-09-24 01:53:48 +08:00
fputs (" ATTRIBUTES: ", stdout);
for (size_t i = 0; i < ZYDIS_ARRAY_SIZE(attributeMap); ++i)
Added attribute info to `ZydisInfo` tool
2017-09-23 01:09:14 +08:00
{
Minor refactorings
2017-09-24 01:53:48 +08:00
if (instruction->attributes & attributeMap[i].attrMask)
{
printf("%s ", attributeMap[i].str);
}
Added attribute info to `ZydisInfo` tool
2017-09-23 01:09:14 +08:00
}
Minor refactorings
2017-09-24 01:53:48 +08:00
fputs("\n", stdout);
Added attribute info to `ZydisInfo` tool
2017-09-23 01:09:14 +08:00
}
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
Improved `ZydisInfo` tool
2017-07-15 04:55:32 +08:00
if (instruction->operandCount > 0)
{
puts("");
printOperands(instruction);
}
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
if (ZydisRegisterGetClass(
Minor refactorings
2017-09-20 21:46:51 +08:00
instruction->operands[instruction->operandCount - 1].reg.value) == ZYDIS_REGCLASS_FLAGS)
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
{
puts("");
printFlags(instruction);
}
Improved `ZydisInfo` tool
2017-07-15 04:55:32 +08:00
if ((instruction->encoding == ZYDIS_INSTRUCTION_ENCODING_XOP) ||
(instruction->encoding == ZYDIS_INSTRUCTION_ENCODING_VEX) ||
(instruction->encoding == ZYDIS_INSTRUCTION_ENCODING_EVEX) ||
(instruction->encoding == ZYDIS_INSTRUCTION_ENCODING_MVEX))
{
puts("");
printAVXInfo(instruction);
}
Minor interface changes - Reverted last change - Removed `ZydisFormatterInitEx` - Added `ZydisFormatterSetAttribute`
2017-11-03 09:24:02 +08:00
ZydisStatus status;
Improved `ZydisInfo` tool
2017-07-15 04:55:32 +08:00
ZydisFormatter formatter;
Minor interface changes - Reverted last change - Removed `ZydisFormatterInitEx` - Added `ZydisFormatterSetAttribute`
2017-11-03 09:24:02 +08:00
if (!ZYDIS_SUCCESS((status = ZydisFormatterInit(&formatter, ZYDIS_FORMATTER_STYLE_INTEL))) ||
Added formatter properties to control padding of hexadecimal values - Renamed `ZydisFormatterSetAttribute` to `ZydisFormatterSetProperty` - Renamed some formatter enums - Added `ZYDIS_FORMATTER_PROP_ADDR_PADDING` - Added `ZYDIS_FORMATTER_PROP_DISP_PADDING` - Added `ZYDIS_FORMATTER_PROP_IMM_PADDING`
2017-11-07 04:35:13 +08:00
!ZYDIS_SUCCESS((status = ZydisFormatterSetProperty(&formatter,
Refactored `ZydisFormatter` - Added `ZYDIS_FORMATTER_HOOK_PRE_OPERAND`, `ZYDIS_FORMATTER_HOOK_POST_OPERAND` and `ZYDIS_FORMATTER_HOOK_PRINT_REGISTER` - Renamed `ZYDIS_FORMATTER_HOOK_PRINT_DISPLACEMENT` to `ZYDIS_FORMATTER_HOOK_PRINT_DISP` - Renamed `ZYDIS_FORMATTER_HOOK_PRINT_IMMEDIATE` to `ZYDIS_FORMATTER_HOOK_PRINT_IMM` - Renamed `ZYDIS_FORMATTER_HOOK_PRINT_OPERANDSIZE` to `ZYDIS_FORMATTER_HOOK_PRINT_MEMSIZE` - Removed `ZYDIS_FORMATTER_HOOK_PRINT_SEGMENT` - Renamed some enums and types - Revised documentation - Fixed examples and tools
2017-12-04 01:49:45 +08:00
ZYDIS_FORMATTER_PROP_FORCE_MEMSEG, ZYDIS_TRUE))) ||
Added formatter properties to control padding of hexadecimal values - Renamed `ZydisFormatterSetAttribute` to `ZydisFormatterSetProperty` - Renamed some formatter enums - Added `ZYDIS_FORMATTER_PROP_ADDR_PADDING` - Added `ZYDIS_FORMATTER_PROP_DISP_PADDING` - Added `ZYDIS_FORMATTER_PROP_IMM_PADDING`
2017-11-07 04:35:13 +08:00
!ZYDIS_SUCCESS((status = ZydisFormatterSetProperty(&formatter,
Refactored `ZydisFormatter` - Added `ZYDIS_FORMATTER_HOOK_PRE_OPERAND`, `ZYDIS_FORMATTER_HOOK_POST_OPERAND` and `ZYDIS_FORMATTER_HOOK_PRINT_REGISTER` - Renamed `ZYDIS_FORMATTER_HOOK_PRINT_DISPLACEMENT` to `ZYDIS_FORMATTER_HOOK_PRINT_DISP` - Renamed `ZYDIS_FORMATTER_HOOK_PRINT_IMMEDIATE` to `ZYDIS_FORMATTER_HOOK_PRINT_IMM` - Renamed `ZYDIS_FORMATTER_HOOK_PRINT_OPERANDSIZE` to `ZYDIS_FORMATTER_HOOK_PRINT_MEMSIZE` - Removed `ZYDIS_FORMATTER_HOOK_PRINT_SEGMENT` - Renamed some enums and types - Revised documentation - Fixed examples and tools
2017-12-04 01:49:45 +08:00
ZYDIS_FORMATTER_PROP_FORCE_MEMSIZE, ZYDIS_TRUE))))
Minor interface changes - Reverted last change - Removed `ZydisFormatterInitEx` - Added `ZydisFormatterSetAttribute`
2017-11-03 09:24:02 +08:00
{
fputs("Failed to initialize instruction-formatter\n", stderr);
exit(status);
}
Improved `ZydisInfo` tool
2017-07-15 04:55:32 +08:00
char buffer[256];
ZydisFormatterFormatInstruction(&formatter, instruction, &buffer[0], sizeof(buffer));
fputs("\n== [ DISASM ] =====================================================", stdout);
fputs("=======================================\n", stdout);
printf(" %s\n", &buffer[0]);
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
}
/* ============================================================================================== */
/* Entry point */
/* ============================================================================================== */
int main(int argc, char** argv)
{
Minor refactorings
2017-09-20 21:46:51 +08:00
if (ZydisGetVersion() != ZYDIS_VERSION)
{
fputs("Invalid zydis version\n", stderr);
return ZYDIS_STATUS_INVALID_OPERATION;
}
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
if (argc < 3)
{
Added some undocumented `PREFETCH` instructions
2017-11-17 01:47:42 +08:00
fputs("Usage: ZydisInfo -[real|16|32|64] [hexbytes]\n", stderr);
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
return ZYDIS_STATUS_INVALID_PARAMETER;
}
ZydisDecoder decoder;
Minor bugfixes
2017-11-14 14:33:15 +08:00
if (!strcmp(argv[1], "-real"))
{
ZydisDecoderInit(&decoder, ZYDIS_MACHINE_MODE_REAL_16, ZYDIS_ADDRESS_WIDTH_16);
} else
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
if (!strcmp(argv[1], "-16"))
{
ZydisDecoderInit(&decoder, ZYDIS_MACHINE_MODE_LONG_COMPAT_16, ZYDIS_ADDRESS_WIDTH_16);
} else
if (!strcmp(argv[1], "-32"))
{
ZydisDecoderInit(&decoder, ZYDIS_MACHINE_MODE_LONG_COMPAT_32, ZYDIS_ADDRESS_WIDTH_32);
} else
if (!strcmp(argv[1], "-64"))
{
ZydisDecoderInit(&decoder, ZYDIS_MACHINE_MODE_LONG_64, ZYDIS_ADDRESS_WIDTH_64);
} else
{
Minor bugfixes
2017-11-14 14:33:15 +08:00
fputs("Usage: ZydisInfo -[real|16|32|64] [hexbytes]\n", stderr);
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
return ZYDIS_STATUS_INVALID_PARAMETER;
Implemented decoder-modes to support ISA-extensions that conflict with existing instructions - Added decoder-modes - `ZYDIS_DECODER_MODE_MINIMAL` - `ZYDIS_DECODER_MODE_AMD_BRANCHES` - `ZYDIS_DECODER_MODE_MPX` - `ZYDIS_DECODER_MODE_CET` - `ZYDIS_DECODER_MODE_LZCNT` - `ZYDIS_DECODER_MODE_TZCNT` - Removed `ZydisDecoderInitEx` and the possibility to pass a decoder-granularity (use `ZYDIS_DECODER_MODE_MINIMAL` instead)
2017-11-02 06:39:10 +08:00
}
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
Further improvements to the `ZydisInfo` tool
2017-07-15 09:36:11 +08:00
uint8_t data[ZYDIS_MAX_INSTRUCTION_LENGTH];
uint8_t length = 0;
for (uint8_t i = 0; i < argc - 2; ++i)
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
{
Further improvements to the `ZydisInfo` tool
2017-07-15 09:36:11 +08:00
if (length == ZYDIS_MAX_INSTRUCTION_LENGTH)
{
fprintf(stderr, "Maximum number of %d bytes exceeded", ZYDIS_MAX_INSTRUCTION_LENGTH);
return ZYDIS_STATUS_INVALID_PARAMETER;
}
size_t len = strlen(argv[i + 2]);
if (len % 2)
{
fputs("Even number of hex nibbles expected", stderr);
return ZYDIS_STATUS_INVALID_PARAMETER;
}
for (uint8_t j = 0; j < len / 2; ++j)
{
unsigned value;
if (!sscanf(&argv[i + 2][j * 2], "%02x", &value))
{
fputs("Invalid hex value", stderr);
return ZYDIS_STATUS_INVALID_PARAMETER;
}
Minor bugfixes
2017-07-19 22:56:12 +08:00
data[length] = (uint8_t)value;
Further improvements to the `ZydisInfo` tool
2017-07-15 09:36:11 +08:00
++length;
}
}
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
ZydisDecodedInstruction instruction;
Further improvements to the `ZydisInfo` tool
2017-07-15 09:36:11 +08:00
ZydisStatus status = ZydisDecoderDecodeBuffer(&decoder, &data, length, 0, &instruction);
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
if (!ZYDIS_SUCCESS(status))
{
if (status >= ZYDIS_STATUS_USER)
{
fprintf(stderr,
Minor bugfixes
2017-07-19 22:56:12 +08:00
"Could not decode instruction: User defined status code 0x%" PRIx32, status);
Added a tool that prints instruction details
2017-07-13 01:54:42 +08:00
} else
{
fprintf(stderr, "Could not decode instruction: %s", ZydisFormatStatus(status));
}
return status;
}
printInstruction(&instruction);
return ZYDIS_STATUS_SUCCESS;
}
/* ============================================================================================== */