2015-08-21 10:04:50 +03:00
|
|
|
#!/usr/bin/python
|
|
|
|
|
|
|
|
from unicorn import *
|
|
|
|
from unicorn.x86_const import *
|
|
|
|
|
|
|
|
binary1 = b'\xb8\x02\x00\x00\x00' # mov eax, 2
|
|
|
|
binary2 = b'\xb8\x01\x00\x00\x00' # mov eax, 1
|
|
|
|
|
|
|
|
mu = Uc(UC_ARCH_X86, UC_MODE_64)
|
|
|
|
|
|
|
|
mu.mem_map(0, 2 * 1024 * 1024)
|
|
|
|
|
|
|
|
# write machine code to be emulated to memory
|
|
|
|
mu.mem_write(0, binary1 + binary2)
|
|
|
|
|
|
|
|
# emu for maximum 1 instruction.
|
|
|
|
mu.emu_start(0, 10, 0, 1)
|
|
|
|
|
2015-08-24 07:36:33 +03:00
|
|
|
print("RAX = %u" %mu.reg_read(UC_X86_REG_RAX))
|
2015-08-21 10:04:50 +03:00
|
|
|
|
2015-08-24 07:36:33 +03:00
|
|
|
pos = mu.reg_read(UC_X86_REG_RIP)
|
2015-08-21 10:04:50 +03:00
|
|
|
|
|
|
|
print("RIP = %x" %pos)
|
|
|
|
|
|
|
|
mu.emu_start(5, 10, 0, 1)
|
|
|
|
|
2015-08-24 07:36:33 +03:00
|
|
|
pos = mu.reg_read(UC_X86_REG_RIP)
|
2015-08-21 10:04:50 +03:00
|
|
|
|
|
|
|
print("RIP = %x" %pos)
|
|
|
|
|
2015-08-24 07:36:33 +03:00
|
|
|
print("RAX = %u" %mu.reg_read(UC_X86_REG_RAX))
|
2015-08-21 10:04:50 +03:00
|
|
|
|