b0f1e46f61
* Revert partial #74 * Import fix from https://lists.nongnu.org/archive/html/qemu-devel/2021-04/msg02868.html * Fix capstone usage
70 lines
1.8 KiB
Python
Executable File
70 lines
1.8 KiB
Python
Executable File
#!/usr/bin/python
|
|
from unicorn import *
|
|
from unicorn.x86_const import *
|
|
from capstone import *
|
|
import regress
|
|
|
|
ESP = 0x2000
|
|
PAGE_SIZE = 2 * 1024 * 1024
|
|
|
|
# mov [esp], DWORD 0x37f
|
|
# fldcw [esp]
|
|
# fnop
|
|
# fnstenv [esp + 8]
|
|
# pop ecx
|
|
CODE = b'\xc7\x04\x24\x7f\x03\x00\x00\xd9\x2c\x24\xd9\xd0\xd9\x74\x24\x08\x59'
|
|
|
|
class SimpleEngine:
|
|
def __init__(self):
|
|
self.capmd = Cs(CS_ARCH_X86, CS_MODE_32)
|
|
|
|
def disas_single(self, data):
|
|
for i in self.capmd.disasm(data, 16):
|
|
print("\t%s\t%s" % (i.mnemonic, i.op_str))
|
|
break
|
|
|
|
disasm = SimpleEngine()
|
|
|
|
def hook_code(uc, addr, size, user_data):
|
|
mem = uc.mem_read(addr, size)
|
|
print(" 0x%X:" % (addr)),
|
|
disasm.disas_single(bytes(mem))
|
|
|
|
class FpuIP(regress.RegressTest):
|
|
|
|
def mem_reader(self, mu, addr, size, expected):
|
|
tmp = mu.mem_read(addr, size)
|
|
for out, exp in zip(tmp, expected):
|
|
self.assertEqual(exp, out)
|
|
|
|
def test_32(self):
|
|
mu = Uc(UC_ARCH_X86, UC_MODE_32)
|
|
|
|
mu.mem_map(0x0, PAGE_SIZE)
|
|
mu.mem_write(0x4000, CODE)
|
|
mu.reg_write(UC_X86_REG_ESP, ESP)
|
|
mu.hook_add(UC_HOOK_CODE, hook_code)
|
|
|
|
mu.emu_start(0x4000, 0, 0, 5)
|
|
esp = mu.reg_read(UC_X86_REG_ESP)
|
|
self.assertEqual(0x2004, esp)
|
|
expected = [0x0, 0x0, 0xa, 0x40]
|
|
self.mem_reader(mu, esp + 14, 4, expected)
|
|
|
|
def test_64(self):
|
|
mu = Uc(UC_ARCH_X86, UC_MODE_64)
|
|
|
|
mu.mem_map(0x0, PAGE_SIZE)
|
|
mu.mem_write(0x4000, CODE)
|
|
mu.reg_write(UC_X86_REG_ESP, ESP)
|
|
mu.hook_add(UC_HOOK_CODE, hook_code)
|
|
|
|
mu.emu_start(0x4000, 0, 0, 5)
|
|
rsp = mu.reg_read(UC_X86_REG_RSP)
|
|
self.assertEqual(0x2012, rsp + 10)
|
|
expected = [0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0x0]
|
|
self.mem_reader(mu, rsp + 10, 4, expected)
|
|
|
|
if __name__ == '__main__':
|
|
regress.main()
|