// Capstone Java binding // By Nguyen Anh Quynh & Dang Hoang Vu, 2013 import capstone.Capstone; import static capstone.Capstone.CS_AC_READ; import static capstone.Capstone.CS_AC_WRITE; import capstone.Capstone.CsRegsAccess; import capstone.X86; import static capstone.X86_const.*; public class TestX86 { static byte[] hexString2Byte(String s) { // from http://stackoverflow.com/questions/140131/convert-a-string-representation-of-a-hex-dump-to-a-byte-array-using-java int len = s.length(); byte[] data = new byte[len / 2]; for (int i = 0; i < len; i += 2) { data[i / 2] = (byte) ((Character.digit(s.charAt(i), 16) << 4) + Character.digit(s.charAt(i+1), 16)); } return data; } static final String X86_CODE64 = "55488b05b8130000"; static final String X86_CODE16 = "8d4c320801d881c6341200000523010000368b849123010000418d8439896700008d8789670000b4c6"; static final String X86_CODE32 = "8d4c320801d881c6341200000523010000368b849123010000418d8439896700008d8789670000b4c6"; public static Capstone cs; private static String hex(int i) { return Integer.toString(i, 16); } private static String hex(long i) { return Long.toString(i, 16); } private static String array2hex(byte[] arr) { String ret = ""; for (int i=0 ;i 0) { System.out.printf("\timm_count: %d\n", count); System.out.printf("\timm offset: 0x%x\n", operands.encoding.immOffset); System.out.printf("\timm size: 0x%x\n", operands.encoding.immSize); for (int i=0; i 0) { System.out.printf("\tRegisters read:"); for (int i = 0; i < regsRead.length; i++) { System.out.printf(" %s", ins.regName(regsRead[i])); } System.out.print("\n"); } if (regsWrite.length > 0) { System.out.printf("\tRegister modified:"); for (int i = 0; i < regsWrite.length; i++) { System.out.printf(" %s", ins.regName(regsWrite[i])); } System.out.print("\n"); } } } } public static void main(String argv[]) { final TestBasic.platform[] all_tests = { new TestBasic.platform(Capstone.CS_ARCH_X86, Capstone.CS_MODE_16, hexString2Byte(X86_CODE16), "X86 16bit (Intel syntax)"), new TestBasic.platform(Capstone.CS_ARCH_X86, Capstone.CS_MODE_32, Capstone.CS_OPT_SYNTAX_ATT, hexString2Byte(X86_CODE32), "X86 32 (AT&T syntax)"), new TestBasic.platform(Capstone.CS_ARCH_X86, Capstone.CS_MODE_32, hexString2Byte(X86_CODE32), "X86 32 (Intel syntax)"), new TestBasic.platform(Capstone.CS_ARCH_X86, Capstone.CS_MODE_64, hexString2Byte(X86_CODE64), "X86 64 (Intel syntax)"), }; for (int i=0; i