// Copyright (c) 2015-2017 Vector 35 LLC // // Permission is hereby granted, free of charge, to any person obtaining a copy // of this software and associated documentation files (the "Software"), to // deal in the Software without restriction, including without limitation the // rights to use, copy, modify, merge, publish, distribute, sublicense, and/or // sell copies of the Software, and to permit persons to whom the Software is // furnished to do so, subject to the following conditions: // // The above copyright notice and this permission notice shall be included in // all copies or substantial portions of the Software. // // THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR // IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, // FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE // AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER // LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING // FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS // IN THE SOFTWARE. #define _CRT_SECURE_NO_WARNINGS #include #include #include #include "binaryninjaapi.h" using namespace BinaryNinja; using namespace std; InstructionInfo::InstructionInfo() { length = 0; archTransitionByTargetAddr = false; branchCount = 0; branchDelay = false; } void InstructionInfo::AddBranch(BNBranchType type, uint64_t target, Architecture* arch, bool hasDelaySlot) { if (branchCount >= BN_MAX_INSTRUCTION_BRANCHES) return; branchDelay = hasDelaySlot; branchType[branchCount] = type; branchTarget[branchCount] = target; branchArch[branchCount++] = arch ? arch->GetObject() : nullptr; } InstructionTextToken::InstructionTextToken(): type(TextToken), value(0), confidence(BN_FULL_CONFIDENCE) { } InstructionTextToken::InstructionTextToken(BNInstructionTextTokenType t, const std::string& txt, uint64_t val, size_t s, size_t o, uint8_t c) : type(t), text(txt), value(val), size(s), operand(o), context(NoTokenContext), confidence(c), address(0) { } InstructionTextToken::InstructionTextToken(BNInstructionTextTokenType t, BNInstructionTextTokenContext ctxt, const string& txt, uint64_t a, uint64_t val, size_t s, size_t o, uint8_t c): type(t), text(txt), value(val), size(s), operand(o), context(ctxt), confidence(c), address(a) { } InstructionTextToken InstructionTextToken::WithConfidence(uint8_t conf) { return InstructionTextToken(type, context, text, address, value, size, operand, conf); } Architecture::Architecture(BNArchitecture* arch) { m_object = arch; } Architecture::Architecture(const string& name): m_nameForRegister(name) { m_object = nullptr; } void Architecture::InitCallback(void* ctxt, BNArchitecture* obj) { Architecture* arch = (Architecture*)ctxt; arch->m_object = obj; } BNEndianness Architecture::GetEndiannessCallback(void* ctxt) { Architecture* arch = (Architecture*)ctxt; return arch->GetEndianness(); } size_t Architecture::GetAddressSizeCallback(void* ctxt) { Architecture* arch = (Architecture*)ctxt; return arch->GetAddressSize(); } size_t Architecture::GetDefaultIntegerSizeCallback(void* ctxt) { Architecture* arch = (Architecture*)ctxt; return arch->GetDefaultIntegerSize(); } size_t Architecture::GetInstructionAlignmentCallback(void* ctxt) { Architecture* arch = (Architecture*)ctxt; return arch->GetInstructionAlignment(); } size_t Architecture::GetMaxInstructionLengthCallback(void* ctxt) { Architecture* arch = (Architecture*)ctxt; return arch->GetMaxInstructionLength(); } size_t Architecture::GetOpcodeDisplayLengthCallback(void* ctxt) { Architecture* arch = (Architecture*)ctxt; return arch->GetOpcodeDisplayLength(); } BNArchitecture* Architecture::GetAssociatedArchitectureByAddressCallback(void* ctxt, uint64_t* addr) { Architecture* arch = (Architecture*)ctxt; return arch->GetAssociatedArchitectureByAddress(*addr)->GetObject(); } bool Architecture::GetInstructionInfoCallback(void* ctxt, const uint8_t* data, uint64_t addr, size_t maxLen, BNInstructionInfo* result) { Architecture* arch = (Architecture*)ctxt; InstructionInfo info; bool ok = arch->GetInstructionInfo(data, addr, maxLen, info); *result = info; return ok; } bool Architecture::GetInstructionTextCallback(void* ctxt, const uint8_t* data, uint64_t addr, size_t* len, BNInstructionTextToken** result, size_t* count) { Architecture* arch = (Architecture*)ctxt; vector tokens; bool ok = arch->GetInstructionText(data, addr, *len, tokens); if (!ok) { *result = nullptr; *count = 0; return false; } *count = tokens.size(); *result = new BNInstructionTextToken[tokens.size()]; for (size_t i = 0; i < tokens.size(); i++) { (*result)[i].type = tokens[i].type; (*result)[i].text = BNAllocString(tokens[i].text.c_str()); (*result)[i].value = tokens[i].value; (*result)[i].size = tokens[i].size; (*result)[i].operand = tokens[i].operand; (*result)[i].context = tokens[i].context; (*result)[i].confidence = tokens[i].confidence; (*result)[i].address = tokens[i].address; } return true; } void Architecture::FreeInstructionTextCallback(BNInstructionTextToken* tokens, size_t count) { for (size_t i = 0; i < count; i++) BNFreeString(tokens[i].text); delete[] tokens; } bool Architecture::GetInstructionLowLevelILCallback(void* ctxt, const uint8_t* data, uint64_t addr, size_t* len, BNLowLevelILFunction* il) { Architecture* arch = (Architecture*)ctxt; Ref func(new LowLevelILFunction(BNNewLowLevelILFunctionReference(il))); return arch->GetInstructionLowLevelIL(data, addr, *len, *func); } char* Architecture::GetRegisterNameCallback(void* ctxt, uint32_t reg) { Architecture* arch = (Architecture*)ctxt; string result = arch->GetRegisterName(reg); return BNAllocString(result.c_str()); } char* Architecture::GetFlagNameCallback(void* ctxt, uint32_t flag) { Architecture* arch = (Architecture*)ctxt; string result = arch->GetFlagName(flag); return BNAllocString(result.c_str()); } char* Architecture::GetFlagWriteTypeNameCallback(void* ctxt, uint32_t flags) { Architecture* arch = (Architecture*)ctxt; string result = arch->GetFlagWriteTypeName(flags); return BNAllocString(result.c_str()); } char* Architecture::GetSemanticFlagClassNameCallback(void* ctxt, uint32_t semClass) { Architecture* arch = (Architecture*)ctxt; string result = arch->GetSemanticFlagClassName(semClass); return BNAllocString(result.c_str()); } char* Architecture::GetSemanticFlagGroupNameCallback(void* ctxt, uint32_t semGroup) { Architecture* arch = (Architecture*)ctxt; string result = arch->GetSemanticFlagGroupName(semGroup); return BNAllocString(result.c_str()); } uint32_t* Architecture::GetFullWidthRegistersCallback(void* ctxt, size_t* count) { Architecture* arch = (Architecture*)ctxt; vector regs = arch->GetFullWidthRegisters(); *count = regs.size(); uint32_t* result = new uint32_t[regs.size()]; for (size_t i = 0; i < regs.size(); i++) result[i] = regs[i]; return result; } uint32_t* Architecture::GetAllRegistersCallback(void* ctxt, size_t* count) { Architecture* arch = (Architecture*)ctxt; vector regs = arch->GetAllRegisters(); *count = regs.size(); uint32_t* result = new uint32_t[regs.size()]; for (size_t i = 0; i < regs.size(); i++) result[i] = regs[i]; return result; } uint32_t* Architecture::GetAllFlagsCallback(void* ctxt, size_t* count) { Architecture* arch = (Architecture*)ctxt; vector regs = arch->GetAllFlags(); *count = regs.size(); uint32_t* result = new uint32_t[regs.size()]; for (size_t i = 0; i < regs.size(); i++) result[i] = regs[i]; return result; } uint32_t* Architecture::GetAllFlagWriteTypesCallback(void* ctxt, size_t* count) { Architecture* arch = (Architecture*)ctxt; vector regs = arch->GetAllFlagWriteTypes(); *count = regs.size(); uint32_t* result = new uint32_t[regs.size()]; for (size_t i = 0; i < regs.size(); i++) result[i] = regs[i]; return result; } uint32_t* Architecture::GetAllSemanticFlagClassesCallback(void* ctxt, size_t* count) { Architecture* arch = (Architecture*)ctxt; vector regs = arch->GetAllSemanticFlagClasses(); *count = regs.size(); uint32_t* result = new uint32_t[regs.size()]; for (size_t i = 0; i < regs.size(); i++) result[i] = regs[i]; return result; } uint32_t* Architecture::GetAllSemanticFlagGroupsCallback(void* ctxt, size_t* count) { Architecture* arch = (Architecture*)ctxt; vector regs = arch->GetAllSemanticFlagGroups(); *count = regs.size(); uint32_t* result = new uint32_t[regs.size()]; for (size_t i = 0; i < regs.size(); i++) result[i] = regs[i]; return result; } BNFlagRole Architecture::GetFlagRoleCallback(void* ctxt, uint32_t flag, uint32_t semClass) { Architecture* arch = (Architecture*)ctxt; return arch->GetFlagRole(flag, semClass); } uint32_t* Architecture::GetFlagsRequiredForFlagConditionCallback(void* ctxt, BNLowLevelILFlagCondition cond, uint32_t semClass, size_t* count) { Architecture* arch = (Architecture*)ctxt; vector flags = arch->GetFlagsRequiredForFlagCondition(cond, semClass); *count = flags.size(); uint32_t* result = new uint32_t[flags.size()]; for (size_t i = 0; i < flags.size(); i++) result[i] = flags[i]; return result; } uint32_t* Architecture::GetFlagsRequiredForSemanticFlagGroupCallback(void* ctxt, uint32_t semGroup, size_t* count) { Architecture* arch = (Architecture*)ctxt; vector flags = arch->GetFlagsRequiredForSemanticFlagGroup(semGroup); *count = flags.size(); uint32_t* result = new uint32_t[flags.size()]; for (size_t i = 0; i < flags.size(); i++) result[i] = flags[i]; return result; } BNFlagConditionForSemanticClass* Architecture::GetFlagConditionsForSemanticFlagGroupCallback(void* ctxt, uint32_t semGroup, size_t* count) { Architecture* arch = (Architecture*)ctxt; map conditions = arch->GetFlagConditionsForSemanticFlagGroup(semGroup); *count = conditions.size(); BNFlagConditionForSemanticClass* result = new BNFlagConditionForSemanticClass[conditions.size()]; size_t i = 0; for (auto& j : conditions) { result[i].semanticClass = j.first; result[i].condition = j.second; i++; } return result; } void Architecture::FreeFlagConditionsForSemanticFlagGroupCallback(void*, BNFlagConditionForSemanticClass* conditions) { delete[] conditions; } uint32_t* Architecture::GetFlagsWrittenByFlagWriteTypeCallback(void* ctxt, uint32_t writeType, size_t* count) { Architecture* arch = (Architecture*)ctxt; vector flags = arch->GetFlagsWrittenByFlagWriteType(writeType); *count = flags.size(); uint32_t* result = new uint32_t[flags.size()]; for (size_t i = 0; i < flags.size(); i++) result[i] = flags[i]; return result; } uint32_t Architecture::GetSemanticClassForFlagWriteTypeCallback(void* ctxt, uint32_t writeType) { Architecture* arch = (Architecture*)ctxt; return arch->GetSemanticClassForFlagWriteType(writeType); } size_t Architecture::GetFlagWriteLowLevelILCallback(void* ctxt, BNLowLevelILOperation op, size_t size, uint32_t flagWriteType, uint32_t flag, BNRegisterOrConstant* operands, size_t operandCount, BNLowLevelILFunction* il) { Architecture* arch = (Architecture*)ctxt; Ref func(new LowLevelILFunction(BNNewLowLevelILFunctionReference(il))); return arch->GetFlagWriteLowLevelIL(op, size, flagWriteType, flag, operands, operandCount, *func); } size_t Architecture::GetFlagConditionLowLevelILCallback(void* ctxt, BNLowLevelILFlagCondition cond, uint32_t semClass, BNLowLevelILFunction* il) { Architecture* arch = (Architecture*)ctxt; Ref func(new LowLevelILFunction(BNNewLowLevelILFunctionReference(il))); return arch->GetFlagConditionLowLevelIL(cond, semClass, *func); } size_t Architecture::GetSemanticFlagGroupLowLevelILCallback(void* ctxt, uint32_t semGroup, BNLowLevelILFunction* il) { Architecture* arch = (Architecture*)ctxt; Ref func(new LowLevelILFunction(BNNewLowLevelILFunctionReference(il))); return arch->GetSemanticFlagGroupLowLevelIL(semGroup, *func); } void Architecture::FreeRegisterListCallback(void*, uint32_t* regs) { delete[] regs; } void Architecture::GetRegisterInfoCallback(void* ctxt, uint32_t reg, BNRegisterInfo* result) { Architecture* arch = (Architecture*)ctxt; *result = arch->GetRegisterInfo(reg); } uint32_t Architecture::GetStackPointerRegisterCallback(void* ctxt) { Architecture* arch = (Architecture*)ctxt; return arch->GetStackPointerRegister(); } uint32_t Architecture::GetLinkRegisterCallback(void* ctxt) { Architecture* arch = (Architecture*)ctxt; return arch->GetLinkRegister(); } uint32_t* Architecture::GetGlobalRegistersCallback(void* ctxt, size_t* count) { Architecture* arch = (Architecture*)ctxt; vector regs = arch->GetGlobalRegisters(); *count = regs.size(); uint32_t* result = new uint32_t[regs.size()]; for (size_t i = 0; i < regs.size(); i++) result[i] = regs[i]; return result; } char* Architecture::GetRegisterStackNameCallback(void* ctxt, uint32_t regStack) { Architecture* arch = (Architecture*)ctxt; string result = arch->GetRegisterStackName(regStack); return BNAllocString(result.c_str()); } uint32_t* Architecture::GetAllRegisterStacksCallback(void* ctxt, size_t* count) { Architecture* arch = (Architecture*)ctxt; vector regs = arch->GetAllRegisterStacks(); *count = regs.size(); uint32_t* result = new uint32_t[regs.size()]; for (size_t i = 0; i < regs.size(); i++) result[i] = regs[i]; return result; } void Architecture::GetRegisterStackInfoCallback(void* ctxt, uint32_t regStack, BNRegisterStackInfo* result) { Architecture* arch = (Architecture*)ctxt; *result = arch->GetRegisterStackInfo(regStack); } char* Architecture::GetIntrinsicNameCallback(void* ctxt, uint32_t intrinsic) { Architecture* arch = (Architecture*)ctxt; string result = arch->GetIntrinsicName(intrinsic); return BNAllocString(result.c_str()); } uint32_t* Architecture::GetAllIntrinsicsCallback(void* ctxt, size_t* count) { Architecture* arch = (Architecture*)ctxt; vector regs = arch->GetAllIntrinsics(); *count = regs.size(); uint32_t* result = new uint32_t[regs.size()]; for (size_t i = 0; i < regs.size(); i++) result[i] = regs[i]; return result; } BNNameAndType* Architecture::GetIntrinsicInputsCallback(void* ctxt, uint32_t intrinsic, size_t* count) { Architecture* arch = (Architecture*)ctxt; vector inputs = arch->GetIntrinsicInputs(intrinsic); *count = inputs.size(); BNNameAndType* result = new BNNameAndType[inputs.size()]; for (size_t i = 0; i < inputs.size(); i++) { result[i].name = BNAllocString(inputs[i].name.c_str()); result[i].type = BNNewTypeReference(inputs[i].type.GetValue()->GetObject()); result[i].typeConfidence = inputs[i].type.GetConfidence(); } return result; } void Architecture::FreeNameAndTypeListCallback(void*, BNNameAndType* nt, size_t count) { for (size_t i = 0; i < count; i++) { BNFreeString(nt[i].name); BNFreeType(nt[i].type); } delete[] nt; } BNTypeWithConfidence* Architecture::GetIntrinsicOutputsCallback(void* ctxt, uint32_t intrinsic, size_t* count) { Architecture* arch = (Architecture*)ctxt; vector>> outputs = arch->GetIntrinsicOutputs(intrinsic); *count = outputs.size(); BNTypeWithConfidence* result = new BNTypeWithConfidence[outputs.size()]; for (size_t i = 0; i < outputs.size(); i++) { result[i].type = BNNewTypeReference(outputs[i].GetValue()->GetObject()); result[i].confidence = outputs[i].GetConfidence(); } return result; } void Architecture::FreeTypeListCallback(void*, BNTypeWithConfidence* types, size_t count) { for (size_t i = 0; i < count; i++) BNFreeType(types[i].type); delete[] types; } bool Architecture::AssembleCallback(void* ctxt, const char* code, uint64_t addr, BNDataBuffer* result, char** errors) { Architecture* arch = (Architecture*)ctxt; DataBuffer buf; string errorStr; bool ok = arch->Assemble(code, addr, buf, errorStr); BNSetDataBufferContents(result, buf.GetData(), buf.GetLength()); *errors = BNAllocString(errorStr.c_str()); return ok; } bool Architecture::IsNeverBranchPatchAvailableCallback(void* ctxt, const uint8_t* data, uint64_t addr, size_t len) { Architecture* arch = (Architecture*)ctxt; return arch->IsNeverBranchPatchAvailable(data, addr, len); } bool Architecture::IsAlwaysBranchPatchAvailableCallback(void* ctxt, const uint8_t* data, uint64_t addr, size_t len) { Architecture* arch = (Architecture*)ctxt; return arch->IsAlwaysBranchPatchAvailable(data, addr, len); } bool Architecture::IsInvertBranchPatchAvailableCallback(void* ctxt, const uint8_t* data, uint64_t addr, size_t len) { Architecture* arch = (Architecture*)ctxt; return arch->IsInvertBranchPatchAvailable(data, addr, len); } bool Architecture::IsSkipAndReturnZeroPatchAvailableCallback(void* ctxt, const uint8_t* data, uint64_t addr, size_t len) { Architecture* arch = (Architecture*)ctxt; return arch->IsSkipAndReturnZeroPatchAvailable(data, addr, len); } bool Architecture::IsSkipAndReturnValuePatchAvailableCallback(void* ctxt, const uint8_t* data, uint64_t addr, size_t len) { Architecture* arch = (Architecture*)ctxt; return arch->IsSkipAndReturnValuePatchAvailable(data, addr, len); } bool Architecture::ConvertToNopCallback(void* ctxt, uint8_t* data, uint64_t addr, size_t len) { Architecture* arch = (Architecture*)ctxt; return arch->ConvertToNop(data, addr, len); } bool Architecture::AlwaysBranchCallback(void* ctxt, uint8_t* data, uint64_t addr, size_t len) { Architecture* arch = (Architecture*)ctxt; return arch->AlwaysBranch(data, addr, len); } bool Architecture::InvertBranchCallback(void* ctxt, uint8_t* data, uint64_t addr, size_t len) { Architecture* arch = (Architecture*)ctxt; return arch->InvertBranch(data, addr, len); } bool Architecture::SkipAndReturnValueCallback(void* ctxt, uint8_t* data, uint64_t addr, size_t len, uint64_t value) { Architecture* arch = (Architecture*)ctxt; return arch->SkipAndReturnValue(data, addr, len, value); } void Architecture::Register(BNCustomArchitecture* callbacks) { AddRefForRegistration(); BNRegisterArchitecture(m_nameForRegister.c_str(), callbacks); } void Architecture::Register(Architecture* arch) { BNCustomArchitecture callbacks; callbacks.context = arch; callbacks.init = InitCallback; callbacks.getEndianness = GetEndiannessCallback; callbacks.getAddressSize = GetAddressSizeCallback; callbacks.getDefaultIntegerSize = GetDefaultIntegerSizeCallback; callbacks.getInstructionAlignment = GetInstructionAlignmentCallback; callbacks.getMaxInstructionLength = GetMaxInstructionLengthCallback; callbacks.getOpcodeDisplayLength = GetOpcodeDisplayLengthCallback; callbacks.getAssociatedArchitectureByAddress = GetAssociatedArchitectureByAddressCallback; callbacks.getInstructionInfo = GetInstructionInfoCallback; callbacks.getInstructionText = GetInstructionTextCallback; callbacks.freeInstructionText = FreeInstructionTextCallback; callbacks.getInstructionLowLevelIL = GetInstructionLowLevelILCallback; callbacks.getRegisterName = GetRegisterNameCallback; callbacks.getFlagName = GetFlagNameCallback; callbacks.getFlagWriteTypeName = GetFlagWriteTypeNameCallback; callbacks.getSemanticFlagClassName = GetSemanticFlagClassNameCallback; callbacks.getSemanticFlagGroupName = GetSemanticFlagGroupNameCallback; callbacks.getFullWidthRegisters = GetFullWidthRegistersCallback; callbacks.getAllRegisters = GetAllRegistersCallback; callbacks.getAllFlags = GetAllFlagsCallback; callbacks.getAllFlagWriteTypes = GetAllFlagWriteTypesCallback; callbacks.getAllSemanticFlagClasses = GetAllSemanticFlagClassesCallback; callbacks.getAllSemanticFlagGroups = GetAllSemanticFlagGroupsCallback; callbacks.getFlagRole = GetFlagRoleCallback; callbacks.getFlagsRequiredForFlagCondition = GetFlagsRequiredForFlagConditionCallback; callbacks.getFlagsRequiredForSemanticFlagGroup = GetFlagsRequiredForSemanticFlagGroupCallback; callbacks.getFlagConditionsForSemanticFlagGroup = GetFlagConditionsForSemanticFlagGroupCallback; callbacks.freeFlagConditionsForSemanticFlagGroup = FreeFlagConditionsForSemanticFlagGroupCallback; callbacks.getFlagsWrittenByFlagWriteType = GetFlagsWrittenByFlagWriteTypeCallback; callbacks.getSemanticClassForFlagWriteType = GetSemanticClassForFlagWriteTypeCallback; callbacks.getFlagWriteLowLevelIL = GetFlagWriteLowLevelILCallback; callbacks.getFlagConditionLowLevelIL = GetFlagConditionLowLevelILCallback; callbacks.getSemanticFlagGroupLowLevelIL = GetSemanticFlagGroupLowLevelILCallback; callbacks.freeRegisterList = FreeRegisterListCallback; callbacks.getRegisterInfo = GetRegisterInfoCallback; callbacks.getStackPointerRegister = GetStackPointerRegisterCallback; callbacks.getLinkRegister = GetLinkRegisterCallback; callbacks.getGlobalRegisters = GetGlobalRegistersCallback; callbacks.getRegisterStackName = GetRegisterStackNameCallback; callbacks.getAllRegisterStacks = GetAllRegisterStacksCallback; callbacks.getRegisterStackInfo = GetRegisterStackInfoCallback; callbacks.getIntrinsicName = GetIntrinsicNameCallback; callbacks.getAllIntrinsics = GetAllIntrinsicsCallback; callbacks.getIntrinsicInputs = GetIntrinsicInputsCallback; callbacks.freeNameAndTypeList = FreeNameAndTypeListCallback; callbacks.getIntrinsicOutputs = GetIntrinsicOutputsCallback; callbacks.freeTypeList = FreeTypeListCallback; callbacks.assemble = AssembleCallback; callbacks.isNeverBranchPatchAvailable = IsNeverBranchPatchAvailableCallback; callbacks.isAlwaysBranchPatchAvailable = IsAlwaysBranchPatchAvailableCallback; callbacks.isInvertBranchPatchAvailable = IsInvertBranchPatchAvailableCallback; callbacks.isSkipAndReturnZeroPatchAvailable = IsSkipAndReturnZeroPatchAvailableCallback; callbacks.isSkipAndReturnValuePatchAvailable = IsSkipAndReturnValuePatchAvailableCallback; callbacks.convertToNop = ConvertToNopCallback; callbacks.alwaysBranch = AlwaysBranchCallback; callbacks.invertBranch = InvertBranchCallback; callbacks.skipAndReturnValue = SkipAndReturnValueCallback; arch->Register(&callbacks); } Ref Architecture::GetByName(const string& name) { BNArchitecture* arch = BNGetArchitectureByName(name.c_str()); if (!arch) return nullptr; return new CoreArchitecture(arch); } vector> Architecture::GetList() { BNArchitecture** archs; size_t count; archs = BNGetArchitectureList(&count); vector> result; result.reserve(count); for (size_t i = 0; i < count; i++) result.push_back(new CoreArchitecture(archs[i])); BNFreeArchitectureList(archs); return result; } string Architecture::GetName() const { char* name = BNGetArchitectureName(m_object); string result = name; BNFreeString(name); return result; } size_t Architecture::GetDefaultIntegerSize() const { if (GetAddressSize() < 4) return GetAddressSize(); return 4; } size_t Architecture::GetInstructionAlignment() const { return 1; } size_t Architecture::GetMaxInstructionLength() const { return BN_DEFAULT_NSTRUCTION_LENGTH; } size_t Architecture::GetOpcodeDisplayLength() const { size_t maxLen = GetMaxInstructionLength(); if (maxLen < BN_DEFAULT_OPCODE_DISPLAY) return maxLen; return BN_DEFAULT_OPCODE_DISPLAY; } Ref Architecture::GetAssociatedArchitectureByAddress(uint64_t&) { return this; } bool Architecture::GetInstructionLowLevelIL(const uint8_t*, uint64_t, size_t&, LowLevelILFunction& il) { il.AddInstruction(il.Undefined()); return false; } string Architecture::GetRegisterName(uint32_t reg) { char regStr[32]; sprintf(regStr, "r%" PRIu32, reg); return regStr; } string Architecture::GetFlagName(uint32_t flag) { char flagStr[32]; sprintf(flagStr, "flag%" PRIu32, flag); return flagStr; } string Architecture::GetFlagWriteTypeName(uint32_t flags) { char flagStr[32]; sprintf(flagStr, "update%" PRIu32, flags); return flagStr; } string Architecture::GetSemanticFlagClassName(uint32_t semClass) { if (semClass == 0) return ""; char flagStr[32]; sprintf(flagStr, "semantic%" PRIu32, semClass); return flagStr; } string Architecture::GetSemanticFlagGroupName(uint32_t semGroup) { char flagStr[32]; sprintf(flagStr, "group%" PRIu32, semGroup); return flagStr; } vector Architecture::GetFullWidthRegisters() { return vector(); } vector Architecture::GetAllRegisters() { return vector(); } vector Architecture::GetAllFlags() { return vector(); } vector Architecture::GetAllFlagWriteTypes() { return vector(); } vector Architecture::GetAllSemanticFlagClasses() { return vector(); } vector Architecture::GetAllSemanticFlagGroups() { return vector(); } BNFlagRole Architecture::GetFlagRole(uint32_t, uint32_t) { return SpecialFlagRole; } vector Architecture::GetFlagsRequiredForFlagCondition(BNLowLevelILFlagCondition, uint32_t) { return vector(); } vector Architecture::GetFlagsRequiredForSemanticFlagGroup(uint32_t) { return vector(); } map Architecture::GetFlagConditionsForSemanticFlagGroup(uint32_t) { return map(); } vector Architecture::GetFlagsWrittenByFlagWriteType(uint32_t) { return vector(); } uint32_t Architecture::GetSemanticClassForFlagWriteType(uint32_t) { return 0; } size_t Architecture::GetFlagWriteLowLevelIL(BNLowLevelILOperation op, size_t size, uint32_t flagWriteType, uint32_t flag, BNRegisterOrConstant* operands, size_t operandCount,LowLevelILFunction& il) { BNFlagRole role = GetFlagRole(flag, GetSemanticClassForFlagWriteType(flagWriteType)); return BNGetDefaultArchitectureFlagWriteLowLevelIL(m_object, op, size, role, operands, operandCount, il.GetObject()); } size_t Architecture::GetDefaultFlagWriteLowLevelIL(BNLowLevelILOperation op, size_t size, BNFlagRole role, BNRegisterOrConstant* operands, size_t operandCount,LowLevelILFunction& il) { return BNGetDefaultArchitectureFlagWriteLowLevelIL(m_object, op, size, role, operands, operandCount, il.GetObject()); } ExprId Architecture::GetFlagConditionLowLevelIL(BNLowLevelILFlagCondition cond, uint32_t semClass, LowLevelILFunction& il) { return BNGetDefaultArchitectureFlagConditionLowLevelIL(m_object, cond, semClass, il.GetObject()); } ExprId Architecture::GetDefaultFlagConditionLowLevelIL(BNLowLevelILFlagCondition cond, uint32_t semClass, LowLevelILFunction& il) { return BNGetDefaultArchitectureFlagConditionLowLevelIL(m_object, cond, semClass, il.GetObject()); } ExprId Architecture::GetSemanticFlagGroupLowLevelIL(uint32_t, LowLevelILFunction& il) { return il.Unimplemented(); } BNRegisterInfo Architecture::GetRegisterInfo(uint32_t) { BNRegisterInfo result; result.fullWidthRegister = 0; result.offset = 0; result.size = 0; result.extend = NoExtend; return result; } uint32_t Architecture::GetStackPointerRegister() { return 0; } uint32_t Architecture::GetLinkRegister() { return BN_INVALID_REGISTER; } vector Architecture::GetGlobalRegisters() { return vector(); } bool Architecture::IsGlobalRegister(uint32_t reg) { return BNIsArchitectureGlobalRegister(m_object, reg); } string Architecture::GetRegisterStackName(uint32_t regStack) { char regStr[32]; sprintf(regStr, "reg_stack_%" PRIu32, regStack); return regStr; } vector Architecture::GetAllRegisterStacks() { return vector(); } BNRegisterStackInfo Architecture::GetRegisterStackInfo(uint32_t) { BNRegisterStackInfo result; result.firstStorageReg = BN_INVALID_REGISTER; result.topRelativeCount = BN_INVALID_REGISTER; result.storageCount = 0; result.topRelativeCount = 0; result.stackTopReg = BN_INVALID_REGISTER; return result; } uint32_t Architecture::GetRegisterStackForRegister(uint32_t reg) { return BNGetArchitectureRegisterStackForRegister(m_object, reg); } string Architecture::GetIntrinsicName(uint32_t intrinsic) { char intrinsicStr[32]; sprintf(intrinsicStr, "intrinsic_%" PRIu32, intrinsic); return intrinsicStr; } vector Architecture::GetAllIntrinsics() { return vector(); } vector Architecture::GetIntrinsicInputs(uint32_t) { return vector(); } vector>> Architecture::GetIntrinsicOutputs(uint32_t) { return vector>>(); } vector Architecture::GetModifiedRegistersOnWrite(uint32_t reg) { size_t count; uint32_t* regs = BNGetModifiedArchitectureRegistersOnWrite(m_object, reg, &count); vector result; result.reserve(count); for (size_t i = 0; i < count; i++) result.push_back(regs[i]); BNFreeRegisterList(regs); return result; } uint32_t Architecture::GetRegisterByName(const string& name) { return BNGetArchitectureRegisterByName(m_object, name.c_str()); } bool Architecture::Assemble(const std::string&, uint64_t, DataBuffer&, std::string& errors) { errors = "Architecture does not implement an assembler.\n"; return false; } bool Architecture::IsNeverBranchPatchAvailable(const uint8_t*, uint64_t, size_t) { return false; } bool Architecture::IsAlwaysBranchPatchAvailable(const uint8_t*, uint64_t, size_t) { return false; } bool Architecture::IsInvertBranchPatchAvailable(const uint8_t*, uint64_t, size_t) { return false; } bool Architecture::IsSkipAndReturnZeroPatchAvailable(const uint8_t*, uint64_t, size_t) { return false; } bool Architecture::IsSkipAndReturnValuePatchAvailable(const uint8_t*, uint64_t, size_t) { return false; } bool Architecture::ConvertToNop(uint8_t*, uint64_t, size_t) { return false; } bool Architecture::AlwaysBranch(uint8_t*, uint64_t, size_t) { return false; } bool Architecture::InvertBranch(uint8_t*, uint64_t, size_t) { return false; } bool Architecture::SkipAndReturnValue(uint8_t*, uint64_t, size_t, uint64_t) { return false; } void Architecture::RegisterFunctionRecognizer(FunctionRecognizer* recog) { FunctionRecognizer::RegisterArchitectureFunctionRecognizer(this, recog); } void Architecture::RegisterRelocationHandler(const string& viewName, RelocationHandler* handler) { BNArchitectureRegisterRelocationHandler(m_object, viewName.c_str(), handler->GetObject()); } Ref Architecture::GetRelocationHandler(const std::string& viewName) { return new CoreRelocationHandler(BNArchitectureGetRelocationHandler(m_object, viewName.c_str())); } bool Architecture::IsBinaryViewTypeConstantDefined(const string& type, const string& name) { return BNIsBinaryViewTypeArchitectureConstantDefined(m_object, type.c_str(), name.c_str()); } uint64_t Architecture::GetBinaryViewTypeConstant(const string& type, const string& name, uint64_t defaultValue) { return BNGetBinaryViewTypeArchitectureConstant(m_object, type.c_str(), name.c_str(), defaultValue); } void Architecture::SetBinaryViewTypeConstant(const string& type, const string& name, uint64_t value) { BNSetBinaryViewTypeArchitectureConstant(m_object, type.c_str(), name.c_str(), value); } void Architecture::RegisterCallingConvention(CallingConvention* cc) { BNRegisterCallingConvention(m_object, cc->GetObject()); } vector> Architecture::GetCallingConventions() { size_t count; BNCallingConvention** list = BNGetArchitectureCallingConventions(m_object, &count); vector> result; result.reserve(count); for (size_t i = 0; i < count; i++) result.push_back(new CoreCallingConvention(BNNewCallingConventionReference(list[i]))); BNFreeCallingConventionList(list, count); return result; } Ref Architecture::GetCallingConventionByName(const string& name) { BNCallingConvention* cc = BNGetArchitectureCallingConventionByName(m_object, name.c_str()); if (!cc) return nullptr; return new CoreCallingConvention(cc); } void Architecture::SetDefaultCallingConvention(CallingConvention* cc) { BNSetArchitectureDefaultCallingConvention(m_object, cc->GetObject()); } void Architecture::SetCdeclCallingConvention(CallingConvention* cc) { BNSetArchitectureCdeclCallingConvention(m_object, cc->GetObject()); } void Architecture::SetStdcallCallingConvention(CallingConvention* cc) { BNSetArchitectureStdcallCallingConvention(m_object, cc->GetObject()); } void Architecture::SetFastcallCallingConvention(CallingConvention* cc) { BNSetArchitectureFastcallCallingConvention(m_object, cc->GetObject()); } Ref Architecture::GetDefaultCallingConvention() { BNCallingConvention* cc = BNGetArchitectureDefaultCallingConvention(m_object); if (!cc) return nullptr; return new CoreCallingConvention(cc); } Ref Architecture::GetCdeclCallingConvention() { BNCallingConvention* cc = BNGetArchitectureCdeclCallingConvention(m_object); if (!cc) return nullptr; return new CoreCallingConvention(cc); } Ref Architecture::GetStdcallCallingConvention() { BNCallingConvention* cc = BNGetArchitectureStdcallCallingConvention(m_object); if (!cc) return nullptr; return new CoreCallingConvention(cc); } Ref Architecture::GetFastcallCallingConvention() { BNCallingConvention* cc = BNGetArchitectureFastcallCallingConvention(m_object); if (!cc) return nullptr; return new CoreCallingConvention(cc); } Ref Architecture::GetStandalonePlatform() { return new Platform(BNGetArchitectureStandalonePlatform(m_object)); } void Architecture::AddArchitectureRedirection(Architecture* from, Architecture* to) { BNAddArchitectureRedirection(m_object, from->GetObject(), to->GetObject()); } CoreArchitecture::CoreArchitecture(BNArchitecture* arch): Architecture(arch) { } BNEndianness CoreArchitecture::GetEndianness() const { return BNGetArchitectureEndianness(m_object); } size_t CoreArchitecture::GetAddressSize() const { return BNGetArchitectureAddressSize(m_object); } size_t CoreArchitecture::GetDefaultIntegerSize() const { return BNGetArchitectureDefaultIntegerSize(m_object); } size_t CoreArchitecture::GetInstructionAlignment() const { return BNGetArchitectureInstructionAlignment(m_object); } size_t CoreArchitecture::GetMaxInstructionLength() const { return BNGetArchitectureMaxInstructionLength(m_object); } size_t CoreArchitecture::GetOpcodeDisplayLength() const { return BNGetArchitectureOpcodeDisplayLength(m_object); } Ref CoreArchitecture::GetAssociatedArchitectureByAddress(uint64_t& addr) { return new CoreArchitecture(BNGetAssociatedArchitectureByAddress(m_object, &addr)); } bool CoreArchitecture::GetInstructionInfo(const uint8_t* data, uint64_t addr, size_t maxLen, InstructionInfo& result) { return BNGetInstructionInfo(m_object, data, addr, maxLen, &result); } bool CoreArchitecture::GetInstructionText(const uint8_t* data, uint64_t addr, size_t& len, std::vector& result) { BNInstructionTextToken* tokens = nullptr; size_t count = 0; if (!BNGetInstructionText(m_object, data, addr, &len, &tokens, &count)) return false; result.reserve(count); for (size_t i = 0; i < count; i++) { result.emplace_back(tokens[i].type, tokens[i].context, tokens[i].text, tokens[i].address, tokens[i].value, tokens[i].size, tokens[i].operand, tokens[i].confidence); } BNFreeInstructionText(tokens, count); return true; } bool CoreArchitecture::GetInstructionLowLevelIL(const uint8_t* data, uint64_t addr, size_t& len, LowLevelILFunction& il) { return BNGetInstructionLowLevelIL(m_object, data, addr, &len, il.GetObject()); } string CoreArchitecture::GetRegisterName(uint32_t reg) { char* name = BNGetArchitectureRegisterName(m_object, reg); string result = name; BNFreeString(name); return result; } string CoreArchitecture::GetFlagName(uint32_t flag) { char* name = BNGetArchitectureFlagName(m_object, flag); string result = name; BNFreeString(name); return result; } string CoreArchitecture::GetFlagWriteTypeName(uint32_t flags) { char* name = BNGetArchitectureFlagWriteTypeName(m_object, flags); string result = name; BNFreeString(name); return result; } string CoreArchitecture::GetSemanticFlagClassName(uint32_t semClass) { char* name = BNGetArchitectureSemanticFlagClassName(m_object, semClass); string result = name; BNFreeString(name); return result; } string CoreArchitecture::GetSemanticFlagGroupName(uint32_t semGroup) { char* name = BNGetArchitectureSemanticFlagGroupName(m_object, semGroup); string result = name; BNFreeString(name); return result; } vector CoreArchitecture::GetFullWidthRegisters() { size_t count; uint32_t* regs = BNGetFullWidthArchitectureRegisters(m_object, &count); vector result; result.reserve(count); for (size_t i = 0; i < count; i++) result.push_back(regs[i]); BNFreeRegisterList(regs); return result; } vector CoreArchitecture::GetAllRegisters() { size_t count; uint32_t* regs = BNGetAllArchitectureRegisters(m_object, &count); vector result; result.reserve(count); for (size_t i = 0; i < count; i++) result.push_back(regs[i]); BNFreeRegisterList(regs); return result; } vector CoreArchitecture::GetAllFlags() { size_t count; uint32_t* regs = BNGetAllArchitectureFlags(m_object, &count); vector result; result.reserve(count); for (size_t i = 0; i < count; i++) result.push_back(regs[i]); BNFreeRegisterList(regs); return result; } vector CoreArchitecture::GetAllFlagWriteTypes() { size_t count; uint32_t* regs = BNGetAllArchitectureFlagWriteTypes(m_object, &count); vector result; result.reserve(count); for (size_t i = 0; i < count; i++) result.push_back(regs[i]); BNFreeRegisterList(regs); return result; } vector CoreArchitecture::GetAllSemanticFlagClasses() { size_t count; uint32_t* regs = BNGetAllArchitectureSemanticFlagClasses(m_object, &count); vector result; for (size_t i = 0; i < count; i++) result.push_back(regs[i]); BNFreeRegisterList(regs); return result; } vector CoreArchitecture::GetAllSemanticFlagGroups() { size_t count; uint32_t* regs = BNGetAllArchitectureSemanticFlagGroups(m_object, &count); vector result; for (size_t i = 0; i < count; i++) result.push_back(regs[i]); BNFreeRegisterList(regs); return result; } BNFlagRole CoreArchitecture::GetFlagRole(uint32_t flag, uint32_t semClass) { return BNGetArchitectureFlagRole(m_object, flag, semClass); } vector CoreArchitecture::GetFlagsRequiredForFlagCondition(BNLowLevelILFlagCondition cond, uint32_t semClass) { size_t count; uint32_t* flags = BNGetArchitectureFlagsRequiredForFlagCondition(m_object, cond, semClass, &count); vector result; for (size_t i = 0; i < count; i++) result.push_back(flags[i]); BNFreeRegisterList(flags); return result; } vector CoreArchitecture::GetFlagsRequiredForSemanticFlagGroup(uint32_t semGroup) { size_t count; uint32_t* flags = BNGetArchitectureFlagsRequiredForSemanticFlagGroup(m_object, semGroup, &count); vector result; result.reserve(count); for (size_t i = 0; i < count; i++) result.push_back(flags[i]); BNFreeRegisterList(flags); return result; } map CoreArchitecture::GetFlagConditionsForSemanticFlagGroup(uint32_t semGroup) { size_t count; BNFlagConditionForSemanticClass* conditions = BNGetArchitectureFlagConditionsForSemanticFlagGroup(m_object, semGroup, &count); map result; for (size_t i = 0; i < count; i++) result[conditions[i].semanticClass] = conditions[i].condition; BNFreeFlagConditionsForSemanticFlagGroup(conditions); return result; } vector CoreArchitecture::GetFlagsWrittenByFlagWriteType(uint32_t writeType) { size_t count; uint32_t* flags = BNGetArchitectureFlagsWrittenByFlagWriteType(m_object, writeType, &count); vector result; result.reserve(count); for (size_t i = 0; i < count; i++) result.push_back(flags[i]); BNFreeRegisterList(flags); return result; } uint32_t CoreArchitecture::GetSemanticClassForFlagWriteType(uint32_t writeType) { return BNGetArchitectureSemanticClassForFlagWriteType(m_object, writeType); } size_t CoreArchitecture::GetFlagWriteLowLevelIL(BNLowLevelILOperation op, size_t size, uint32_t flagWriteType, uint32_t flag, BNRegisterOrConstant* operands, size_t operandCount, LowLevelILFunction& il) { return BNGetArchitectureFlagWriteLowLevelIL(m_object, op, size, flagWriteType, flag, operands, operandCount, il.GetObject()); } ExprId CoreArchitecture::GetFlagConditionLowLevelIL(BNLowLevelILFlagCondition cond, uint32_t semClass, LowLevelILFunction& il) { return (ExprId)BNGetArchitectureFlagConditionLowLevelIL(m_object, cond, semClass, il.GetObject()); } ExprId CoreArchitecture::GetSemanticFlagGroupLowLevelIL(uint32_t semGroup, LowLevelILFunction& il) { return (ExprId)BNGetArchitectureSemanticFlagGroupLowLevelIL(m_object, semGroup, il.GetObject()); } BNRegisterInfo CoreArchitecture::GetRegisterInfo(uint32_t reg) { return BNGetArchitectureRegisterInfo(m_object, reg); } uint32_t CoreArchitecture::GetStackPointerRegister() { return BNGetArchitectureStackPointerRegister(m_object); } uint32_t CoreArchitecture::GetLinkRegister() { return BNGetArchitectureLinkRegister(m_object); } vector CoreArchitecture::GetGlobalRegisters() { size_t count; uint32_t* regs = BNGetArchitectureGlobalRegisters(m_object, &count); vector result; result.reserve(count); for (size_t i = 0; i < count; i++) result.push_back(regs[i]); BNFreeRegisterList(regs); return result; } string CoreArchitecture::GetRegisterStackName(uint32_t regStack) { char* name = BNGetArchitectureRegisterStackName(m_object, regStack); string result = name; BNFreeString(name); return result; } vector CoreArchitecture::GetAllRegisterStacks() { size_t count; uint32_t* regs = BNGetAllArchitectureRegisterStacks(m_object, &count); vector result; for (size_t i = 0; i < count; i++) result.push_back(regs[i]); BNFreeRegisterList(regs); return result; } BNRegisterStackInfo CoreArchitecture::GetRegisterStackInfo(uint32_t regStack) { return BNGetArchitectureRegisterStackInfo(m_object, regStack); } string CoreArchitecture::GetIntrinsicName(uint32_t intrinsic) { char* name = BNGetArchitectureIntrinsicName(m_object, intrinsic); string result = name; BNFreeString(name); return result; } vector CoreArchitecture::GetAllIntrinsics() { size_t count; uint32_t* regs = BNGetAllArchitectureIntrinsics(m_object, &count); vector result; for (size_t i = 0; i < count; i++) result.push_back(regs[i]); BNFreeRegisterList(regs); return result; } vector CoreArchitecture::GetIntrinsicInputs(uint32_t intrinsic) { size_t count; BNNameAndType* inputs = BNGetArchitectureIntrinsicInputs(m_object, intrinsic, &count); vector result; for (size_t i = 0; i < count; i++) { result.push_back(NameAndType(inputs[i].name, Confidence>( new Type(BNNewTypeReference(inputs[i].type)), inputs[i].typeConfidence))); } BNFreeNameAndTypeList(inputs, count); return result; } vector>> CoreArchitecture::GetIntrinsicOutputs(uint32_t intrinsic) { size_t count; BNTypeWithConfidence* outputs = BNGetArchitectureIntrinsicOutputs(m_object, intrinsic, &count); vector>> result; for (size_t i = 0; i < count; i++) result.push_back(Confidence>(new Type(BNNewTypeReference(outputs[i].type)), outputs[i].confidence)); BNFreeOutputTypeList(outputs, count); return result; } bool CoreArchitecture::Assemble(const string& code, uint64_t addr, DataBuffer& result, string& errors) { char* errorStr = nullptr; bool ok = BNAssemble(m_object, code.c_str(), addr, result.GetBufferObject(), &errorStr); if (errorStr) { errors = errorStr; BNFreeString(errorStr); } return ok; } bool CoreArchitecture::IsNeverBranchPatchAvailable(const uint8_t* data, uint64_t addr, size_t len) { return BNIsArchitectureNeverBranchPatchAvailable(m_object, data, addr, len); } bool CoreArchitecture::IsAlwaysBranchPatchAvailable(const uint8_t* data, uint64_t addr, size_t len) { return BNIsArchitectureAlwaysBranchPatchAvailable(m_object, data, addr, len); } bool CoreArchitecture::IsInvertBranchPatchAvailable(const uint8_t* data, uint64_t addr, size_t len) { return BNIsArchitectureInvertBranchPatchAvailable(m_object, data, addr, len); } bool CoreArchitecture::IsSkipAndReturnZeroPatchAvailable(const uint8_t* data, uint64_t addr, size_t len) { return BNIsArchitectureSkipAndReturnZeroPatchAvailable(m_object, data, addr, len); } bool CoreArchitecture::IsSkipAndReturnValuePatchAvailable(const uint8_t* data, uint64_t addr, size_t len) { return BNIsArchitectureSkipAndReturnValuePatchAvailable(m_object, data, addr, len); } bool CoreArchitecture::ConvertToNop(uint8_t* data, uint64_t addr, size_t len) { return BNArchitectureConvertToNop(m_object, data, addr, len); } bool CoreArchitecture::AlwaysBranch(uint8_t* data, uint64_t addr, size_t len) { return BNArchitectureAlwaysBranch(m_object, data, addr, len); } bool CoreArchitecture::InvertBranch(uint8_t* data, uint64_t addr, size_t len) { return BNArchitectureInvertBranch(m_object, data, addr, len); } bool CoreArchitecture::SkipAndReturnValue(uint8_t* data, uint64_t addr, size_t len, uint64_t value) { return BNArchitectureSkipAndReturnValue(m_object, data, addr, len, value); } ArchitectureExtension::ArchitectureExtension(const string& name, Architecture* base): Architecture(name), m_base(base) { } void ArchitectureExtension::Register(BNCustomArchitecture* callbacks) { AddRefForRegistration(); BNRegisterArchitectureExtension(m_nameForRegister.c_str(), m_base->GetObject(), callbacks); } BNEndianness ArchitectureExtension::GetEndianness() const { return m_base->GetEndianness(); } size_t ArchitectureExtension::GetAddressSize() const { return m_base->GetAddressSize(); } size_t ArchitectureExtension::GetDefaultIntegerSize() const { return m_base->GetDefaultIntegerSize(); } size_t ArchitectureExtension::GetInstructionAlignment() const { return m_base->GetInstructionAlignment(); } size_t ArchitectureExtension::GetMaxInstructionLength() const { return m_base->GetMaxInstructionLength(); } size_t ArchitectureExtension::GetOpcodeDisplayLength() const { return m_base->GetOpcodeDisplayLength(); } Ref ArchitectureExtension::GetAssociatedArchitectureByAddress(uint64_t& addr) { Ref result = m_base->GetAssociatedArchitectureByAddress(addr); if (result == m_base) return this; return result; } bool ArchitectureExtension::GetInstructionInfo(const uint8_t* data, uint64_t addr, size_t maxLen, InstructionInfo& result) { return m_base->GetInstructionInfo(data, addr, maxLen, result); } bool ArchitectureExtension::GetInstructionText(const uint8_t* data, uint64_t addr, size_t& len, vector& result) { return m_base->GetInstructionText(data, addr, len, result); } bool ArchitectureExtension::GetInstructionLowLevelIL(const uint8_t* data, uint64_t addr, size_t& len, LowLevelILFunction& il) { return m_base->GetInstructionLowLevelIL(data, addr, len, il); } string ArchitectureExtension::GetRegisterName(uint32_t reg) { return m_base->GetRegisterName(reg); } string ArchitectureExtension::GetFlagName(uint32_t flag) { return m_base->GetFlagName(flag); } string ArchitectureExtension::GetFlagWriteTypeName(uint32_t flags) { return m_base->GetFlagWriteTypeName(flags); } string ArchitectureExtension::GetSemanticFlagClassName(uint32_t semClass) { return m_base->GetSemanticFlagClassName(semClass); } string ArchitectureExtension::GetSemanticFlagGroupName(uint32_t semGroup) { return m_base->GetSemanticFlagGroupName(semGroup); } vector ArchitectureExtension::GetFullWidthRegisters() { return m_base->GetFullWidthRegisters(); } vector ArchitectureExtension::GetAllRegisters() { return m_base->GetAllRegisters(); } vector ArchitectureExtension::GetAllFlags() { return m_base->GetAllFlags(); } vector ArchitectureExtension::GetAllFlagWriteTypes() { return m_base->GetAllFlagWriteTypes(); } vector ArchitectureExtension::GetAllSemanticFlagClasses() { return m_base->GetAllSemanticFlagClasses(); } vector ArchitectureExtension::GetAllSemanticFlagGroups() { return m_base->GetAllSemanticFlagGroups(); } BNFlagRole ArchitectureExtension::GetFlagRole(uint32_t flag, uint32_t semClass) { return m_base->GetFlagRole(flag, semClass); } vector ArchitectureExtension::GetFlagsRequiredForFlagCondition(BNLowLevelILFlagCondition cond, uint32_t semClass) { return m_base->GetFlagsRequiredForFlagCondition(cond, semClass); } vector ArchitectureExtension::GetFlagsRequiredForSemanticFlagGroup(uint32_t semGroup) { return m_base->GetFlagsRequiredForSemanticFlagGroup(semGroup); } map ArchitectureExtension::GetFlagConditionsForSemanticFlagGroup(uint32_t semGroup) { return m_base->GetFlagConditionsForSemanticFlagGroup(semGroup); } vector ArchitectureExtension::GetFlagsWrittenByFlagWriteType(uint32_t writeType) { return m_base->GetFlagsWrittenByFlagWriteType(writeType); } uint32_t ArchitectureExtension::GetSemanticClassForFlagWriteType(uint32_t writeType) { return m_base->GetSemanticClassForFlagWriteType(writeType); } ExprId ArchitectureExtension::GetFlagWriteLowLevelIL(BNLowLevelILOperation op, size_t size, uint32_t flagWriteType, uint32_t flag, BNRegisterOrConstant* operands, size_t operandCount, LowLevelILFunction& il) { return m_base->GetFlagWriteLowLevelIL(op, size, flagWriteType, flag, operands, operandCount, il); } ExprId ArchitectureExtension::GetFlagConditionLowLevelIL(BNLowLevelILFlagCondition cond, uint32_t semClass, LowLevelILFunction& il) { return m_base->GetFlagConditionLowLevelIL(cond, semClass, il); } ExprId ArchitectureExtension::GetSemanticFlagGroupLowLevelIL(uint32_t semGroup, LowLevelILFunction& il) { return m_base->GetSemanticFlagGroupLowLevelIL(semGroup, il); } BNRegisterInfo ArchitectureExtension::GetRegisterInfo(uint32_t reg) { return m_base->GetRegisterInfo(reg); } uint32_t ArchitectureExtension::GetStackPointerRegister() { return m_base->GetStackPointerRegister(); } uint32_t ArchitectureExtension::GetLinkRegister() { return m_base->GetLinkRegister(); } vector ArchitectureExtension::GetGlobalRegisters() { return m_base->GetGlobalRegisters(); } string ArchitectureExtension::GetRegisterStackName(uint32_t regStack) { return m_base->GetRegisterStackName(regStack); } vector ArchitectureExtension::GetAllRegisterStacks() { return m_base->GetAllRegisterStacks(); } BNRegisterStackInfo ArchitectureExtension::GetRegisterStackInfo(uint32_t regStack) { return m_base->GetRegisterStackInfo(regStack); } string ArchitectureExtension::GetIntrinsicName(uint32_t intrinsic) { return m_base->GetIntrinsicName(intrinsic); } vector ArchitectureExtension::GetAllIntrinsics() { return m_base->GetAllIntrinsics(); } vector ArchitectureExtension::GetIntrinsicInputs(uint32_t intrinsic) { return m_base->GetIntrinsicInputs(intrinsic); } vector>> ArchitectureExtension::GetIntrinsicOutputs(uint32_t intrinsic) { return m_base->GetIntrinsicOutputs(intrinsic); } bool ArchitectureExtension::Assemble(const string& code, uint64_t addr, DataBuffer& result, string& errors) { return m_base->Assemble(code, addr, result, errors); } bool ArchitectureExtension::IsNeverBranchPatchAvailable(const uint8_t* data, uint64_t addr, size_t len) { return m_base->IsNeverBranchPatchAvailable(data, addr, len); } bool ArchitectureExtension::IsAlwaysBranchPatchAvailable(const uint8_t* data, uint64_t addr, size_t len) { return m_base->IsAlwaysBranchPatchAvailable(data, addr, len); } bool ArchitectureExtension::IsInvertBranchPatchAvailable(const uint8_t* data, uint64_t addr, size_t len) { return m_base->IsInvertBranchPatchAvailable(data, addr, len); } bool ArchitectureExtension::IsSkipAndReturnZeroPatchAvailable(const uint8_t* data, uint64_t addr, size_t len) { return m_base->IsSkipAndReturnValuePatchAvailable(data, addr, len); } bool ArchitectureExtension::IsSkipAndReturnValuePatchAvailable(const uint8_t* data, uint64_t addr, size_t len) { return m_base->IsSkipAndReturnValuePatchAvailable(data, addr, len); } bool ArchitectureExtension::ConvertToNop(uint8_t* data, uint64_t addr, size_t len) { return m_base->ConvertToNop(data, addr, len); } bool ArchitectureExtension::AlwaysBranch(uint8_t* data, uint64_t addr, size_t len) { return m_base->AlwaysBranch(data, addr, len); } bool ArchitectureExtension::InvertBranch(uint8_t* data, uint64_t addr, size_t len) { return m_base->InvertBranch(data, addr, len); } bool ArchitectureExtension::SkipAndReturnValue(uint8_t* data, uint64_t addr, size_t len, uint64_t value) { return m_base->SkipAndReturnValue(data, addr, len, value); } ArchitectureHook::ArchitectureHook(Architecture* base): CoreArchitecture(nullptr), m_base(base) { // Architecture hooks allow existing architecture implementations to be extended without creating // a new Architecture object for the changes. By deriving from the ArchitectureHook class and passing // the original Architecture object of the architecture to be extended, any reimplemented functions // will be called first before the original architecture's implementation. You MUST call the base // class method to call the original implementation's version of the function, as calling the // same function on the original Architecture object will call your implementation again. // Example of a hook to modify the lifting process: // class ArchitectureHookExample: public ArchitectureHook // { // public: // ArchitectureHookExample(Architecture* existingArch) : ArchitectureHook(existingArch) // { // } // // virtual bool GetInstructionLowLevelIL(const uint8_t* data, uint64_t addr, size_t& len, // LowLevelILFunction& il) override // { // // Perform extra lifting here // // ... // // For unhandled cases, call the original architecture's implementation // return ArchitectureHook::GetInstructionLowLevelIL(data, addr, len, il); // } // }; } void ArchitectureHook::Register(BNCustomArchitecture* callbacks) { AddRefForRegistration(); m_object = BNRegisterArchitectureHook(m_base->GetObject(), callbacks); }