#define _CRT_SECURE_NO_WARNINGS #include #include #include "binaryninjaapi.h" using namespace BinaryNinja; using namespace std; InstructionInfo::InstructionInfo() { length = 0; branchCount = 0; } void InstructionInfo::AddBranch(BNBranchType type, uint64_t target, Architecture* arch, bool hasDelaySlot) { if (branchCount >= BN_MAX_INSTRUCTION_BRANCHES) return; branchDelay = hasDelaySlot; branchType[branchCount] = type; branchTarget[branchCount] = target; branchArch[branchCount++] = arch ? arch->GetArchitectureObject() : nullptr; } InstructionTextToken::InstructionTextToken(): type(TextToken), value(0) { } InstructionTextToken::InstructionTextToken(BNInstructionTextTokenType t, const std::string& txt, uint64_t val) : type(t), text(txt), value(val) { } Architecture::Architecture(BNArchitecture* arch): m_arch(arch) { } Architecture::Architecture(const string& name): m_nameForRegister(name) { } BNEndianness Architecture::GetEndiannessCallback(void* ctxt) { Architecture* arch = (Architecture*)ctxt; return arch->GetEndianness(); } size_t Architecture::GetAddressSizeCallback(void* ctxt) { Architecture* arch = (Architecture*)ctxt; return arch->GetAddressSize(); } size_t Architecture::GetDefaultIntegerSizeCallback(void* ctxt) { Architecture* arch = (Architecture*)ctxt; return arch->GetDefaultIntegerSize(); } bool Architecture::GetInstructionInfoCallback(void* ctxt, const uint8_t* data, uint64_t addr, size_t maxLen, BNInstructionInfo* result) { Architecture* arch = (Architecture*)ctxt; InstructionInfo info; bool ok = arch->GetInstructionInfo(data, addr, maxLen, info); *result = info; return ok; } bool Architecture::GetInstructionTextCallback(void* ctxt, const uint8_t* data, uint64_t addr, size_t* len, BNInstructionTextToken** result, size_t* count) { Architecture* arch = (Architecture*)ctxt; vector tokens; bool ok = arch->GetInstructionText(data, addr, *len, tokens); if (!ok) { *result = nullptr; *count = 0; return false; } *count = tokens.size(); *result = new BNInstructionTextToken[tokens.size()]; for (size_t i = 0; i < tokens.size(); i++) { (*result)[i].type = tokens[i].type; (*result)[i].text = BNAllocString(tokens[i].text.c_str()); (*result)[i].value = tokens[i].value; } return true; } void Architecture::FreeInstructionTextCallback(BNInstructionTextToken* tokens, size_t count) { for (size_t i = 0; i < count; i++) BNFreeString(tokens[i].text); delete[] tokens; } bool Architecture::GetInstructionLowLevelILCallback(void* ctxt, const uint8_t* data, uint64_t addr, size_t* len, BNLowLevelILFunction* il) { Architecture* arch = (Architecture*)ctxt; LowLevelILFunction func(BNNewLowLevelILFunctionReference(il)); return arch->GetInstructionLowLevelIL(data, addr, *len, func); } char* Architecture::GetRegisterNameCallback(void* ctxt, uint32_t reg) { Architecture* arch = (Architecture*)ctxt; string result = arch->GetRegisterName(reg); return BNAllocString(result.c_str()); } char* Architecture::GetFlagNameCallback(void* ctxt, uint32_t flag) { Architecture* arch = (Architecture*)ctxt; string result = arch->GetFlagName(flag); return BNAllocString(result.c_str()); } char* Architecture::GetFlagWriteTypeNameCallback(void* ctxt, uint32_t flags) { Architecture* arch = (Architecture*)ctxt; string result = arch->GetFlagWriteTypeName(flags); return BNAllocString(result.c_str()); } uint32_t* Architecture::GetFullWidthRegistersCallback(void* ctxt, size_t* count) { Architecture* arch = (Architecture*)ctxt; vector regs = arch->GetFullWidthRegisters(); *count = regs.size(); uint32_t* result = new uint32_t[regs.size()]; for (size_t i = 0; i < regs.size(); i++) result[i] = regs[i]; return result; } uint32_t* Architecture::GetAllRegistersCallback(void* ctxt, size_t* count) { Architecture* arch = (Architecture*)ctxt; vector regs = arch->GetAllRegisters(); *count = regs.size(); uint32_t* result = new uint32_t[regs.size()]; for (size_t i = 0; i < regs.size(); i++) result[i] = regs[i]; return result; } void Architecture::FreeRegisterListCallback(void*, uint32_t* regs) { delete[] regs; } BNRegisterInfo Architecture::GetRegisterInfoCallback(void* ctxt, uint32_t reg) { Architecture* arch = (Architecture*)ctxt; return arch->GetRegisterInfo(reg); } uint32_t Architecture::GetStackPointerRegisterCallback(void* ctxt) { Architecture* arch = (Architecture*)ctxt; return arch->GetStackPointerRegister(); } bool Architecture::AssembleCallback(void* ctxt, const char* code, uint64_t addr, BNDataBuffer* result, char** errors) { Architecture* arch = (Architecture*)ctxt; DataBuffer buf; string errorStr; bool ok = arch->Assemble(code, addr, buf, errorStr); BNSetDataBufferContents(result, buf.GetData(), buf.GetLength()); *errors = BNAllocString(errorStr.c_str()); return ok; } bool Architecture::IsNeverBranchPatchAvailableCallback(void* ctxt, const uint8_t* data, uint64_t addr, size_t len) { Architecture* arch = (Architecture*)ctxt; return arch->IsNeverBranchPatchAvailable(data, addr, len); } bool Architecture::IsAlwaysBranchPatchAvailableCallback(void* ctxt, const uint8_t* data, uint64_t addr, size_t len) { Architecture* arch = (Architecture*)ctxt; return arch->IsAlwaysBranchPatchAvailable(data, addr, len); } bool Architecture::IsInvertBranchPatchAvailableCallback(void* ctxt, const uint8_t* data, uint64_t addr, size_t len) { Architecture* arch = (Architecture*)ctxt; return arch->IsInvertBranchPatchAvailable(data, addr, len); } bool Architecture::IsSkipAndReturnZeroPatchAvailableCallback(void* ctxt, const uint8_t* data, uint64_t addr, size_t len) { Architecture* arch = (Architecture*)ctxt; return arch->IsSkipAndReturnZeroPatchAvailable(data, addr, len); } bool Architecture::IsSkipAndReturnValuePatchAvailableCallback(void* ctxt, const uint8_t* data, uint64_t addr, size_t len) { Architecture* arch = (Architecture*)ctxt; return arch->IsSkipAndReturnValuePatchAvailable(data, addr, len); } bool Architecture::ConvertToNopCallback(void* ctxt, uint8_t* data, uint64_t addr, size_t len) { Architecture* arch = (Architecture*)ctxt; return arch->ConvertToNop(data, addr, len); } bool Architecture::AlwaysBranchCallback(void* ctxt, uint8_t* data, uint64_t addr, size_t len) { Architecture* arch = (Architecture*)ctxt; return arch->AlwaysBranch(data, addr, len); } bool Architecture::InvertBranchCallback(void* ctxt, uint8_t* data, uint64_t addr, size_t len) { Architecture* arch = (Architecture*)ctxt; return arch->InvertBranch(data, addr, len); } bool Architecture::SkipAndReturnValueCallback(void* ctxt, uint8_t* data, uint64_t addr, size_t len, uint64_t value) { Architecture* arch = (Architecture*)ctxt; return arch->SkipAndReturnValue(data, addr, len, value); } void Architecture::Register(Architecture* arch) { BNCustomArchitecture callbacks; callbacks.context = arch; callbacks.getEndianness = GetEndiannessCallback; callbacks.getAddressSize = GetAddressSizeCallback; callbacks.getDefaultIntegerSize = GetDefaultIntegerSizeCallback; callbacks.getInstructionInfo = GetInstructionInfoCallback; callbacks.getInstructionText = GetInstructionTextCallback; callbacks.freeInstructionText = FreeInstructionTextCallback; callbacks.getInstructionLowLevelIL = GetInstructionLowLevelILCallback; callbacks.getRegisterName = GetRegisterNameCallback; callbacks.getFlagName = GetFlagNameCallback; callbacks.getFlagWriteTypeName = GetFlagWriteTypeNameCallback; callbacks.getFullWidthRegisters = GetFullWidthRegistersCallback; callbacks.getAllRegisters = GetAllRegistersCallback; callbacks.freeRegisterList = FreeRegisterListCallback; callbacks.getRegisterInfo = GetRegisterInfoCallback; callbacks.getStackPointerRegister = GetStackPointerRegisterCallback; callbacks.assemble = AssembleCallback; callbacks.isNeverBranchPatchAvailable = IsNeverBranchPatchAvailableCallback; callbacks.isAlwaysBranchPatchAvailable = IsAlwaysBranchPatchAvailableCallback; callbacks.isInvertBranchPatchAvailable = IsInvertBranchPatchAvailableCallback; callbacks.isSkipAndReturnZeroPatchAvailable = IsSkipAndReturnZeroPatchAvailableCallback; callbacks.isSkipAndReturnValuePatchAvailable = IsSkipAndReturnValuePatchAvailableCallback; callbacks.convertToNop = ConvertToNopCallback; callbacks.alwaysBranch = AlwaysBranchCallback; callbacks.invertBranch = InvertBranchCallback; callbacks.skipAndReturnValue = SkipAndReturnValueCallback; arch->m_arch = BNRegisterArchitecture(arch->m_nameForRegister.c_str(), &callbacks); } Ref Architecture::GetByName(const string& name) { BNArchitecture* arch = BNGetArchitectureByName(name.c_str()); if (!arch) return nullptr; return new CoreArchitecture(arch); } vector> Architecture::GetList() { BNArchitecture** archs; size_t count; archs = BNGetArchitectureList(&count); vector> result; for (size_t i = 0; i < count; i++) result.push_back(new CoreArchitecture(archs[i])); BNFreeArchitectureList(archs); return result; } string Architecture::GetName() const { char* name = BNGetArchitectureName(m_arch); string result = name; BNFreeString(name); return result; } size_t Architecture::GetDefaultIntegerSize() const { if (GetAddressSize() < 4) return GetAddressSize(); return 4; } bool Architecture::GetInstructionLowLevelIL(const uint8_t*, uint64_t, size_t&, LowLevelILFunction& il) { il.AddInstruction(il.Undefined()); return false; } string Architecture::GetRegisterName(uint32_t reg) { char regStr[32]; sprintf(regStr, "r%" PRIu32, reg); return regStr; } string Architecture::GetFlagName(uint32_t flag) { char flagStr[32]; sprintf(flagStr, "flag%" PRIu32, flag); return flagStr; } string Architecture::GetFlagWriteTypeName(uint32_t flags) { char flagStr[32]; sprintf(flagStr, "update%" PRIu32, flags); return flagStr; } vector Architecture::GetFullWidthRegisters() { return vector(); } vector Architecture::GetAllRegisters() { return vector(); } BNRegisterInfo Architecture::GetRegisterInfo(uint32_t) { BNRegisterInfo result; result.fullWidthRegister = 0; result.offset = 0; result.size = 0; result.extend = NoExtend; return result; } uint32_t Architecture::GetStackPointerRegister() { return 0; } vector Architecture::GetModifiedRegistersOnWrite(uint32_t reg) { size_t count; uint32_t* regs = BNGetModifiedArchitectureRegistersOnWrite(m_arch, reg, &count); vector result; for (size_t i = 0; i < count; i++) result.push_back(regs[i]); BNFreeRegisterList(regs); return result; } uint32_t Architecture::GetRegisterByName(const string& name) { return BNGetArchitectureRegisterByName(m_arch, name.c_str()); } bool Architecture::Assemble(const std::string&, uint64_t, DataBuffer&, std::string& errors) { errors = "Architecture does not implement an assembler.\n"; return false; } bool Architecture::IsNeverBranchPatchAvailable(const uint8_t*, uint64_t, size_t) { return false; } bool Architecture::IsAlwaysBranchPatchAvailable(const uint8_t*, uint64_t, size_t) { return false; } bool Architecture::IsInvertBranchPatchAvailable(const uint8_t*, uint64_t, size_t) { return false; } bool Architecture::IsSkipAndReturnZeroPatchAvailable(const uint8_t*, uint64_t, size_t) { return false; } bool Architecture::IsSkipAndReturnValuePatchAvailable(const uint8_t*, uint64_t, size_t) { return false; } bool Architecture::ConvertToNop(uint8_t*, uint64_t, size_t) { return false; } bool Architecture::AlwaysBranch(uint8_t*, uint64_t, size_t) { return false; } bool Architecture::InvertBranch(uint8_t*, uint64_t, size_t) { return false; } bool Architecture::SkipAndReturnValue(uint8_t*, uint64_t, size_t, uint64_t) { return false; } CoreArchitecture::CoreArchitecture(BNArchitecture* arch): Architecture(arch) { } BNEndianness CoreArchitecture::GetEndianness() const { return BNGetArchitectureEndianness(m_arch); } size_t CoreArchitecture::GetAddressSize() const { return BNGetArchitectureAddressSize(m_arch); } size_t CoreArchitecture::GetDefaultIntegerSize() const { return BNGetArchitectureDefaultIntegerSize(m_arch); } bool CoreArchitecture::GetInstructionInfo(const uint8_t* data, uint64_t addr, size_t maxLen, InstructionInfo& result) { return BNGetInstructionInfo(m_arch, data, addr, maxLen, &result); } bool CoreArchitecture::GetInstructionText(const uint8_t* data, uint64_t addr, size_t& len, std::vector& result) { BNInstructionTextToken* tokens = nullptr; size_t count = 0; if (!BNGetInstructionText(m_arch, data, addr, &len, &tokens, &count)) return false; for (size_t i = 0; i < count; i++) result.push_back(InstructionTextToken(tokens[i].type, tokens[i].text, tokens[i].value)); BNFreeInstructionText(tokens, count); return true; } bool CoreArchitecture::GetInstructionLowLevelIL(const uint8_t* data, uint64_t addr, size_t& len, LowLevelILFunction& il) { return BNGetInstructionLowLevelIL(m_arch, data, addr, &len, il.GetFunctionObject()); } string CoreArchitecture::GetRegisterName(uint32_t reg) { char* name = BNGetArchitectureRegisterName(m_arch, reg); string result = name; BNFreeString(name); return result; } string CoreArchitecture::GetFlagName(uint32_t flag) { char* name = BNGetArchitectureFlagName(m_arch, flag); string result = name; BNFreeString(name); return result; } string CoreArchitecture::GetFlagWriteTypeName(uint32_t flags) { char* name = BNGetArchitectureFlagWriteTypeName(m_arch, flags); string result = name; BNFreeString(name); return result; } vector CoreArchitecture::GetFullWidthRegisters() { size_t count; uint32_t* regs = BNGetFullWidthArchitectureRegisters(m_arch, &count); vector result; for (size_t i = 0; i < count; i++) result.push_back(regs[i]); BNFreeRegisterList(regs); return result; } vector CoreArchitecture::GetAllRegisters() { size_t count; uint32_t* regs = BNGetAllArchitectureRegisters(m_arch, &count); vector result; for (size_t i = 0; i < count; i++) result.push_back(regs[i]); BNFreeRegisterList(regs); return result; } BNRegisterInfo CoreArchitecture::GetRegisterInfo(uint32_t reg) { return BNGetArchitectureRegisterInfo(m_arch, reg); } uint32_t CoreArchitecture::GetStackPointerRegister() { return BNGetArchitectureStackPointerRegister(m_arch); } bool CoreArchitecture::Assemble(const string& code, uint64_t addr, DataBuffer& result, string& errors) { char* errorStr = nullptr; bool ok = BNAssemble(m_arch, code.c_str(), addr, result.GetBufferObject(), &errorStr); if (errorStr) { errors = errorStr; BNFreeString(errorStr); } return ok; } bool CoreArchitecture::IsNeverBranchPatchAvailable(const uint8_t* data, uint64_t addr, size_t len) { return BNIsArchitectureNeverBranchPatchAvailable(m_arch, data, addr, len); } bool CoreArchitecture::IsAlwaysBranchPatchAvailable(const uint8_t* data, uint64_t addr, size_t len) { return BNIsArchitectureAlwaysBranchPatchAvailable(m_arch, data, addr, len); } bool CoreArchitecture::IsInvertBranchPatchAvailable(const uint8_t* data, uint64_t addr, size_t len) { return BNIsArchitectureInvertBranchPatchAvailable(m_arch, data, addr, len); } bool CoreArchitecture::IsSkipAndReturnZeroPatchAvailable(const uint8_t* data, uint64_t addr, size_t len) { return BNIsArchitectureSkipAndReturnZeroPatchAvailable(m_arch, data, addr, len); } bool CoreArchitecture::IsSkipAndReturnValuePatchAvailable(const uint8_t* data, uint64_t addr, size_t len) { return BNIsArchitectureSkipAndReturnValuePatchAvailable(m_arch, data, addr, len); } bool CoreArchitecture::ConvertToNop(uint8_t* data, uint64_t addr, size_t len) { return BNArchitectureConvertToNop(m_arch, data, addr, len); } bool CoreArchitecture::AlwaysBranch(uint8_t* data, uint64_t addr, size_t len) { return BNArchitectureAlwaysBranch(m_arch, data, addr, len); } bool CoreArchitecture::InvertBranch(uint8_t* data, uint64_t addr, size_t len) { return BNArchitectureInvertBranch(m_arch, data, addr, len); } bool CoreArchitecture::SkipAndReturnValue(uint8_t* data, uint64_t addr, size_t len, uint64_t value) { return BNArchitectureSkipAndReturnValue(m_arch, data, addr, len, value); }