-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathhdetest.c
90 lines (88 loc) · 2.56 KB
/
hdetest.c
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
#include <stdint.h>
#include <stdio.h>
#include "hde64.h"
int main()
{
int l = 0;
hde64s s;
uint8_t code [] =
{
0x55,
0x48, 0x89, 0xe5,
0x53,
0x48, 0x83, 0xec, 0x28,
0xc7, 0x45, 0xec, 0x00, 0x00, 0x00, 0x00,
0x89, 0x7d, 0xe0,
0x48, 0x89, 0x75, 0xd8,
0xe8, 0xe4, 0xfd, 0xff, 0xff,
0x48, 0x89, 0x45, 0xf0,
0x48, 0x85, 0xc0,
0x0f, 0x84, 0x9c, 0x00, 0x00, 0x00,
0x48, 0x8b, 0x7d, 0xf0,
0xe8, 0x0e, 0xfc, 0xff, 0xff,
0x48, 0x8b, 0x7d, 0xf0,
0xe8, 0xc5, 0xfc, 0xff, 0xff,
0x48, 0x8b, 0x7d, 0xf0,
0x48, 0x8d, 0x35, 0x1a, 0x01, 0x00, 0x00,
0x31, 0xdb,
0x31, 0xd2,
0xe8, 0x11, 0xfe, 0xff, 0xff,
0x48, 0x8b, 0x7d, 0xf0,
0x48, 0x63, 0x75, 0xe0,
0xe8, 0x34, 0xfe, 0xff, 0xff,
0x48, 0x8b, 0x7d, 0xf0,
0x48, 0x8b, 0x75, 0xd8,
0xe8, 0x17, 0xfe, 0xff, 0xff,
0x48, 0x8b, 0x7d, 0xf0,
0xbe, 0x02, 0x00, 0x00, 0x00,
0xba, 0x01, 0x00, 0x00, 0x00,
0x31, 0xc9,
0x45, 0x31, 0xc0,
0x45, 0x31, 0xc9,
0xe8, 0xcc, 0xfb, 0xff, 0xff,
0x89, 0x45, 0xe8,
0x48, 0x8b, 0x7d, 0xf0,
0xbe, 0xff, 0xff, 0xff, 0xff,
0xe8, 0x2b, 0xfd, 0xff, 0xff,
0x89, 0x45, 0xe4,
0x48, 0x8b, 0x7d, 0xf0,
0x8b, 0x75, 0xe8,
0xe8, 0x5c, 0x02, 0x00, 0x00,
0x48, 0x8b, 0x7d, 0xf0,
0xe8, 0x13, 0xfc, 0xff, 0xff,
0x48, 0x8b, 0x45, 0xe0,
0x48, 0x83, 0x38, 0x00,
0x74, 0x1a,
0x48, 0x8b, 0x45, 0xe0,
0x48, 0x8b, 0x00,
0x80, 0x38, 0x00,
0x74, 0x0e,
0x48, 0x8b, 0x45, 0xe0,
0x48, 0x8b, 0x00,
0x48, 0x89, 0x05, 0xb2, 0x27, 0x20, 0x00,
0x83, 0x7d, 0xfc, 0x01,
0x75, 0x1d,
0x48, 0x63, 0x45, 0xf8,
0x48, 0x8b, 0x4d, 0xe0,
0x48, 0x8b, 0x3c, 0xc1,
0xe8, 0xd3, 0x02, 0x00, 0x00,
0xc7, 0x45, 0xec, 0x00, 0x00, 0x00, 0x00,
0xe9, 0xe7, 0x00, 0x00, 0x00,
0xf6, 0x45, 0xfc, 0x04,
0x74, 0x05,
0xe8, 0x5c, 0x03, 0x00, 0x00,
0xf6, 0x45, 0xfc, 0x10,
0x74, 0x23,
0x48, 0x8b, 0x7d, 0xf0,
0xbe, 0x01, 0x00, 0x00, 0x00,
0xe8, 0x48, 0xfa, 0xff, 0xff,
};
uint8_t *codep = (uint8_t *) code;
while (l < sizeof(code))
{
l += hde64_disasm((void*) (codep+l), &s);
printf("len: %d, opcode: %x, imm8 %x, imm32 %x, flags %x\n",
s.len, s.opcode, s.imm.imm8, s.imm.imm32, s.flags);
}
return 0;
}