forked from mdarin/gapstone
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathskipdata.SPEC
More file actions
57 lines (53 loc) · 1.92 KB
/
Copy pathskipdata.SPEC
File metadata and controls
57 lines (53 loc) · 1.92 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
****************
Platform: X86 32 (Intel syntax) - Skip data
Code: 0x8d 0x4c 0x32 0x08 0x01 0xd8 0x81 0xc6 0x34 0x12 0x00 0x00 0x00 0x91 0x92
Disasm:
0x1000: lea ecx, [edx + esi + 8]
0x1004: add eax, ebx
0x1006: add esi, 0x1234
0x100c: .byte 0x00
0x100d: xchg ecx, eax
0x100e: xchg edx, eax
0x100f:
****************
Platform: X86 32 (Intel syntax) - Skip data with custom mnemonic
Code: 0x8d 0x4c 0x32 0x08 0x01 0xd8 0x81 0xc6 0x34 0x12 0x00 0x00 0x00 0x91 0x92
Disasm:
0x1000: lea ecx, [edx + esi + 8]
0x1004: add eax, ebx
0x1006: add esi, 0x1234
0x100c: db 0x00
0x100d: xchg ecx, eax
0x100e: xchg edx, eax
0x100f:
****************
Platform: Arm - Skip data
Code: 0xed 0x00 0x00 0x00 0x00 0x1a 0x5a 0x0f 0x1f 0xff 0xc2 0x09 0x80 0x00 0x00 0x00 0x07 0xf7 0xeb 0x2a 0xff 0xff 0x7f 0x57 0xe3 0x01 0xff 0xff 0x7f 0x57 0xeb 0x00 0xf0 0x00 0x00 0x24 0xb2 0x4f 0x00 0x78
Disasm:
0x1000: andeq r0, r0, sp, ror #1
0x1004: svceq #0x5a1a00
0x1008: stmibeq r2, {r0, r1, r2, r3, r4, r8, sb, sl, fp, ip, sp, lr, pc} ^
0x100c: andeq r0, r0, r0, lsl #1
0x1010: bhs #0xffafec34
0x1014: .byte 0xff, 0xff, 0x7f, 0x57
0x1018: .byte 0xe3, 0x01, 0xff, 0xff
0x101c: rsceq r5, fp, pc, ror r7
0x1020: strhs r0, [r0], #-0xf0
0x1024: stmdavc r0, {r1, r4, r5, r7, r8, sb, sl, fp, lr}
0x1028:
****************
Platform: Arm - Skip data with callback
Code: 0xed 0x00 0x00 0x00 0x00 0x1a 0x5a 0x0f 0x1f 0xff 0xc2 0x09 0x80 0x00 0x00 0x00 0x07 0xf7 0xeb 0x2a 0xff 0xff 0x7f 0x57 0xe3 0x01 0xff 0xff 0x7f 0x57 0xeb 0x00 0xf0 0x00 0x00 0x24 0xb2 0x4f 0x00 0x78
Disasm:
0x1000: andeq r0, r0, sp, ror #1
0x1004: svceq #0x5a1a00
0x1008: stmibeq r2, {r0, r1, r2, r3, r4, r8, sb, sl, fp, ip, sp, lr, pc} ^
0x100c: andeq r0, r0, r0, lsl #1
0x1010: bhs #0xffafec34
0x1014: db 0xff, 0xff
0x1016: mvneq r5, pc, ror r7
0x101a: db 0xff, 0xff
0x101c: rsceq r5, fp, pc, ror r7
0x1020: strhs r0, [r0], #-0xf0
0x1024: stmdavc r0, {r1, r4, r5, r7, r8, sb, sl, fp, lr}
0x1028: