2015-08-25 10:21:47 +00:00
|
|
|
/*
|
|
|
|
|
|
|
|
Java bindings for the Unicorn Emulator Engine
|
|
|
|
|
|
|
|
Copyright(c) 2015 Chris Eagle
|
|
|
|
|
|
|
|
This program is free software; you can redistribute it and/or
|
|
|
|
modify it under the terms of the GNU General Public License
|
|
|
|
version 2 as published by the Free Software Foundation.
|
|
|
|
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
GNU General Public License for more details.
|
|
|
|
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
|
|
along with this program; if not, write to the Free Software
|
|
|
|
Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
|
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
/* Unicorn Emulator Engine */
|
|
|
|
/* By Nguyen Anh Quynh, 2015 */
|
|
|
|
|
|
|
|
/* Sample code to demonstrate how to emulate Mips code (big endian) */
|
|
|
|
|
|
|
|
import unicorn.*;
|
|
|
|
|
|
|
|
public class Sample_mips {
|
|
|
|
|
|
|
|
// code to be emulated
|
|
|
|
public static final byte[] MIPS_CODE_EB = {52,33,52,86};
|
|
|
|
public static final byte[] MIPS_CODE_EL = {86,52,33,52};
|
|
|
|
|
|
|
|
// memory address where emulation starts
|
|
|
|
public static final int ADDRESS = 0x10000;
|
|
|
|
|
|
|
|
public static final long toInt(byte val[]) {
|
|
|
|
long res = 0;
|
|
|
|
for (int i = 0; i < val.length; i++) {
|
|
|
|
long v = val[i] & 0xff;
|
|
|
|
res = res + (v << (i * 8));
|
|
|
|
}
|
|
|
|
return res;
|
|
|
|
}
|
|
|
|
|
|
|
|
public static final byte[] toBytes(long val) {
|
|
|
|
byte[] res = new byte[8];
|
|
|
|
for (int i = 0; i < 8; i++) {
|
|
|
|
res[i] = (byte)(val & 0xff);
|
|
|
|
val >>>= 8;
|
|
|
|
}
|
|
|
|
return res;
|
|
|
|
}
|
|
|
|
|
|
|
|
// callback for tracing basic blocks
|
|
|
|
private static class MyBlockHook implements BlockHook {
|
|
|
|
public void hook(Unicorn u, long address, int size, Object user_data) {
|
|
|
|
System.out.print(String.format(">>> Tracing basic block at 0x%x, block size = 0x%x\n", address, size));
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
// callback for tracing instruction
|
|
|
|
private static class MyCodeHook implements CodeHook {
|
|
|
|
public void hook(Unicorn u, long address, int size, Object user_data) {
|
|
|
|
System.out.print(String.format(">>> Tracing instruction at 0x%x, instruction size = 0x%x\n", address, size));
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
static void test_mips_eb()
|
|
|
|
{
|
|
|
|
|
|
|
|
byte[] r1 = toBytes(0x6789); // R1 register
|
|
|
|
|
|
|
|
System.out.print("Emulate MIPS code (big-endian)\n");
|
|
|
|
|
|
|
|
// Initialize emulator in MIPS mode
|
|
|
|
Unicorn u = new Unicorn(Unicorn.UC_ARCH_MIPS, Unicorn.UC_MODE_MIPS32 + Unicorn.UC_MODE_BIG_ENDIAN);
|
|
|
|
|
|
|
|
// map 2MB memory for this emulation
|
2015-09-04 05:28:09 +00:00
|
|
|
u.mem_map(ADDRESS, 2 * 1024 * 1024, Unicorn.UC_PROT_ALL);
|
2015-08-25 10:21:47 +00:00
|
|
|
|
|
|
|
// write machine code to be emulated to memory
|
|
|
|
u.mem_write(ADDRESS, MIPS_CODE_EB);
|
|
|
|
|
|
|
|
// initialize machine registers
|
|
|
|
u.reg_write(Unicorn.UC_MIPS_REG_1, r1);
|
|
|
|
|
|
|
|
// tracing all basic blocks with customized callback
|
|
|
|
u.hook_add(new MyBlockHook(), 1, 0, null);
|
|
|
|
|
|
|
|
// tracing one instruction at ADDRESS with customized callback
|
|
|
|
u.hook_add(new MyCodeHook(), ADDRESS, ADDRESS, null);
|
|
|
|
|
|
|
|
// emulate machine code in infinite time (last param = 0), or when
|
|
|
|
// finishing all the code.
|
|
|
|
u.emu_start(ADDRESS, ADDRESS + MIPS_CODE_EB.length, 0, 0);
|
|
|
|
|
|
|
|
// now print out some registers
|
|
|
|
System.out.print(">>> Emulation done. Below is the CPU context\n");
|
|
|
|
|
|
|
|
r1 = u.reg_read(Unicorn.UC_MIPS_REG_1, 4);
|
|
|
|
System.out.print(String.format(">>> R1 = 0x%x\n", toInt(r1)));
|
|
|
|
|
|
|
|
u.close();
|
|
|
|
}
|
|
|
|
|
|
|
|
static void test_mips_el()
|
|
|
|
{
|
|
|
|
byte[] r1 = toBytes(0x6789); // R1 register
|
|
|
|
|
|
|
|
System.out.print("===========================\n");
|
|
|
|
System.out.print("Emulate MIPS code (little-endian)\n");
|
|
|
|
|
|
|
|
// Initialize emulator in MIPS mode
|
2016-01-25 06:42:51 +00:00
|
|
|
Unicorn u = new Unicorn(Unicorn.UC_ARCH_MIPS, Unicorn.UC_MODE_MIPS32 + Unicorn.UC_MODE_LITTLE_ENDIAN);
|
2015-08-25 10:21:47 +00:00
|
|
|
|
|
|
|
// map 2MB memory for this emulation
|
2015-09-04 05:28:09 +00:00
|
|
|
u.mem_map(ADDRESS, 2 * 1024 * 1024, Unicorn.UC_PROT_ALL);
|
2015-08-25 10:21:47 +00:00
|
|
|
|
|
|
|
// write machine code to be emulated to memory
|
|
|
|
u.mem_write(ADDRESS, MIPS_CODE_EL);
|
|
|
|
|
|
|
|
// initialize machine registers
|
|
|
|
u.reg_write(Unicorn.UC_MIPS_REG_1, r1);
|
|
|
|
|
|
|
|
// tracing all basic blocks with customized callback
|
|
|
|
u.hook_add(new MyBlockHook(), 1, 0, null);
|
|
|
|
|
|
|
|
// tracing one instruction at ADDRESS with customized callback
|
|
|
|
u.hook_add(new MyCodeHook(), ADDRESS, ADDRESS, null);
|
|
|
|
|
|
|
|
// emulate machine code in infinite time (last param = 0), or when
|
|
|
|
// finishing all the code.
|
|
|
|
u.emu_start(ADDRESS, ADDRESS + MIPS_CODE_EL.length, 0, 0);
|
|
|
|
|
|
|
|
// now print out some registers
|
|
|
|
System.out.print(">>> Emulation done. Below is the CPU context\n");
|
|
|
|
|
|
|
|
r1 = u.reg_read(Unicorn.UC_MIPS_REG_1, 4);
|
|
|
|
System.out.print(String.format(">>> R1 = 0x%x\n", toInt(r1)));
|
|
|
|
|
|
|
|
u.close();
|
|
|
|
}
|
|
|
|
|
|
|
|
public static void main(String args[])
|
|
|
|
{
|
|
|
|
test_mips_eb();
|
|
|
|
test_mips_el();
|
|
|
|
}
|
|
|
|
}
|