analysis_chip8.c File Reference

#include <string.h>
#include <rz_types.h>
#include <rz_lib.h>
#include <rz_asm.h>
#include <rz_analysis.h>

Go to the source code of this file.

Functions
static int	chip8_anop (RzAnalysis *analysis, RzAnalysisOp *op, ut64 addr, const ut8 *data, int len, RzAnalysisOpMask mask)

Variables
RzAnalysisPlugin	rz_analysis_plugin_chip8
RZ_API RzLibStruct	rizin_plugin

Function Documentation

chip8_anop()

static int chip8_anop ( RzAnalysis *  analysis, RzAnalysisOp *  op, ut64  addr, const ut8 *  data, int  len, RzAnalysisOpMask  mask  )

static

Definition at line 10 of file analysis_chip8.c.

                                                                                                                          {
    ut16 opcode = rz_read_be16(data);
    //  uint8_t x = (opcode >> 8) & 0x0F;
    //  uint8_t y = (opcode >> 4) & 0x0F;
    uint8_t nibble = opcode & 0x0F;
    uint16_t nnn = opcode & 0x0FFF;
    uint8_t kk = opcode & 0xFF;
    op->size = 2;
    op->addr = addr;
    op->type = RZ_ANALYSIS_OP_TYPE_UNK;
    switch (opcode & 0xF000) {
    case 0x0000:
        if (opcode == 0x00EE) {
            op->type = RZ_ANALYSIS_OP_TYPE_RET;
        }
        break;
    case 0x1000:
        op->type = RZ_ANALYSIS_OP_TYPE_JMP;
        op->jump = nnn;
        break;
    case 0x2000:
        op->type = RZ_ANALYSIS_OP_TYPE_CALL;
        op->jump = nnn;
        break;
    case 0x3000:
        op->type = RZ_ANALYSIS_OP_TYPE_RJMP;
        op->jump = addr + op->size * 2;
        op->fail = addr + op->size;
        break;
    case 0x4000:
        op->type = RZ_ANALYSIS_OP_TYPE_RJMP;
        op->jump = addr + op->size * 2;
        op->fail = addr + op->size;
        break;
    case 0x5000:
        op->type = RZ_ANALYSIS_OP_TYPE_RJMP;
        op->jump = addr + op->size * 2;
        op->fail = addr + op->size;
        break;
    case 0x6000:
        op->type = RZ_ANALYSIS_OP_TYPE_MOV;
        break;
    case 0x7000:
        op->type = RZ_ANALYSIS_OP_TYPE_ADD;
        break;
    case 0x8000: {
        switch (nibble) {
        case 0x0:
            op->type = RZ_ANALYSIS_OP_TYPE_MOV;
            break;
        case 0x1:
            op->type = RZ_ANALYSIS_OP_TYPE_OR;
            break;
        case 0x2:
            op->type = RZ_ANALYSIS_OP_TYPE_AND;
            break;
        case 0x3:
            op->type = RZ_ANALYSIS_OP_TYPE_XOR;
            break;
        case 0x4:
            op->type = RZ_ANALYSIS_OP_TYPE_ADD;
            break;
        case 0x5:
            op->type = RZ_ANALYSIS_OP_TYPE_SUB;
            break;
        case 0x6:
            op->type = RZ_ANALYSIS_OP_TYPE_SHR;
            break;
        case 0x7:
            op->type = RZ_ANALYSIS_OP_TYPE_SUB;
            break;
        case 0xE:
            op->type = RZ_ANALYSIS_OP_TYPE_SHL;
            break;
        }
    } break;
    case 0x9000:
        if (nibble == 0) {
            op->type = RZ_ANALYSIS_OP_TYPE_RJMP;
            op->jump = addr + op->size * 2;
            op->fail = addr + op->size;
        }
        break;
    case 0xA000:
        op->type = RZ_ANALYSIS_OP_TYPE_MOV;
        break;
    case 0xB000:
        op->type = RZ_ANALYSIS_OP_TYPE_JMP;
        /* FIXME: this is wrong as op->jump depends on register V0 */
        op->jump = nnn;
        break;
    case 0xE000:
        if (kk == 0x9E || kk == 0xA1) {
            rz_meta_set_string(analysis, RZ_META_TYPE_COMMENT, addr, "KEYPAD");
            op->type = RZ_ANALYSIS_OP_TYPE_CJMP;
            op->jump = addr + op->size * 2;
            op->fail = addr + op->size;
        }
        break;
    case 0xF000: {
        switch (kk) {
        case 0x07:
            op->type = RZ_ANALYSIS_OP_TYPE_MOV;
            break;
        case 0x0A:
            rz_meta_set_string(analysis, RZ_META_TYPE_COMMENT, addr, "KEYPAD");
            op->type = RZ_ANALYSIS_OP_TYPE_MOV;
            break;
        case 0x15:
            op->type = RZ_ANALYSIS_OP_TYPE_MOV;
            break;
        case 0x18:
            op->type = RZ_ANALYSIS_OP_TYPE_MOV;
            break;
        case 0x1E:
            op->type = RZ_ANALYSIS_OP_TYPE_ADD;
            break;
        case 0x29:
            op->type = RZ_ANALYSIS_OP_TYPE_LOAD;
            break;
        case 0x30:
            op->type = RZ_ANALYSIS_OP_TYPE_LOAD;
            break;
        case 0x33:
            op->type = RZ_ANALYSIS_OP_TYPE_STORE;
            break;
        case 0x55:
            op->type = RZ_ANALYSIS_OP_TYPE_STORE;
            break;
        case 0x65:
            op->type = RZ_ANALYSIS_OP_TYPE_LOAD;
            break;
        case 0x75:
            op->type = RZ_ANALYSIS_OP_TYPE_STORE;
            break;
        case 0x85:
            op->type = RZ_ANALYSIS_OP_TYPE_LOAD;
            break;
        }
    } break;
    }
    return op->size;
}

References addr, RZ_ANALYSIS_OP_TYPE_ADD, RZ_ANALYSIS_OP_TYPE_AND, RZ_ANALYSIS_OP_TYPE_CALL, RZ_ANALYSIS_OP_TYPE_CJMP, RZ_ANALYSIS_OP_TYPE_JMP, RZ_ANALYSIS_OP_TYPE_LOAD, RZ_ANALYSIS_OP_TYPE_MOV, RZ_ANALYSIS_OP_TYPE_OR, RZ_ANALYSIS_OP_TYPE_RET, RZ_ANALYSIS_OP_TYPE_RJMP, RZ_ANALYSIS_OP_TYPE_SHL, RZ_ANALYSIS_OP_TYPE_SHR, RZ_ANALYSIS_OP_TYPE_STORE, RZ_ANALYSIS_OP_TYPE_SUB, RZ_ANALYSIS_OP_TYPE_UNK, RZ_ANALYSIS_OP_TYPE_XOR, rz_meta_set_string(), RZ_META_TYPE_COMMENT, and rz_read_be16().

Variable Documentation

rizin_plugin

RZ_API RzLibStruct rizin_plugin

Initial value:

= {
    .type = RZ_LIB_TYPE_ANALYSIS,
    .data = &rz_analysis_plugin_chip8,
    .version = RZ_VERSION
}

Definition at line 164 of file analysis_chip8.c.

rz_analysis_plugin_chip8

RzAnalysisPlugin rz_analysis_plugin_chip8

Initial value:

= {
    .name = "chip8",
    .desc = "CHIP8 analysis plugin",
    .license = "LGPL3",
    .arch = "chip8",
    .bits = 32,
    .op = &chip8_anop,
}

Definition at line 154 of file analysis_chip8.c.