analysis_vax.c

Go to the documentation of this file.

// SPDX-FileCopyrightText: 2015 pancake <pancake@nopcode.org>
// SPDX-License-Identifier: LGPL-3.0-only
 
#include <string.h>
#include <rz_types.h>
#include <rz_util.h>
#include <rz_lib.h>
#include <rz_asm.h>
#include <rz_analysis.h>
 
// XXX: this is just a PoC
// XXX: do not hardcode size/type here, use proper decoding table
// http://hotkosc.ru:8080/method-vax.doc
 
static int vax_op(RzAnalysis *analysis, RzAnalysisOp *op, ut64 addr, const ut8 *buf, int len, RzAnalysisOpMask mask) {
    op->size = 1;
    if (len < 1) {
        return -1;
    }
    op->type = RZ_ANALYSIS_OP_TYPE_UNK;
    switch (buf[0]) {
    case 0xd0:
    case 0x2e:
        op->type = RZ_ANALYSIS_OP_TYPE_MOV;
        op->size = 8;
        break;
    case 0x78:
        op->type = RZ_ANALYSIS_OP_TYPE_SHL;
        op->size = 8;
        break;
    case 0xc0:
    case 0xd8:
        op->type = RZ_ANALYSIS_OP_TYPE_ADD;
        op->size = 8;
        break;
    case 0x00:
        op->type = RZ_ANALYSIS_OP_TYPE_TRAP; // HALT
        break;
    case 0x01:
        op->type = RZ_ANALYSIS_OP_TYPE_NOP;
        break;
    case 0x51:
    case 0x73:
        op->type = RZ_ANALYSIS_OP_TYPE_CMP;
        break;
    case 0xac:
        op->type = RZ_ANALYSIS_OP_TYPE_XOR;
        op->size = 4;
        break;
    case 0x5a:
        op->size = 2;
        break;
    case 0x11:
    case 0x18:
        op->size = 2;
        op->type = RZ_ANALYSIS_OP_TYPE_CJMP;
        break;
    case 0x31:
    case 0xe9:
        op->size = 3;
        op->type = RZ_ANALYSIS_OP_TYPE_CJMP;
        break;
    case 0xc6:
    case 0xc7:
        op->size = 8;
        op->type = RZ_ANALYSIS_OP_TYPE_DIV;
        break;
    case 0xd6:
    case 0x61:
        op->size = 2;
        op->type = RZ_ANALYSIS_OP_TYPE_ADD;
        break;
    case 0x62:
        op->type = RZ_ANALYSIS_OP_TYPE_SUB;
        break;
    case 0xff:
        op->size = 2;
        break;
    }
    return op->size;
}
 
RzAnalysisPlugin rz_analysis_plugin_vax = {
    .name = "vax",
    .desc = "VAX code analysis plugin",
    .license = "LGPL3",
    .arch = "vax",
    .esil = false,
    .bits = 8 | 32,
    .op = &vax_op,
};
 
#ifndef RZ_PLUGIN_INCORE
RZ_API RzLibStruct rizin_plugin = {
    .type = RZ_LIB_TYPE_ANALYSIS,
    .data = &rz_analysis_plugin_vax,
    .version = RZ_VERSION
};
#endif