keystone

keystone copied to clipboard

X64 improperly turns base-less memory operand into rip-relative one

3

See this instruction here: ``` xor rdi, qword ptr fs:[40] ``` Keystone will compile this to: ``` xor rdi, qword ptr fs:[rip + 0x20] ``` This is not correct. I...

iconmaster5326

Strange injection of an extra byte in sub operations with python binding

1

Hi, I'm experiencing a strange issue when assembling SUB operations. If I try to subtract any byte value of 0x80 or over, keystone inserts an extra 0xc2 in the bytecode....

Inf0Junki3

incorrect result with sym_resolver

3

to testing sym_resolver interface, I wrote the following script: ``` def resolver(sym, addr): if sym == 'L2': addr[0] = 0xdead return True return False ks = Ks(KS_ARCH_X86, KS_MODE_32) ks.sym_resolver =...

Himyth

Error in assembly of x64 instructions

2

hi, I found a possible error in the assembly: Output1: `b'mov rax, qword ptr gs:[0x60]' = ['0x48', '0x65', '0xa1', '0x60', '0x0 ', '0x0', '0x0', '0x0', '0x0', '0x0', '0x0'] (number of...

peta909

How to build x64 dll on windows?

2

iTruth

ARM64 instructions with PC-relative offset

9

> kstool.exe arm64 "adrp x0, #0" 0x123456000 `adrp x0, #0 = [ 00 00 00 90 ]` >cstool.exe arm64 00000090 0x123456000 `123456000 00000090 adrp x0, #0x123456000` There are similar problems...

noword

Kstool v0.9.2 for Keystone Assembler Engine (www.keystone-engine.org) ➜ ~ kstool thumb "bgt.w #**0x1000**-0x0000" bgt.w #0x1000-0x0000 = [ 01 f3 00 80 ] ➜ ~ cstool thumb "01 f3 00 80"...

lordrings104

```bash echo $ANDROID_CMAKE # v3.10 /home/tis/Android/Sdk/cmake/3.10.2.4988404/ echo $ANDROID_NDK # r21b /home/tis/Android/Sdk/ndk/21.3.6528147/ uname -s # under Linux Linux ``` I run the following command under the dir "build", and then compile...

uqsme

When assembling 64 bit instructions, where the operand is a decimal and is greater than 8 digits long, the assembly fails (even though it is successful if you convert that...

D4nch3n

Build instructions for Windows

1

It seems that the build instructions for Windows (https://github.com/keystone-engine/keystone/blob/master/docs/COMPILE-WINDOWS.md) do not work out of the box. ``` c:\Users\aballman\Desktop\sandboxes\keystone\build>..\nmake-dll.bat -- The C compiler identification is MSVC 19.27.29009.1 -- The CXX compiler...

AaronBallman