mirror of
https://github.com/lifting-bits/mcsema
synced 2026-06-08 15:31:09 +00:00
JaeIL Ryu
712a6090fd
mcsema-lift => mcsema-lift-${version}
when i build from source code. binary file name is mcsema-lift-4.0.
and command is mcsema-lift-4.0.
and i found "mcsema-lift-"+ version from many source codes.
29 lines
2.3 KiB
Markdown
29 lines
2.3 KiB
Markdown
# McSema Command Line Reference
|
|
|
|
## mcsema-disass
|
|
|
|
Usage: mcsema-disass --disassembler _path-to-IDA_ --os _operating-system_ --arch _architecture_ --output _cfg-path_ --binary _input-binary_ --entrypoint _function_ [--log_file _log-path_]
|
|
|
|
Where:
|
|
|
|
* `path-to-IDA` = the path to your IDA Pro disassembler executable, e.g., `~/ida-6.9/idal64`
|
|
* `operating-system` = the OS _of the binary being disassembled_: `linux`, or `windows`
|
|
* `architecture` = the instruction set architecture _of the binary being disassembled_: `amd64`, `amd64_avx`, `x86`, `x86_avx`, or `aarch64` (64-bit ARMv8)
|
|
* `cfg-path` = the path a .cfg file where you want the recovered control flow graph to be saved
|
|
* `input-binary` = the path to a binary executable to be disassembled
|
|
* `function` = the entry point function where the disassembler should start recovering control flow, e.g., `main`
|
|
* `log-path` = (optional) the path to a log file to save the logging output of McSema
|
|
|
|
## mcsema-lift
|
|
|
|
Usage: mcsema-lift-${version} --arch _architecture_ --os _platform_ --cfg _cfg-path_ [--output _output-path_] [--libc_constructor _init-function_] [--libc_destructor _fini-function_]
|
|
|
|
Where:
|
|
|
|
* `architecture` = architecture to use for the instruction semantics during lifting: `amd64`, `amd64_avx`, `x86`, `x86_avx`, or `aarch64` (64-bit ARMv8)
|
|
* `platform` = the operating system _of the binary that was disassembled_ to generate this CFG. Currently the valid options are `linux` or `windows`. This option is required for certain aspects of translation, like ABI compatibility for external functions, etc.
|
|
* `cfg-path` = path to the control flow graph file emitted by `mcsema-disass` that you want to convert into bitcode
|
|
* `output-path` = path to a .bc file where you want the lifted code to be saved. If the `--output` option is not specified, the bitcode will be written to stdout
|
|
* `init-function` = constructor function for running pre-`main` initializers. It is executed before the `main` and constructs the global objects. This feature is important for lifting the C++ programs. On GNU-based systems, this is typically `__libc_csu_init`.
|
|
* `fini-function` = destructor function for running post-`main` finalizers. It is executed after the `main` function at program exit. On GNU-based systems, this is typically `__libc_csu_fini`.
|