mirror of
https://github.com/lifting-bits/mcsema
synced 2026-06-08 15:31:09 +00:00
Stephen-lei
82c310697f
to use this ,you have to put the CFG_pb2.py file,which from the mcsema/tools/mcsema_disass/ida7/ ,into the same dir with this script type python show_cfg.py "xxx.cfg" "xxx.txt" the first arg is the location of the cfg file you want to see, like "./maze.cfg" the second arg is the location of the generated cfg details if the cfg file, like "./cfgdetails.txt"
243 lines
11 KiB
Python
243 lines
11 KiB
Python
#! /usr/bin/env python
|
|
#to use this ,you have to put the CFG_pb2.py file,which from the mcsema/tools/mcsema_disass/ida7/ ,into the same dir with this script
|
|
# type python show_cfg.py "xxx.cfg" "xxx.txt"
|
|
# the first arg is location of the cfg file you want to see,like "./maze.cfg"
|
|
# the second arg is the location of the generated cfg details if the cfg file,like "./cfgdetails.txt"
|
|
from sys import argv
|
|
import CFG_pb2
|
|
|
|
def ListModule(module,g):
|
|
print("module name:",module.name,file=g)
|
|
print('\n',file=g)
|
|
|
|
#Function
|
|
print("The Functions in the Module:",file=g)
|
|
print('\n',file=g)
|
|
for function in module.funcs:
|
|
print("###########################################################",file=g)
|
|
print("function name :", function.name,file=g)
|
|
print("function ea :", function.ea,file=g)
|
|
print("function is_entrypoint :", function.is_entrypoint,file=g)
|
|
print("The blocks in the function:",file=g)
|
|
print('\n',file=g)
|
|
|
|
#The blocks in the Function
|
|
for block in function.blocks:
|
|
print("---------------------------------------------------------",file=g)
|
|
print("block ea",block.ea,file=g)
|
|
print("block is_referenced_by_data",block.is_referenced_by_data,file=g)
|
|
print("The instructions in the block:",file=g)
|
|
print('\n',file=g)
|
|
|
|
#The Instruction in the Block
|
|
for instruction in block.instructions:
|
|
print("instruction ea",instruction.ea,file=g)
|
|
print("instruction lp_ea",instruction.lp_ea,file=g)
|
|
print("The codereferences of the instruction:",file=g)
|
|
print('\n',file=g)
|
|
|
|
#The CodeReference of the Instruction
|
|
for codereference in instruction.xrefs:
|
|
if codereference.operand_type == CFG_pb2.CodeReference.OperandType.ImmediateOperand:
|
|
print("codereference operand_type ImmediateOperand",file=g)
|
|
elif codereference.operand_type == CFG_pb2.CodeReference.OperandType.MemoryOperand:
|
|
print("codereference operand_type MemoryOperand",file=g)
|
|
elif codereference.operand_type == CFG_pb2.CodeReference.OperandType.MemoryDisplacementOperand:
|
|
print("codereference operand_type MemoryDisplacementOperand",file=g)
|
|
elif codereference.operand_type == CFG_pb2.CodeReference.OperandType.ControlFlowOperand:
|
|
print("codereference operand_type ControlFlowOperand",file=g)
|
|
elif codereference.operand_type == CFG_pb2.CodeReference.OperandType.OffsetTable:
|
|
print("codereference operand_type OffsetTable",file=g)
|
|
|
|
print("codereference ea",codereference.ea,file=g)
|
|
print("codereference mask",codereference.mask,file=g)
|
|
print('\n',file=g)
|
|
|
|
#The successor in the block
|
|
for successor in block.successor_eas:
|
|
print("successor ea",successor,file=g)
|
|
print("---------------------------------------------------------",file=g)
|
|
print('\n',file=g)
|
|
|
|
#The ExceptionFrame of the Function
|
|
print("The exceptionframes in the Function:",file=g)
|
|
print('\n',file=g)
|
|
for exceptionframe in function.eh_frame:
|
|
print("exceptionframe func_ea",exceptionframe.func_ea,file=g)
|
|
print("exceptionframe start_ea",exceptionframe.start_ea,file=g)
|
|
print("exceptionframe end_ea",exceptionframe.end_ea,file=g)
|
|
print("exceptionframe lp_eaa",exceptionframe.lp_ea,file=g)
|
|
if exceptionframe.action == CFG_pb2.ExceptionFrame.Action.Cleanup:
|
|
print("exceptionframe action Cleanup",file=g)
|
|
elif exceptionframe.action == CFG_pb2.ExceptionFrame.Action.Catch:
|
|
print("exceptionframe action Catch",file=g)
|
|
|
|
#The ExternalVariable of the ExceptionFrame
|
|
print("The externalvariables in the ExceptionFrame:",file=g)
|
|
print('\n',file=g)
|
|
for externalvariable in function.ttype:
|
|
print("externalvariable name",externalvariable.name,file=g)
|
|
print("externalvariable ea",externalvariable.ea,file=g)
|
|
print("externalvariable size",externalvariable.size,file=g)
|
|
print("externalvariable is_weak",externalvariable.is_weak,file=g)
|
|
print("externalvariable is_thread_local",externalvariable.is_thread_local,file=g)
|
|
print('\n',file=g)
|
|
print('\n',file=g)
|
|
print("FunctionDecl",function.decl,file=g)
|
|
print("###########################################################",file=g)
|
|
print('\n',file=g)
|
|
print("The Segments in the module:",file=g)
|
|
print('\n',file=g)
|
|
|
|
|
|
#Segments in the Module
|
|
for segment in module.segments:
|
|
print("###########################################################",file=g)
|
|
print("segment ea :", segment.ea,file=g)
|
|
print("segment data :", segment.data.hex(),file=g)
|
|
print("segment read_only :", segment.read_only,file=g)
|
|
print("segment is_external :", segment.is_external,file=g)
|
|
print("segment name :", segment.name,file=g)
|
|
print("segment variable_name :", segment.variable_name,file=g)
|
|
print("segment is_exported :", segment.is_exported,file=g)
|
|
print("segment is_thread_local :", segment.is_thread_local,file=g)
|
|
|
|
#Datareferences of the Segment
|
|
print("The datareferences in the Segment:",file=g)
|
|
print('\n',file=g)
|
|
for datareference in segment.xrefs:
|
|
print("datareference ea",datareference.ea,file=g)
|
|
print("datareference width",datareference.width,file=g)
|
|
print("datareference target_ea",datareference.target_ea,file=g)
|
|
if datareference.target_fixup_kind == CFG_pb2.DataReference.TargetFixupKind.Absolute:
|
|
print("datareference target_fixup_kind Absolute",file=g)
|
|
elif datareference.target_fixup_kind == CFG_pb2.DataReference.TargetFixupKind.OffsetFromThreadBase:
|
|
print("datareference target_fixup_kind OffsetFromThreadBase",file=g)
|
|
print('\n',file=g)
|
|
|
|
#Variables in the Segment
|
|
print("The variables in the Segment:",file=g)
|
|
print('\n',file=g)
|
|
for variable in segment.vars:
|
|
print("variable ea",variable.ea,file=g)
|
|
print("variable name",variable.name,file=g)
|
|
print('\n',file=g)
|
|
print("###########################################################",file=g)
|
|
print('\n',file=g)
|
|
|
|
|
|
#The ExternalFunctions in the Module
|
|
print("The ExternalFunctions in the Module:",file=g)
|
|
print('\n',file=g)
|
|
for externalfunction in module.external_funcs:
|
|
print("###########################################################",file=g)
|
|
print("externalfunction ea :", externalfunction.ea,file=g)
|
|
print("externalfunction name :", externalfunction.name,file=g)
|
|
print("externalfunction has_return :", externalfunction.has_return,file=g)
|
|
print("externalfunction no_return :", externalfunction.no_return,file=g)
|
|
print("externalfunction argument_count :", externalfunction.argument_count,file=g)
|
|
print("externalfunction is_weak :", externalfunction.is_weak,file=g)
|
|
print("externalfunction FunctionDecl :", externalfunction.decl,file=g)
|
|
if externalfunction.cc == CFG_pb2.ExternalFunction.CallingConvention.CallerCleanup:
|
|
print("externalfunction CallingConvention CallerCleanup",file=g)
|
|
elif externalfunction.cc == CFG_pb2.ExternalFunction.CallingConvention.CalleeCleanup:
|
|
print("externalfunction CallingConvention CalleeCleanup",file=g)
|
|
elif externalfunction.cc == CFG_pb2.ExternalFunction.CallingConvention.FastCall:
|
|
print("externalfunction CallingConvention FastCall",file=g)
|
|
print("###########################################################",file=g)
|
|
print('\n',file=g)
|
|
|
|
|
|
|
|
|
|
#The ExternalVariable in the Module
|
|
print("The ExternalVariable in the Module:",file=g)
|
|
print('\n',file=g)
|
|
for externalvariable in module.external_vars:
|
|
print("###########################################################",file=g)
|
|
print("externalvariable name :", externalvariable.name,file=g)
|
|
print("externalvariable ea :", externalvariable.ea,file=g)
|
|
print("externalvariable size :", externalvariable.size,file=g)
|
|
print("externalvariable is_weak :", externalvariable.is_weak,file=g)
|
|
print("externalvariable is_thread_local :", externalvariable.is_thread_local,file=g)
|
|
print("###########################################################",file=g)
|
|
print('\n',file=g)
|
|
|
|
|
|
|
|
#The GlobalVariable in the Module
|
|
print("The GlobalVariable in the Module:",file=g)
|
|
print('\n',file=g)
|
|
for globalvariable in module.global_vars:
|
|
print("###########################################################",file=g)
|
|
print("globalvariable ea :", externalvariable.ea,file=g)
|
|
print("globalvariable name :", externalvariable.name,file=g)
|
|
print("globalvariable size :", externalvariable.size,file=g)
|
|
print("###########################################################",file=g)
|
|
print('\n',file=g)
|
|
|
|
|
|
|
|
#The PreservedRegister in the Module
|
|
print("The PreservedRegister in the Module:",file=g)
|
|
print('\n',file=g)
|
|
for preservedregister in module.preserved_regs:
|
|
print("###########################################################",file=g)
|
|
print("preservedregister registers :", preservedregister.registers,file=g)
|
|
#The PreservationRange in the PreservedRegister
|
|
print("The PreservationRange in the PreservedRegister:",file=g)
|
|
print('\n',file=g)
|
|
for preservationrange in preservedregister.ranges:
|
|
print("preservationrange begin_ea",preservationrange.begin_ea,file=g)
|
|
print("preservationrange end_ea",preservationrange.end_ea,file=g)
|
|
print("###########################################################",file=g)
|
|
print('\n',file=g)
|
|
|
|
|
|
|
|
#The DeadRegisters in the Module
|
|
print("The DeadRegisters in the Module:",file=g)
|
|
print('\n',file=g)
|
|
for deadregister in module.dead_regs:
|
|
print("###########################################################",file=g)
|
|
print("deadregister registers :", deadregister.registers,file=g)
|
|
#The PreservationRange in the DeadRegister
|
|
print("The PreservationRange in the DeadRegister:",file=g)
|
|
print('\n',file=g)
|
|
for dpreservationrange in deadregister.ranges:
|
|
print("dpreservationrange begin_ea",dpreservationrange.begin_ea,file=g)
|
|
print("dpreservationrange end_ea",dpreservationrange.end_ea,file=g)
|
|
print("###########################################################",file=g)
|
|
print('\n',file=g)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def read_test():
|
|
module=CFG_pb2.Module()
|
|
first = argv[1]
|
|
module_file = first
|
|
|
|
|
|
f = open(module_file, "rb")
|
|
module.ParseFromString(f.read())
|
|
f.close()
|
|
second = argv[2]
|
|
g = open(second,'w')
|
|
ListModule(module,g)
|
|
g.close()
|
|
|
|
|
|
if __name__ == "__main__":
|
|
read_test()
|
|
|
|
|
|
|
|
|