EXETOOLS FORUM  

Go Back   EXETOOLS FORUM > General > Community Tools

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 02-16-2014, 23:12
mr.exodia's Avatar
mr.exodia mr.exodia is offline
Super Moderator
 
Join Date: Nov 2011
Posts: 817
Rept. Given: 475
Rept. Rcvd 1,149 Times in 307 Posts
Thanks Given: 72
Thanks Rcvd at 414 Times in 166 Posts
mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299
[LIBRARY] XEDParse (x32 + x64)

Hello everyone,

A few days ago, I found this topic on EXETools about the XED2 library: http://forum.exetools.com/showthread.php?p=89195

Since I need a library to assemble from a string for x64_dbg, I decided to write a small MASM parser for this library. Turns out it works quite well and I can release the first test build.

Actually it cannot do much, but the parsing is done and you can encode the following instruction types:
  • nop (or any instruction without operands)
  • push rax (any instruction with one register operand)
  • mov eax,ebx (any instruction with two register operands)
  • rep stosb (prefixes are supported)
Anyone willing to assist me with this library? I have the support of ferrit.rce, but he hasn't responded the last two days.
 
You can find everything (source+test binaries) here:
https://bitbucket.org/mrexodia/xedparse
 
Greetings,
 
Mr. eXoDia
__________________
x64dbg: http://x64dbg.com
My Blog: http://mrexodia.cf
Reply With Quote
The Following 6 Users Gave Reputation+1 to mr.exodia For This Useful Post:
ahmadmansoor (02-17-2014), besoeso (02-17-2014), chessgod101 (02-17-2014), Dreamer (02-16-2014), Ember (02-22-2014), uel888 (02-17-2014)
  #2  
Old 02-21-2014, 08:51
mr.exodia's Avatar
mr.exodia mr.exodia is offline
Super Moderator
 
Join Date: Nov 2011
Posts: 817
Rept. Given: 475
Rept. Rcvd 1,149 Times in 307 Posts
Thanks Given: 72
Thanks Rcvd at 414 Times in 166 Posts
mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299
Very small update, but now XEDParse is getting useful

Changelog:
- added mnemonic translation (fix obvious 'errors')
- added value operand type

Download:
https://bitbucket.org/mrexodia/xedparse/downloads

Greetings,

Mr. eXoDia

PS I hope to finish the base instruction set really soon
__________________
x64dbg: http://x64dbg.com
My Blog: http://mrexodia.cf
Reply With Quote
The Following User Gave Reputation+1 to mr.exodia For This Useful Post:
Dreamer (02-21-2014)
  #3  
Old 02-21-2014, 10:32
mr.exodia's Avatar
mr.exodia mr.exodia is offline
Super Moderator
 
Join Date: Nov 2011
Posts: 817
Rept. Given: 475
Rept. Rcvd 1,149 Times in 307 Posts
Thanks Given: 72
Thanks Rcvd at 414 Times in 166 Posts
mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299
Another update (sorry, could not edit the previous post):

Changelog:
- fixed a bug in the parser with [reg+reg+displ]
- added memory operands (not tested)

Download:
https://bitbucket.org/mrexodia/xedparse/downloads

Greetings,

Mr. eXoDia
__________________
x64dbg: http://x64dbg.com
My Blog: http://mrexodia.cf
Reply With Quote
The Following User Gave Reputation+1 to mr.exodia For This Useful Post:
Dreamer (02-21-2014)
Reply

Tags
asm, assembly, library, x32, x64

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
PE Library ManSun General Discussion 0 05-19-2004 13:58


All times are GMT +8. The time now is 03:13.


ICP05004977
vBulletin Security provided by vBSecurity v2.2.0 (Lite) - vBulletin Mods & Addons Copyright © 2017 DragonByte Technologies Ltd.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX