Hermes/Dyforge is a program written in c++ allows you to inject a dll that can analyze all processes in a program, can be used for mod and reverse engeneering
| 1 | /* Capstone Disassembly Engine */ |
| 2 | /* By Spike <spikeinhouse@gmail.com>, xwings 2019 */ |
| 3 | |
| 4 | #ifndef CAPSTONE_WASM_H |
| 5 | #define CAPSTONE_WASM_H |
| 6 | |
| 7 | #ifdef __cplusplus |
| 8 | extern "C" { |
| 9 | #endif |
| 10 | |
| 11 | #include "platform.h" |
| 12 | #include "cs_operand.h" |
| 13 | |
| 14 | #ifdef _MSC_VER |
| 15 | #pragma warning(disable:4201) |
| 16 | #endif |
| 17 | |
| 18 | typedef enum wasm_op_type { |
| 19 | WASM_OP_INVALID = CS_OP_INVALID, |
| 20 | WASM_OP_IMM = CS_OP_IMM, |
| 21 | WASM_OP_NONE = CS_OP_SPECIAL + 0, |
| 22 | WASM_OP_INT7 = CS_OP_SPECIAL + 1, |
| 23 | WASM_OP_VARUINT32 = CS_OP_SPECIAL + 2, |
| 24 | WASM_OP_VARUINT64 = CS_OP_SPECIAL + 3, |
| 25 | WASM_OP_UINT32 = CS_OP_SPECIAL + 4, |
| 26 | WASM_OP_UINT64 = CS_OP_SPECIAL + 5, |
| 27 | WASM_OP_BRTABLE = CS_OP_SPECIAL + 6, |
| 28 | } wasm_op_type; |
| 29 | |
| 30 | typedef struct cs_wasm_brtable { |
| 31 | uint32_t length; |
| 32 | uint64_t address; |
| 33 | uint32_t default_target; |
| 34 | } cs_wasm_brtable; |
| 35 | |
| 36 | typedef struct cs_wasm_op { |
| 37 | wasm_op_type type; |
| 38 | uint32_t size; |
| 39 | union { |
| 40 | int8_t int7; |
| 41 | uint32_t varuint32; |
| 42 | uint64_t varuint64; |
| 43 | uint32_t uint32; |
| 44 | uint64_t uint64; |
| 45 | uint32_t immediate[2]; |
| 46 | cs_wasm_brtable brtable; |
| 47 | }; |
| 48 | } cs_wasm_op; |
| 49 | |
| 50 | /// Instruction structure |
| 51 | typedef struct cs_wasm { |
| 52 | uint8_t op_count; |
| 53 | cs_wasm_op operands[2]; |
| 54 | } cs_wasm; |
| 55 | |
| 56 | /// WASM instruction |
| 57 | typedef enum wasm_insn { |
| 58 | WASM_INS_UNREACHABLE = 0x0, |
| 59 | WASM_INS_NOP = 0x1, |
| 60 | WASM_INS_BLOCK = 0x2, |
| 61 | WASM_INS_LOOP = 0x3, |
| 62 | WASM_INS_IF = 0x4, |
| 63 | WASM_INS_ELSE = 0x5, |
| 64 | WASM_INS_END = 0xb, |
| 65 | WASM_INS_BR = 0xc, |
| 66 | WASM_INS_BR_IF = 0xd, |
| 67 | WASM_INS_BR_TABLE = 0xe, |
| 68 | WASM_INS_RETURN = 0xf, |
| 69 | WASM_INS_CALL = 0x10, |
| 70 | WASM_INS_CALL_INDIRECT = 0x11, |
| 71 | WASM_INS_DROP = 0x1a, |
| 72 | WASM_INS_SELECT = 0x1b, |
| 73 | WASM_INS_GET_LOCAL = 0x20, |
| 74 | WASM_INS_SET_LOCAL = 0x21, |
| 75 | WASM_INS_TEE_LOCAL = 0x22, |
| 76 | WASM_INS_GET_GLOBAL = 0x23, |
| 77 | WASM_INS_SET_GLOBAL = 0x24, |
| 78 | WASM_INS_I32_LOAD = 0x28, |
| 79 | WASM_INS_I64_LOAD = 0x29, |
| 80 | WASM_INS_F32_LOAD = 0x2a, |
| 81 | WASM_INS_F64_LOAD = 0x2b, |
| 82 | WASM_INS_I32_LOAD8_S = 0x2c, |
| 83 | WASM_INS_I32_LOAD8_U = 0x2d, |
| 84 | WASM_INS_I32_LOAD16_S = 0x2e, |
| 85 | WASM_INS_I32_LOAD16_U = 0x2f, |
| 86 | WASM_INS_I64_LOAD8_S = 0x30, |
| 87 | WASM_INS_I64_LOAD8_U = 0x31, |
| 88 | WASM_INS_I64_LOAD16_S = 0x32, |
| 89 | WASM_INS_I64_LOAD16_U = 0x33, |
| 90 | WASM_INS_I64_LOAD32_S = 0x34, |
| 91 | WASM_INS_I64_LOAD32_U = 0x35, |
| 92 | WASM_INS_I32_STORE = 0x36, |
| 93 | WASM_INS_I64_STORE = 0x37, |
| 94 | WASM_INS_F32_STORE = 0x38, |
| 95 | WASM_INS_F64_STORE = 0x39, |
| 96 | WASM_INS_I32_STORE8 = 0x3a, |
| 97 | WASM_INS_I32_STORE16 = 0x3b, |
| 98 | WASM_INS_I64_STORE8 = 0x3c, |
| 99 | WASM_INS_I64_STORE16 = 0x3d, |
| 100 | WASM_INS_I64_STORE32 = 0x3e, |
| 101 | WASM_INS_CURRENT_MEMORY = 0x3f, |
| 102 | WASM_INS_GROW_MEMORY = 0x40, |
| 103 | WASM_INS_I32_CONST = 0x41, |
| 104 | WASM_INS_I64_CONST = 0x42, |
| 105 | WASM_INS_F32_CONST = 0x43, |
| 106 | WASM_INS_F64_CONST = 0x44, |
| 107 | WASM_INS_I32_EQZ = 0x45, |
| 108 | WASM_INS_I32_EQ = 0x46, |
| 109 | WASM_INS_I32_NE = 0x47, |
| 110 | WASM_INS_I32_LT_S = 0x48, |
| 111 | WASM_INS_I32_LT_U = 0x49, |
| 112 | WASM_INS_I32_GT_S = 0x4a, |
| 113 | WASM_INS_I32_GT_U = 0x4b, |
| 114 | WASM_INS_I32_LE_S = 0x4c, |
| 115 | WASM_INS_I32_LE_U = 0x4d, |
| 116 | WASM_INS_I32_GE_S = 0x4e, |
| 117 | WASM_INS_I32_GE_U = 0x4f, |
| 118 | WASM_INS_I64_EQZ = 0x50, |
| 119 | WASM_INS_I64_EQ = 0x51, |
| 120 | WASM_INS_I64_NE = 0x52, |
| 121 | WASM_INS_I64_LT_S = 0x53, |
| 122 | WASM_INS_I64_LT_U = 0x54, |
| 123 | WASN_INS_I64_GT_S = 0x55, |
| 124 | WASM_INS_I64_GT_U = 0x56, |
| 125 | WASM_INS_I64_LE_S = 0x57, |
| 126 | WASM_INS_I64_LE_U = 0x58, |
| 127 | WASM_INS_I64_GE_S = 0x59, |
| 128 | WASM_INS_I64_GE_U = 0x5a, |
| 129 | WASM_INS_F32_EQ = 0x5b, |
| 130 | WASM_INS_F32_NE = 0x5c, |
| 131 | WASM_INS_F32_LT = 0x5d, |
| 132 | WASM_INS_F32_GT = 0x5e, |
| 133 | WASM_INS_F32_LE = 0x5f, |
| 134 | WASM_INS_F32_GE = 0x60, |
| 135 | WASM_INS_F64_EQ = 0x61, |
| 136 | WASM_INS_F64_NE = 0x62, |
| 137 | WASM_INS_F64_LT = 0x63, |
| 138 | WASM_INS_F64_GT = 0x64, |
| 139 | WASM_INS_F64_LE = 0x65, |
| 140 | WASM_INS_F64_GE = 0x66, |
| 141 | WASM_INS_I32_CLZ = 0x67, |
| 142 | WASM_INS_I32_CTZ = 0x68, |
| 143 | WASM_INS_I32_POPCNT = 0x69, |
| 144 | WASM_INS_I32_ADD = 0x6a, |
| 145 | WASM_INS_I32_SUB = 0x6b, |
| 146 | WASM_INS_I32_MUL = 0x6c, |
| 147 | WASM_INS_I32_DIV_S = 0x6d, |
| 148 | WASM_INS_I32_DIV_U = 0x6e, |
| 149 | WASM_INS_I32_REM_S = 0x6f, |
| 150 | WASM_INS_I32_REM_U = 0x70, |
| 151 | WASM_INS_I32_AND = 0x71, |
| 152 | WASM_INS_I32_OR = 0x72, |
| 153 | WASM_INS_I32_XOR = 0x73, |
| 154 | WASM_INS_I32_SHL = 0x74, |
| 155 | WASM_INS_I32_SHR_S = 0x75, |
| 156 | WASM_INS_I32_SHR_U = 0x76, |
| 157 | WASM_INS_I32_ROTL = 0x77, |
| 158 | WASM_INS_I32_ROTR = 0x78, |
| 159 | WASM_INS_I64_CLZ = 0x79, |
| 160 | WASM_INS_I64_CTZ = 0x7a, |
| 161 | WASM_INS_I64_POPCNT = 0x7b, |
| 162 | WASM_INS_I64_ADD = 0x7c, |
| 163 | WASM_INS_I64_SUB = 0x7d, |
| 164 | WASM_INS_I64_MUL = 0x7e, |
| 165 | WASM_INS_I64_DIV_S = 0x7f, |
| 166 | WASM_INS_I64_DIV_U = 0x80, |
| 167 | WASM_INS_I64_REM_S = 0x81, |
| 168 | WASM_INS_I64_REM_U = 0x82, |
| 169 | WASM_INS_I64_AND = 0x83, |
| 170 | WASM_INS_I64_OR = 0x84, |
| 171 | WASM_INS_I64_XOR = 0x85, |
| 172 | WASM_INS_I64_SHL = 0x86, |
| 173 | WASM_INS_I64_SHR_S = 0x87, |
| 174 | WASM_INS_I64_SHR_U = 0x88, |
| 175 | WASM_INS_I64_ROTL = 0x89, |
| 176 | WASM_INS_I64_ROTR = 0x8a, |
| 177 | WASM_INS_F32_ABS = 0x8b, |
| 178 | WASM_INS_F32_NEG = 0x8c, |
| 179 | WASM_INS_F32_CEIL = 0x8d, |
| 180 | WASM_INS_F32_FLOOR = 0x8e, |
| 181 | WASM_INS_F32_TRUNC = 0x8f, |
| 182 | WASM_INS_F32_NEAREST = 0x90, |
| 183 | WASM_INS_F32_SQRT = 0x91, |
| 184 | WASM_INS_F32_ADD = 0x92, |
| 185 | WASM_INS_F32_SUB = 0x93, |
| 186 | WASM_INS_F32_MUL = 0x94, |
| 187 | WASM_INS_F32_DIV = 0x95, |
| 188 | WASM_INS_F32_MIN = 0x96, |
| 189 | WASM_INS_F32_MAX = 0x97, |
| 190 | WASM_INS_F32_COPYSIGN = 0x98, |
| 191 | WASM_INS_F64_ABS = 0x99, |
| 192 | WASM_INS_F64_NEG = 0x9a, |
| 193 | WASM_INS_F64_CEIL = 0x9b, |
| 194 | WASM_INS_F64_FLOOR = 0x9c, |
| 195 | WASM_INS_F64_TRUNC = 0x9d, |
| 196 | WASM_INS_F64_NEAREST = 0x9e, |
| 197 | WASM_INS_F64_SQRT = 0x9f, |
| 198 | WASM_INS_F64_ADD = 0xa0, |
| 199 | WASM_INS_F64_SUB = 0xa1, |
| 200 | WASM_INS_F64_MUL = 0xa2, |
| 201 | WASM_INS_F64_DIV = 0xa3, |
| 202 | WASM_INS_F64_MIN = 0xa4, |
| 203 | WASM_INS_F64_MAX = 0xa5, |
| 204 | WASM_INS_F64_COPYSIGN = 0xa6, |
| 205 | WASM_INS_I32_WARP_I64 = 0xa7, |
| 206 | WASP_INS_I32_TRUNC_S_F32 = 0xa8, |
| 207 | WASM_INS_I32_TRUNC_U_F32 = 0xa9, |
| 208 | WASM_INS_I32_TRUNC_S_F64 = 0xaa, |
| 209 | WASM_INS_I32_TRUNC_U_F64 = 0xab, |
| 210 | WASM_INS_I64_EXTEND_S_I32 = 0xac, |
| 211 | WASM_INS_I64_EXTEND_U_I32 = 0xad, |
| 212 | WASM_INS_I64_TRUNC_S_F32 = 0xae, |
| 213 | WASM_INS_I64_TRUNC_U_F32 = 0xaf, |
| 214 | WASM_INS_I64_TRUNC_S_F64 = 0xb0, |
| 215 | WASM_INS_I64_TRUNC_U_F64 = 0xb1, |
| 216 | WASM_INS_F32_CONVERT_S_I32 = 0xb2, |
| 217 | WASM_INS_F32_CONVERT_U_I32 = 0xb3, |
| 218 | WASM_INS_F32_CONVERT_S_I64 = 0xb4, |
| 219 | WASM_INS_F32_CONVERT_U_I64 = 0xb5, |
| 220 | WASM_INS_F32_DEMOTE_F64 = 0xb6, |
| 221 | WASM_INS_F64_CONVERT_S_I32 = 0xb7, |
| 222 | WASM_INS_F64_CONVERT_U_I32 = 0xb8, |
| 223 | WASM_INS_F64_CONVERT_S_I64 = 0xb9, |
| 224 | WASM_INS_F64_CONVERT_U_I64 = 0xba, |
| 225 | WASM_INS_F64_PROMOTE_F32 = 0xbb, |
| 226 | WASM_INS_I32_REINTERPRET_F32 = 0xbc, |
| 227 | WASM_INS_I64_REINTERPRET_F64 = 0xbd, |
| 228 | WASM_INS_F32_REINTERPRET_I32 = 0xbe, |
| 229 | WASM_INS_F64_REINTERPRET_I64 = 0xbf, |
| 230 | WASM_INS_INVALID = 512, |
| 231 | WASM_INS_ENDING, |
| 232 | } wasm_insn; |
| 233 | |
| 234 | /// Group of WASM instructions |
| 235 | typedef enum wasm_insn_group { |
| 236 | WASM_GRP_INVALID = 0, ///< = CS_GRP_INVALID |
| 237 | |
| 238 | WASM_GRP_NUMBERIC = 8, |
| 239 | WASM_GRP_PARAMETRIC, |
| 240 | WASM_GRP_VARIABLE, |
| 241 | WASM_GRP_MEMORY, |
| 242 | WASM_GRP_CONTROL, |
| 243 | |
| 244 | WASM_GRP_ENDING, ///< <-- mark the end of the list of groups |
| 245 | } wasm_insn_group; |
| 246 | |
| 247 | #ifdef __cplusplus |
| 248 | } |
| 249 | #endif |
| 250 | |
| 251 | #endif |
| 252 |