search

lifting-bits / remill

Library for lifting machine code to LLVM bitcode
Apache License 2.0
1.22k stars 142 forks source link

Quick question: Can remill deal with x86 instruction with "REX.W movq..." prefix?? #627

Open zheli-1 opened 1 year ago

zheli-1 commented 1 year ago

Given an example of such instruction is below:

0x224d66f6bf4d 2cd 0f8506020000 jnz 0x224d66f6c159 <+0x4d9> 0x224d66f6bf53 2d3 488b53ff REX.W movq rdx,[rbx-0x1] 0x224d66f6bf57 2d7 488bca REX.W movq rcx,rdx 0x224d66f6bf5a 2da 4883e103 REX.W andq rcx,0x3 0x224d66f6bf5e 2de 4883f901 REX.W cmpq rcx,0x1 0x224d66f6bf62 2e2 0f8502020000 jnz 0x224d66f6c16a <+0x4ea> 0x224d66f6bf68 2e8 66817a0b2304 cmpw [rdx+0xb],0x423 0x224d66f6bf6e 2ee 0f8507020000 jnz 0x224d66f6c17b <+0x4fb> 0x224d66f6bf74 2f4 488bd3 REX.W movq rdx,rbx 0x224d66f6bf77 2f7 4883e203 REX.W andq rdx,0x3 0x224d66f6bf7b 2fb 4883fa01 REX.W cmpq rdx,0x1 0x224d66f6bf7f 2ff 0f8507020000 jnz 0x224d66f6c18c <+0x50c> 0x224d66f6bf85 305 f6432708 testb [rbx+0x27],0x8