NAME

Keystone - Perl extension for keystone-engine

SYNOPSIS

  use Keystone ':all';

  $ks = Keystone->new(KS_ARCH_X86, KS_MODE_64) || die "Can't init Keystone\n";
  @opcodes = $ks->asm("pop rax; inc rbx; ret");

  foreach(@opcodes) {
    printf "0x%.2x ", $_;
  }
  print "\n";

DESCRIPTION

This module is a Perl wrapper for the keystone-engine library.

Keystone is a lightweight multi-platform, multi-architecture assembler framework.

Further information are available at http://www.keystone-engine.org

METHODS

new(arch, mode)

  $ks = Keystone->new(KS_ARCH_X86, KS_MODE_32);

Create a new keystone object. Take two arguments, the arch (KS_ARCH_*) and the mode (KS_MODE_*). See ks_open() in keystone-engine documentation

asm(code, address)

  @opcodes = $ks->asm("pop rax; ret");

Assemble code, and return a list of opcodes.

See ks_asm() in keystone-engine documentation.

strerror()

   printf "%s\n", $ks->strerror();

Get the last error string

See ks_strerror() in keystone-engine documentation.

errno()

   printf "%d\n", $ks->errno();

Get the last error code (KS_ERR_* constants)

See ks_errno() in keystone-engine documentation.

FUNCTIONS

version()

  ($maj, $min) = Keystone::version();

Get the major and the minor version of the Keystone engine. See ks_version() in keystone-engine documentation

arch_supported(arch)

  printf "%d\n", Keystone::arch_supported(KS_ARCH_X86);

Return 1 if the KS_ARCH_* is supported, 0 overwise. See ks_arch_supported() in keystone-engine documentation

EXAMPLES

  #!/usr/bin/perl

  use ExtUtils::testlib;
  use Keystone ':all';

  use strict;
  use warnings;

  my @asm = ("push ebp",
             "mov rdx, rdi",
             "int 0x80",
             "inc rdx",
             "mov eax, 0x12345678",
             "mov bx, 5");

  # Open a Keystone object
  my $ks = Keystone->new(KS_ARCH_X86, KS_MODE_64) ||
      die "[-] Can't open Keystone\n";


  for my $ins(@asm) {

      # Assemble...
      my @opcodes = $ks->asm($ins);

      if(!scalar(@opcodes)) {
          printf "Assembly failed (\"$ins\") : %s\n", $ks->strerror();
      } else {
          # Print opcodes
          printf "%-20s %s\n", join(' ', map {sprintf "%.2x", $_} @opcodes), $ins;
      }
  }

SEE ALSO

http://keystone-engine.org/

https://github.com/t00sh/perl-keystone

AUTHOR

Tosh, <tosh@t0x0sh.org>

COPYRIGHT AND LICENSE

Copyright (C) 2016 by Tosh

This library is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.