mrphrazer

#
# Copyright (C) 2011 EADS France, Fabrice Desclaux <[email protected]>
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of

mrphrazer

digraph asm_graph {
loc_0000000000400710 [
shape="Mrecord" fontname="Courier New" label =<<table border="0" cellborder="0" cellpadding="3"><tr><td colspan="2" align="center" bgcolor="grey">loc_0000000000400710</td></tr> <tr><td align="left">ADDIU      SP, SP, 0xFFFFFFC8</td></tr><tr><td align="left">SW         RA, 0x34(SP)</td></tr><tr><td align="left">SW         FP, 0x30(SP)</td></tr><tr><td align="left">ADDU       FP, SP, ZERO</td></tr><tr><td align="left">SW         A0, 0x38(FP)</td></tr><tr><td align="left">SW         A1, 0x3C(FP)</td></tr><tr><td align="left">SW         A2, 0x40(FP)</td></tr><tr><td align="left">LW         V1, 0x38(FP)</td></tr><tr><td align="left">LW         V0, 0x3C(FP)</td></tr><tr><td align="left">ADDU       V1, V1, V0</td></tr><tr><td align="left">LW         V0, 0x40(FP)</td></tr><tr><td align="left">ADDU       V0, V1, V0</td></tr><tr><td align="left">SW         V0, 0x20(FP)</td></tr><tr><td align="left">LW         V1, 0x38(FP)</td></tr><tr><td align="left">LW         V0, 0x3C(FP)</

mrphrazer

#include<stdlib.h>
#include<stdio.h>

int foo(int a, int b)
{
	a = a + 4*b;
	b = a - b;
	a = a*b;
	b = a + 7;	
	

mrphrazer

0000000000400546 <foo>:
  400546:       55                      push   %rbp
  400547:       48 89 e5                mov    %rsp,%rbp
  40054a:       89 7d fc                mov    %edi,-0x4(%rbp)
  40054d:       89 75 f8                mov    %esi,-0x8(%rbp)
  400550:       8b 45 f8                mov    -0x8(%rbp),%eax
  400553:       c1 e0 02                shl    $0x2,%eax
  400556:       01 45 fc                add    %eax,-0x4(%rbp)
  400559:       8b 45 fc                mov    -0x4(%rbp),%eax
  40055c:       2b 45 f8                sub    -0x8(%rbp),%eax

mrphrazer

# (c) Tim Blazytko 2021
# implementation based on the blog post "Automated Detection of Control-flow Flattening"
# https://synthesis.to/2021/03/03/flattening_detection.html
import sys

from miasm.analysis.binary import Container
from miasm.analysis.machine import Machine
from miasm.core.locationdb import LocationDB

mrphrazer

# (c) Tim Blazytko 2021
# implementation used in the blog post "Introduction to Control-flow Graph Analysis"
# https://synthesis.to/2021/03/15/control_flow_analysis.html
from miasm.core.graph import DiGraph

# define edges
edges = [
    ("a", "b"),
    ("a", "c"),
    ("b", "d"),

mrphrazer

### Keybase proof

I hereby claim:

  * I am mrphrazer on github.
  * I am mr_phrazer (https://keybase.io/mr_phrazer) on keybase.
  * I have a public key ASBLJQRgveswHNa7aUL31GGoC_OdHg1a6Ab0wH_1x6uMBAo

To claim this, I am signing this object: