neatmonster / amie Goto Github PK

View Code? Open in Web Editor NEW

181.0 14.0 23.0 286 KB

A Minimalist Instruction Extender for the ARM architecture and IDA Pro

License: MIT License

Python 100.00%

ida ida-pro hex-rays idapython idapython-plugin arm aarch32 aarch64 reverse-engineering

amie's Introduction

AMIE

A Minimalist Instruction Extender

AMIE is a Python rework of FRIEND that focuses solely on the ARM architecture (only AArch32 and AArch64 are supported). It is both lightweight and dependency-free, and provides the most relevant and up-to-date information about the ARM system registers and instructions.

Features

Improved processor modules

For MCR/MRC and MCRR/MRCC instructions on AArch32, and for MSR/MRS and SYS instructions on AArch64, the system register encoding is detected and replaced by its user-friendly name in the IDA View subview.

For MCR/MRC and MSR/MRS instructions, it also applies to the Pseudocode subview.

Hints for instructions and registers

Hovering over a system register in the IDA View subview or in the Pseudocode subview will display a summary (usually kept under 30 lines) of the relevant documentation page, including the bitfield when available.

Hovering over an instruction mnemonic in the IDA View subview or in the Pseudocode subview will also display a summary of the relevant documentation page, and the relevant assembly template when available.

Auto-generated resource files

The biggest difference with FRIEND is that the resource files (aarch32.json and aarch64.json) are auto-generated from the Exploration Tools. The system registers and instructions (documentation and encodings) are extracted by a home-made script that parses the ARM-provided XML files.

Installation

Copy the plugin file amie.py, and its resource files aarch32.json and aarch64.json to your plugins directory or your user plugins directory (if you want to share it between multiple IDA Pro versions). These are the default paths:

OS	Plugins Directory	User Plugins Directory
Windows	`%PROGRAMFILES%\IDA 7.4\plugins`	`%APPDATA%\Hex-Rays\IDA Pro\plugins`
Linux	`~/ida-7.4/plugins`	`~/.idapro/plugins`
macOS	`/Applications/IDA Pro 7.4/idabin/plugins`	`~/.idapro/plugins`

Dependencies

There are no dependencies! :-)

Improvements

Support for implementation-defined system registers is not available yet.

There is no Hex-Rays support for MCRR/MRRC as this is an IDA Pro limitation.

Credits

alexhude for creating the FRIEND plugin;
gdelugre for creating the ida-arm-system-highlight script;
The good folks at ARM for releasing the Exploration Tools;
patateqbool and 0xpanda for testing the plugin and reporting bugs;
Quarkslab for allowing this release.

amie's People

Contributors

Stargazers

Watchers

Forkers

elix0r chubbymaggie pharazone explife0011 killvxk chago heruix freemanzyq fengjixuchui crackercat marysaka mfkiwl xcode2010 mkyyy t-seclab 00mjk pwn0rz exiahan idapluginproject clayne

amie's Issues

AMIE causes IDA crash

Hi,
thanks for the awesome plugin. Unfortunately it has some rather weird side effects.
When this plugin is installed, opening the "Compiler" window (Options -> Compiler) causes an IDA crash.
If I remove this plugin, the crash is gone.
Version 7.2.181105 Linux x86_64 (32-bit address size)

Regards,
Robert

PS: I reported this issue also to hex-rays

Share you parser script

Hello,

Is it possible to share your parser script ?
Thanks

is this project dead ?

Hello,

I'm thinking of porting this plugins to be compatible to IDA 8.2. Do you still maintain the project or it is dead ?

Exception while searching for instructions

Hi there.

I got this exception while searching for an instruction in the disassembly view.

Exception in ida_idp.IDP_Hooks dispatcher function: SWIG director method error. Error detected when calling 'IDP_Hooks.ev_out_insn'
Traceback (most recent call last):
  File "/home/patate/idapro-7.4/plugins/amie.py", line 354, in ev_out_insn
    return self.arch.output(outctx)
  File "/home/patate/idapro-7.4/plugins/amie.py", line 251, in output
    mne, op = cp_reg.split()
ValueError: not enough values to unpack (expected 2, got 1)

Hint not found on 16-bit converted floating registers.

The plugin does not seem to highlight 16-bit floating registers, as seen in the screenshot. They follow the same conventions as the normal 32-bit and 64-bit floating registers.

Hint not found for register SPSEL on AArch64

https://noot.space

Not correctly handling the case where "authored" is null in json

What happened?

Every time I move the mouse over a MUL Instruction(e.g. MUL X1, X1, X2), idapython prints this error message

Exception in ida_kernwin.UI_Hooks dispatcher function: SWIG director method error. Error detected when calling 'UI_Hooks.get_custom_viewer_hint'
Traceback (most recent call last):
  File "//xxxxx/ida-pro/plugins/amie.py", line 370, in get_custom_viewer_hint
    hint = self.arch.hint(place.toea(), tag, val)
  File "//xxxxx/ida-pro/plugins/amie.py", line 131, in hint
    desc += "\n\n" + "\n".join(insn["templates"][tmpl_name])
TypeError: unsupported operand type(s) for +=: 'NoneType' and 'str'

Possible reasons

By reading the source code, I think this is because the value of "authored" field of the MUL instruction in aarch64.json is null.

      "MUL_MADD": {
        "authored": null,
        "heading": "MUL",
        "templates": {
          "GENERAL": [
            "MUL  <Wd>, <Wn>, <Wm>",
            "MUL  <Xd>, <Xn>, <Xm>"
          ]
        }
      },

I don't know why "authored" is set to null, it might be a bug with the parser for generating aarch64.josn. But I think it would be good to add the handling of None type in amie.py