Re: [Capstone-users] Overwriting single Instructions in a Disassembly

[Nguyen A. Q. <aq...@gm...>]

if you mean to change the CsInsn object, then you may try to recompile the
assembly with Keystone (link after my signature), then decode the output
binary from Keystone again (with Capstone), and get the new CsInsn object.

Thanks,
Quynh

http://www.keystone-engine.org
http://www.capstone-engine.org
http://www.unicorn-engine.org



On Mon, Jul 17, 2017 at 5:41 PM, Andreas Allquantor <
all...@gm...> wrote:

> Hello There,
>
> Is there a way to overwrite single instructions (= CsInsn object) within a
> given disassembly (= Cs object) with custom instructions?
>
> My use case is this: Throughout the code are data sections which are
> wrongfully interpreted as code. (By chance they disassemble to proper
> instructions so Capstone doesn't stop -> no need for skipdata.) Now I do
> have means to calculate the addresses of those data sections, and would
> like to turn them into .byte (or better yet 4-byte .word)
> pseudo-instructions, just as skipdata does.
>
> I'm using the next branch with the python3 bindings. I'm disassembling
> Thumb-Code.
>
> Greetings,
>
> Andreas
>
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> Capstone-users mailing list
> Cap...@li...
> https://lists.sourceforge.net/lists/listinfo/capstone-users
>