I need do come up with some wildcards to match certain instructions.
For instance, on x86, to match most CALL instructions the following pattern will suffice:
E8 ?? ?? ?? ??
where E8 is the opcode and the following 4 bytes are the relative address to jump to.
But the opcodes for arm64 specifically the A64 instruction set seem to be much more confusing, like, I have these two instructios:
0A696938 ldrb w10, [x8, x9] ;
EB834039 ldrb w11, [sp, #0xc0 + var_A0]
There’s no obvious relation if you just look at the encodings 0A696938 and EB834039. How do I get the opcode for this ldrb instruction to create a pattern like the one for the x86