Zydis Rust Bindings

Rust language bindings for the Zydis library, a fast and lightweight x86/x86-64 disassembler.

Building

Please make sure you have at least Rust 1.30 installed. Then, just invoke:

cargo build

Or, probably more common, add a dependency to your Cargo.toml:

toml [dependencies] zydis = "3.0"

Example

```rust extern crate zydis;

use zydis::*;

[rustfmt::skip]

static CODE: &'static [u8] = &[ 0x51, 0x8D, 0x45, 0xFF, 0x50, 0xFF, 0x75, 0x0C, 0xFF, 0x75, 0x08, 0xFF, 0x15, 0xA0, 0xA5, 0x48, 0x76, 0x85, 0xC0, 0x0F, 0x88, 0xFC, 0xDA, 0x02, 0x00, ];

fn main() -> Result<()> { let formatter = Formatter::new(FormatterStyle::INTEL)?; let decoder = Decoder::new(MachineMode::LONG64, AddressWidth::64)?;

// Our actual buffer.
let mut buffer = [0u8; 200];
// A wrapped version of the buffer allowing nicer access.
let buffer = OutputBuffer::new(&mut buffer[..]);

// 0 is the address for our code.
for (instruction, ip) in decoder.instruction_iterator(CODE, 0) {
    // We use Some(ip) here since we want absolute addressing based on the given
    // `ip`. If we would want to have relative addressing, we would use
    // `None` instead.
    formatter.format_instruction(&instruction, &buffer, Some(ip), None)?;
    println!("0x{:016X} {}", ip, buffer);
}

Ok(())

} ```

Output

0x0000000000000000 push rcx 0x0000000000000001 lea eax, [rbp-0x01] 0x0000000000000004 push rax 0x0000000000000005 push [rbp+0x0C] 0x0000000000000008 push [rbp+0x08] 0x000000000000000B call [0x000000007648A5B1] 0x0000000000000011 test eax, eax 0x0000000000000013 js 0x000000000002DB15

Version Map

| Bindings | Zydis | | -------- | -------- | | v3.0.0 | v3.0.0 | | v0.0.4 | v2.0.2 | | v0.0.3 | v2.0.0-develop@e967510 | | v0.0.2 | v2.0.0-alpha2 | | v0.0.1 | v2.0.0-develop@4a79d57 |