637b043293
Updates Zydis to it's latest commit, this should fix building the project on intel macs with a more recent version of macOS. This likely needs some sanity checks that the debugger stuff still works as expected. |
||
|---|---|---|
| .. | ||
| Disassemble.c | ||
| DisassembleSimple.c | ||
| EncodeFromScratch.c | ||
| EncodeMov.c | ||
| Formatter01.c | ||
| Formatter02.c | ||
| Formatter03.c | ||
| README.md | ||
| RewriteCode.c | ||
| ZydisPerfTest.c | ||
| ZydisWinKernel.c | ||
Zydis Examples
Decoder
We currently don't have any examples that specifically only demonstrate using the decoder, but all formatter examples also demonstrate decoding instructions. Additionally, the ZydisInfo.c and ZydisDisasm.c examples in the tools directory serve as additional examples for both decoding and formatting.
Formatter
Formatter01
Demonstrates basic hooking functionality of the ZydisFormatter class by implementing a custom symbol-resolver.
Formatter02
Demonstrates basic hooking functionality of the ZydisFormatter class and the ability to completely omit specific operands.
The example demonstrates the hooking functionality of the ZydisFormatter class by rewriting the mnemonics of (V)CMPPS and (V)CMPPD to their corresponding alias-forms (based on the condition encoded in the immediate operand).
Formatter03
Demonstrates the tokenizing feature of the ZydisFormatter class.
Encoder
EncodeFromScratch
Example assembling a basic function returning 0x1337 in rax from scratch.
RewriteCode
Demonstrates how to rewrite ("reassemble") instructions.
Misc
ZydisWinKernel
Implements an example Windows kernel-mode driver.