Other utility functions. More...

#include <Zydis/Defines.h>
#include <Zydis/Status.h>
#include <Zydis/DecoderTypes.h>

Include dependency graph for Utils.h:

This graph shows which files directly or indirectly include this file:

Functions
ZYDIS_EXPORT ZydisStatus	ZydisCalcAbsoluteAddress (const ZydisDecodedInstruction instruction, const ZydisDecodedOperand operand, uint64_t *address)
	Calculates the absolute target-address for the given instruction operand. More...

ZYDIS_EXPORT ZydisStatus	ZydisGetAccessedFlagsByAction (const ZydisDecodedInstruction instruction, ZydisCPUFlagAction action, ZydisCPUFlagMask flags)
	Returns a mask of accessed CPU-flags matching the given `action`. More...

Detailed Description

Other utility functions.

Function Documentation

ZYDIS_EXPORT ZydisStatus ZydisCalcAbsoluteAddress	(	const ZydisDecodedInstruction *	instruction,
		const ZydisDecodedOperand *	operand,
		uint64_t *	address
	)

Calculates the absolute target-address for the given instruction operand.

Parameters

instruction	A pointer to the `ZydisDecodedInstruction` struct.
operand	A pointer to the `ZydisDecodedOperand` struct.
address	A pointer to the memory that receives the absolute target-address.

You should use this function in the following cases:

IMM operands with relative address (e.g. JMP, CALL, ...)
MEM operands with RIP/EIP-relative address (e.g. MOV RAX, [RIP+0x12345678])
MEM operands with absolute address (e.g. MOV RAX, [0x12345678])
- The displacement needs to get truncated and zero extended

ZYDIS_EXPORT ZydisStatus ZydisGetAccessedFlagsByAction	(	const ZydisDecodedInstruction *	instruction,
		ZydisCPUFlagAction	action,
		ZydisCPUFlagMask *	flags
	)

Returns a mask of accessed CPU-flags matching the given action.

Parameters

instruction	A pointer to the `ZydisDecodedInstruction` struct.
action	The CPU-flag action.
flags	A pointer to the variable that receives the flag mask.