Struct capstone_sys::cs_insn [−] [src]

pub struct cs_insn {
    pub id: c_uint,
    pub address: uint64_t,
    pub size: uint16_t,
    pub bytes: [uint8_t; 16],
    pub mnemonic: [c_char; 32],
    pub op_str: [c_char; 160],
    pub detail: *mut cs_detail,
}

Detail information of disassembled instruction

Fields

Instruction ID (basically a numeric ID for the instruction mnemonic) Find the instruction id in the '[ARCH]_insn' enum in the header file of corresponding architecture, such as 'arm_insn' in arm.h for ARM, 'x86_insn' in x86.h for X86, etc... This information is available even when CS_OPT_DETAIL = CS_OPT_OFF NOTE: in Skipdata mode, "data" instruction has 0 for this id field.

Address (EIP) of this instruction This information is available even when CS_OPT_DETAIL = CS_OPT_OFF

Size of this instruction This information is available even when CS_OPT_DETAIL = CS_OPT_OFF

Machine bytes of this instruction, with number of bytes indicated by @size above This information is available even when CS_OPT_DETAIL = CS_OPT_OFF

Ascii text of instruction mnemonic This information is available even when CS_OPT_DETAIL = CS_OPT_OFF

Ascii text of instruction operands This information is available even when CS_OPT_DETAIL = CS_OPT_OFF

Pointer to cs_detail. NOTE: detail pointer is only valid when both requirements below are met: (1) CS_OP_DETAIL = CS_OPT_ON (2) Engine is not in Skipdata mode (CS_OP_SKIPDATA option set to CS_OPT_ON)

NOTE 2: when in Skipdata mode, or when detail mode is OFF, even if this pointer is not NULL, its content is still irrelevant.