yara-x 1.15.0

A pure Rust implementation of YARA.
Documentation
RULE test
  44: WITH -- hash: 0xfd51d86833944c9b -- parent: None 
    43: PATTERN_COUNT PatternIdx(1) -- hash: 0x7699aa02ceb56d76 -- parent: 44 
    46: WITH -- hash: 0xf99994e9c3a68cb3 -- parent: 44 
      45: FIELD_ACCESS -- hash: 0x22bd483d721ed399 -- parent: 46 
        4: SYMBOL Field { index: 0, is_root: true, type_value: struct, acl: None, deprecation_notice: None } -- parent: 45 
        5: SYMBOL Field { index: 19, is_root: false, type_value: array, acl: None, deprecation_notice: None } -- parent: 45 
      42: FOR_IN -- hash: 0xe8e057517cf5bf22 -- parent: 46 
        0: CONST integer(0) -- parent: 42 
        1: PATTERN_COUNT PatternIdx(0) -- hash: 0xc1bc033c6a64ce89 -- parent: 42 
        48: WITH -- hash: 0x669c16b485984c27 -- parent: 42 
          47: PATTERN_OFFSET PatternIdx(0) INDEX -- hash: 0xce29f774b8692af2 -- parent: 48 
            10: SYMBOL Var { var: Var { frame_id: 1, ty: integer, index: 7 }, type_value: integer(unknown) } -- parent: 47 
          50: WITH -- hash: 0xab9765e6b9c23851 -- parent: 48 
            49: PATTERN_OFFSET PatternIdx(0) INDEX -- hash: 0xce29f774b8692af2 -- parent: 50 
              13: SYMBOL Var { var: Var { frame_id: 1, ty: integer, index: 7 }, type_value: integer(unknown) } -- parent: 49 
            41: FOR_IN -- hash: 0xe5518f0bdf2d8333 -- parent: 50 
              2: CONST integer(0) -- parent: 41 
              3: SYMBOL Var { var: Var { frame_id: 0, ty: integer, index: 0 }, type_value: integer(unknown) } -- parent: 41 
              52: WITH -- hash: 0x3666334f99c17954 -- parent: 41 
                51: PATTERN_OFFSET PatternIdx(1) INDEX -- hash: 0x49dc6121174a8d53 -- parent: 52 
                  26: SYMBOL Var { var: Var { frame_id: 2, ty: integer, index: 16 }, type_value: integer(unknown) } -- parent: 51 
                54: WITH -- hash: 0xd26c3fe7d117b926 -- parent: 52 
                  53: PATTERN_OFFSET PatternIdx(1) INDEX -- hash: 0x49dc6121174a8d53 -- parent: 54 
                    29: SYMBOL Var { var: Var { frame_id: 2, ty: integer, index: 16 }, type_value: integer(unknown) } -- parent: 53 
                  40: FOR_IN -- hash: 0x92c95e15a9d08618 -- parent: 54 
                    6: SYMBOL Var { var: Var { frame_id: 0, ty: array, index: 1 }, type_value: array } -- parent: 40 
                    39: AND -- hash: 0xfd9ea211fc88a365 -- parent: 40 
                      12: LE -- hash: 0xaae2bff322aa8faf -- parent: 39 
                        9: FIELD_ACCESS -- hash: 0x2cfd8c09c7bab762 -- parent: 12 
                          7: SYMBOL Var { var: Var { frame_id: 3, ty: struct, index: 25 }, type_value: struct } -- parent: 9 
                          8: SYMBOL Field { index: 0, is_root: false, type_value: integer(unknown), acl: None, deprecation_notice: None } -- parent: 9 
                        11: SYMBOL Var { var: Var { frame_id: 0, ty: integer, index: 9 }, type_value: integer(unknown) } -- parent: 12 
                      22: LE -- hash: 0x644c1cef0467915f -- parent: 39 
                        14: SYMBOL Var { var: Var { frame_id: 0, ty: integer, index: 10 }, type_value: integer(unknown) } -- parent: 22 
                        21: ADD -- hash: 0x108f040ec6b473d7 -- parent: 22 
                          17: FIELD_ACCESS -- hash: 0x2cfd8c09c7bab762 -- parent: 21 
                            15: SYMBOL Var { var: Var { frame_id: 3, ty: struct, index: 25 }, type_value: struct } -- parent: 17 
                            16: SYMBOL Field { index: 0, is_root: false, type_value: integer(unknown), acl: None, deprecation_notice: None } -- parent: 17 
                          20: FIELD_ACCESS -- hash: 0xe1db32d0280b564e -- parent: 21 
                            18: SYMBOL Var { var: Var { frame_id: 3, ty: struct, index: 25 }, type_value: struct } -- parent: 20 
                            19: SYMBOL Field { index: 1, is_root: false, type_value: integer(unknown), acl: None, deprecation_notice: None } -- parent: 20 
                      28: LE -- hash: 0x99689fd2d49614f8 -- parent: 39 
                        25: FIELD_ACCESS -- hash: 0x2cfd8c09c7bab762 -- parent: 28 
                          23: SYMBOL Var { var: Var { frame_id: 3, ty: struct, index: 25 }, type_value: struct } -- parent: 25 
                          24: SYMBOL Field { index: 0, is_root: false, type_value: integer(unknown), acl: None, deprecation_notice: None } -- parent: 25 
                        27: SYMBOL Var { var: Var { frame_id: 0, ty: integer, index: 18 }, type_value: integer(unknown) } -- parent: 28 
                      38: LE -- hash: 0xb8db6ae5493ebfc8 -- parent: 39 
                        30: SYMBOL Var { var: Var { frame_id: 0, ty: integer, index: 19 }, type_value: integer(unknown) } -- parent: 38 
                        37: ADD -- hash: 0x108f040ec6b473d7 -- parent: 38 
                          33: FIELD_ACCESS -- hash: 0x2cfd8c09c7bab762 -- parent: 37 
                            31: SYMBOL Var { var: Var { frame_id: 3, ty: struct, index: 25 }, type_value: struct } -- parent: 33 
                            32: SYMBOL Field { index: 0, is_root: false, type_value: integer(unknown), acl: None, deprecation_notice: None } -- parent: 33 
                          36: FIELD_ACCESS -- hash: 0xe1db32d0280b564e -- parent: 37 
                            34: SYMBOL Var { var: Var { frame_id: 3, ty: struct, index: 25 }, type_value: struct } -- parent: 36 
                            35: SYMBOL Field { index: 1, is_root: false, type_value: integer(unknown), acl: None, deprecation_notice: None } -- parent: 36