yara-x 1.17.0

A pure Rust implementation of YARA.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

RULE test
  13: FOR_IN -- hash: 0xfd14d4882d1f6026
        n: Var { frame_id: 1, ty: integer, index: 0 }
        i: Var { frame_id: 1, ty: integer, index: 1 }
        max_count: Var { frame_id: 1, ty: integer, index: 2 }
        count: Var { frame_id: 1, ty: integer, index: 3 }
        item: Var { frame_id: 1, ty: unknown, index: 4 }
    0: CONST integer(1)
    1: CONST integer(10)
    12: WITH -- hash: 0xe5f28003804fec06
      6: FN_CALL uint32@offset:i@i:R0:4294967295u -- hash: 0xedfbb8eef52ecd47
        5: ADD -- hash: 0xd087500d7c07b7de
          3: PATTERN_OFFSET PatternIdx(0) INDEX -- hash: 0x96059519ea655987
            2: SYMBOL Var { var: Var { frame_id: 1, ty: integer, index: 5 }, type_value: integer(unknown) }
          4: CONST integer(16)
      8: FN_CALL uint32be@offset:i@i:R0:4294967295u -- hash: 0xae9a6e5779a03664
        7: SYMBOL Var { var: Var { frame_id: 2, ty: integer, index: 7 }, type_value: integer(unknown) }
      11: NE -- hash: 0x2475e24cefdb3f3e
        9: SYMBOL Var { var: Var { frame_id: 2, ty: integer, index: 8 }, type_value: integer(unknown) }
        10: CONST integer(1347092738)