Struct Parser 

pub struct Parser { /* private fields */ }

A light wrapper around capstone used to disassemble buffers.

Implementations

impl Parser

pub fn new() -> Result<Self>

Create a new instruction Parser for the host architecture (x86_64).

Errors

Returns an error if the underlying capstone builder fails.

pub fn get_instruction_from( &self, opcode: &[u8], addr: u64, ) -> Result<Instruction>

Disassemble a single instruction from opcode at address addr.

Arguments

• opcode - Bytes containing at least one instruction.
• addr - Virtual address corresponding to the start of opcode.

Errors

Returns an error when disassembly fails or no instruction could be decoded.

pub fn get_all_instructions_from( &self, code: &[u8], addr: u64, ) -> Result<Vec<Instruction>>

Disassemble all instructions present in code, returning a vector of Instruction instances.

Arguments

• code - Buffer containing machine code.
• addr - Base virtual address of code.

Errors

Returns an error if the disassembly operation fails.