Struct Registers 

pub struct Registers {

    pub rax: u64,
    pub rbx: u64,
    pub rcx: u64,
    pub rdx: u64,
    pub rbp: u64,
    pub rsi: u64,
    pub rdi: u64,
    pub rsp: u64,
    pub r8: u64,
    pub r9: u64,
    pub r10: u64,
    pub r11: u64,
    pub r12: u64,
    pub r13: u64,
    pub r14: u64,
    pub r15: u64,
    pub rip: u64,
    pub rflags: Rflags,
    pub cr0: Cr0,
    pub cr2: Cr2,
    pub cr3: Cr3,
    pub cr4: Cr4,
    pub dr0: Dr0,
    pub dr1: Dr1,
    pub dr2: Dr2,
    pub dr3: Dr3,
    pub dr6: Dr6,
    pub dr7: Dr7,
    pub cs: SegmentDescriptor,
    pub ds: SegmentDescriptor,
    pub es: SegmentDescriptor,
    pub fs: SegmentDescriptor,
    pub gs: SegmentDescriptor,
    pub ss: SegmentDescriptor,
    pub tr: SegmentDescriptor,
    pub ldtr: SegmentDescriptor,
    pub idtr: Idtr,
    pub gdtr: Gdtr,
    pub sysenter_cs: u64,
    pub sysenter_esp: u64,
    pub sysenter_eip: u64,
    pub shadow_gs: u64,
    pub msr_flags: u64,
    pub msr_lstar: u64,
    pub msr_star: u64,
    pub msr_cstar: u64,
    pub msr_syscall_mask: u64,
    pub msr_efer: MsrEfer,
    pub msr_tsc_aux: u64,
}

Available on crate feature arch-amd64 only.

The state of the CPU registers.

Fields

rax: u64

rbx: u64

rcx: u64

rdx: u64

rbp: u64

rsi: u64

rdi: u64

rsp: u64

r8: u64

r9: u64

r10: u64

r11: u64

r12: u64

r13: u64

r14: u64

r15: u64

rip: u64

rflags: Rflags

cr0: Cr0

cr2: Cr2

cr3: Cr3

cr4: Cr4

dr0: Dr0

dr1: Dr1

dr2: Dr2

dr3: Dr3

dr6: Dr6

dr7: Dr7

cs: SegmentDescriptor

ds: SegmentDescriptor

es: SegmentDescriptor

fs: SegmentDescriptor

gs: SegmentDescriptor

ss: SegmentDescriptor

tr: SegmentDescriptor

ldtr: SegmentDescriptor

idtr: Idtr

gdtr: Gdtr

sysenter_cs: u64

sysenter_esp: u64

sysenter_eip: u64

shadow_gs: u64

msr_flags: u64

msr_lstar: u64

msr_star: u64

msr_cstar: u64

msr_syscall_mask: u64

msr_efer: MsrEfer

msr_tsc_aux: u64

Trait Implementations

impl Clone for Registers

fn clone(&self) -> Registers

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Registers

impl Debug for Registers

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for Registers

fn default() -> Registers

Returns the “default value” for a type.

impl Eq for Registers

impl From<&Registers> for UnwindContextAmd64

fn from(value: &Registers) -> UnwindContextAmd64

Converts to this type from the input type.

impl PartialEq for Registers

fn eq(&self, other: &Registers) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Registers for Registers

type Architecture = Amd64

The specific CPU architecture implementation.

type GpRegisters = GpRegisters

General-purpose registers of the architecture.

fn instruction_pointer(&self) -> u64

Returns the current value of the instruction pointer.

fn set_instruction_pointer(&mut self, ip: u64)

Sets the value of the instruction pointer.

fn stack_pointer(&self) -> u64

Returns the current value of the stack pointer.

fn set_stack_pointer(&mut self, sp: u64)

Sets the value of the stack pointer.

fn result(&self) -> u64

Returns the current value of the result register.

fn set_result(&mut self, result: u64)

Sets the value of the result register.

fn gp_registers(&self) -> GpRegisters

Returns a copy of all general-purpose registers.

fn set_gp_registers(&mut self, gp: &GpRegisters)

Sets all general-purpose registers.

fn address_width(&self) -> usize

Returns the native address width (i.e. pointer size) of the architecture in bytes.

fn effective_address_width(&self) -> usize

Returns the effective address width, which may differ from the native width (e.g., in compatibility modes).

fn access_context(&self, va: Va) -> AccessContext

Creates an access context for a given virtual address.

fn address_context(&self, va: Va) -> AddressContext

Creates an address context for a given virtual address.

fn translation_root(&self, _va: Va) -> Pa

Returns the physical address of the root of the current page table hierarchy for a given virtual address.

fn set_translation_root(&mut self, root: u64, _va: Va)

Sets the physical address of the root of the current page table hierarchy for a given virtual address.

fn return_address<Driver>(&self, vmi: &VmiCore<Driver>) -> Result<Va, VmiError>

where Driver: VmiRead,

Attempts to determine the return address of the current function call.

fn return_from_function<Driver>( &self, vmi: &VmiCore<Driver>, value: u64, ) -> Result<<Registers as Registers>::GpRegisters, VmiError>

where Driver: VmiRead<Architecture = Amd64>,

Builds the general-purpose registers that make the current function return value to its caller without executing its body.

impl StructuralPartialEq for Registers

impl WindowsRegistersAdapter for Registers

fn write_context(&mut self, context: &impl WindowsContext)

Writes general-purpose registers, instruction pointer, flags, and segment selectors.

fn write_special_registers( &mut self, special_registers: &impl WindowsSpecialRegisters, )

Writes control registers, debug registers, and descriptor tables.