zyantific/zydis
Zydis
Zydis is an x86 and x86-64 binary analysis library that provides a framework for decoding machine code and inspecting the technical attributes of processor instructions. It functions as an instruction disassembler that translates binary data into structured instruction metadata and human-readable assembly.
The project includes a machine code encoder for converting assembly instructions and operands back into their binary representations. It also provides an assembly syntax formatter to transform decoded instruction structures into assembly text strings using configurable syntax styles.
The library covers broader binary analysis capabilities, including machine code decoding, assembly instruction formatting, and the extraction of detailed instruction metadata.
Features
- Machine Code Converters - Translates x86 and x86-64 binary machine code into structured instruction metadata and human-readable assembly.
- Binary Analysis Tools - Provides a library for inspecting, disassembling, and extracting information from x86 compiled binary files.
- Binary Analysis Frameworks - Provides a lightweight framework for the combined decoding and inspection of x86 processor instructions.
- Instruction Semantic Extraction - Extracts granular technical attributes and semantic data, such as implicit register access, from instructions.
- Table-Driven Decoding - Maps machine code bytes to instruction definitions and operand types using predefined static data tables.
- x86 Disassemblers - Translates x86 and x86-64 binary machine code into structured instruction metadata and human-readable assembly.
- x86 Instruction Decoding - Specializes in the translation of x86 and x86-64 machine code into structured technical metadata.
- Binary Offset Mappings - Matches binary machine code to internal representations using fixed-offset tables for high-speed retrieval.
- Assembly Syntax Formatting - Transforms decoded instructions into human-readable assembly strings using configurable syntax styles.
- Instruction Encoding Templates - Constructs binary machine code by filling specific bit-fields within predefined binary templates for each instruction.
- Instruction Prefix Analysis - Implements logic to identify processor extensions and addressing modes by analyzing x86 instruction prefixes.
- Machine Code Encoding - Converts assembly instructions and operands back into their corresponding binary machine code representations.
- Opcode State Machines - Uses a state machine to process raw bytes through lookup stages to resolve specific instructions and modifiers.
- Assembly Formatting - Translates decoded instruction structures into assembly text by looking up mnemonics and operand names in static tables.
- Reverse Engineering Tools - Enables the translation of compiled binary data into readable assembly to understand program logic.
- Disassemblers - Fast and lightweight x86/x86-64 disassembler library.
