Struct capstone_sys::cs_insn
source · #[repr(C)]pub struct cs_insn {
pub id: c_uint,
pub address: u64,
pub size: u16,
pub bytes: [u8; 24],
pub mnemonic: [c_char; 32],
pub op_str: [c_char; 160],
pub detail: *mut cs_detail,
}
Expand description
Detail information of disassembled instruction
Fields§
§id: c_uint
Instruction ID (basically a numeric ID for the instruction mnemonic) Find the instruction id in the ‘[ARCH]_insn’ enum in the header file of corresponding architecture, such as ‘arm_insn’ in arm.h for ARM, ‘x86_insn’ in x86.h for X86, etc… This information is available even when CS_OPT_DETAIL = CS_OPT_OFF NOTE: in Skipdata mode, “data” instruction has 0 for this id field.
address: u64
Address (EIP) of this instruction This information is available even when CS_OPT_DETAIL = CS_OPT_OFF
size: u16
Size of this instruction This information is available even when CS_OPT_DETAIL = CS_OPT_OFF
bytes: [u8; 24]
Machine bytes of this instruction, with number of bytes indicated by @size above This information is available even when CS_OPT_DETAIL = CS_OPT_OFF
mnemonic: [c_char; 32]
Ascii text of instruction mnemonic This information is available even when CS_OPT_DETAIL = CS_OPT_OFF
op_str: [c_char; 160]
Ascii text of instruction operands This information is available even when CS_OPT_DETAIL = CS_OPT_OFF
detail: *mut cs_detail
Pointer to cs_detail. NOTE: detail pointer is only valid when both requirements below are met: (1) CS_OP_DETAIL = CS_OPT_ON (2) Engine is not in Skipdata mode (CS_OP_SKIPDATA option set to CS_OPT_ON)
NOTE 2: when in Skipdata mode, or when detail mode is OFF, even if this pointer is not NULL, its content is still irrelevant.