Method disassemble

src/function.cpp:5–52

Function::Function(DWORD startRva, DWORD endRva, std::vector<BYTE> bytes) : startRva(startRva), endRva(endRva), bytes(bytes) {};

bool Function::disassemble()
{
	// initialise zydis decoder
	ZydisDecoder decoder;
	if (ZYAN_FAILED(ZydisDecoderInit(&decoder, ZYDIS_MACHINE_MODE_LONG_64, ZYDIS_STACK_WIDTH_64)))
	{
		std::cerr << "error initializing ZydisDecoder" << std::endl;
		return 0;
	}

	ZydisDecodedInstruction instructionInfo;
	ZydisDecodedOperand operandInfo[ZYDIS_MAX_OPERAND_COUNT];

	// first pass: disassemble each instruction
	DWORD offset = 0;
	while (offset < bytes.size())
	{
		if (ZYAN_FAILED(ZydisDecoderDecodeFull(&decoder, bytes.data() + offset, bytes.size(), &instructionInfo, operandInfo)))
		{
			std::cerr << "error decoding instruction" << std::endl;
			return 0;
		}

		instructions.push_back(Instruction(instructionInfo, operandInfo, offset + startRva));

		offset += instructionInfo.length;
	}

	// second pass: find branch destinations
	for (int i = 0; i < instructions.size(); i++)
	{
		if (instructions[i].isBranchInstruction())
		{
			for (int j = 0; j < instructions.size(); j++)
			{
				// check if instruction is destination of our branch
				if (instructions[i].getRva() +
					instructions[i].getOperandInfo()[0].imm.value.s +
					instructions[i].getInstructionInfo().length == instructions[j].getRva())
				{
					instructions[i].setDestInstructionIndex(j);
				}
			}
		}
	}

	return 1;
}

bool Function::compileInstructionsToVirtualInstructions()
{