calc_damaged_instructions.c

int calc_damaged_instructions(uint8_t *data, size_t len_erased) {
	size_t max_len = 50;
	size_t decoded_len = 0;
	// Initialize decoder context.
	ZydisDecoder decoder;
	ZydisDecoderInit(
		&decoder,
		ZYDIS_MACHINE_MODE_LONG_64,
		ZYDIS_ADDRESS_WIDTH_64);

	ZydisFormatter formatter;
	ZydisFormatterInit(&formatter, ZYDIS_FORMATTER_STYLE_INTEL);

	uint64_t instructionPointer = 0x007FFFFFFF400000;
	uint8_t* readPointer = data;

	ZydisDecodedInstruction instruction;
	while (ZYDIS_SUCCESS(ZydisDecoderDecodeBuffer(
		&decoder, readPointer, max_len, instructionPointer, &instruction)))
	{
		char buffer[256];
		ZydisFormatterFormatInstruction(
			&formatter, &instruction, buffer, sizeof(buffer));
		puts(buffer);

		readPointer += instruction.length;
		max_len -= instruction.length;
		instructionPointer += instruction.length;
		decoded_len += instruction.length;
		if (decoded_len >= len_erased) {
			break;
		}
	}

	return decoded_len;
}