使用 Homebrew, apk, apt, dnf, Nix, pacman 安装 zydis

项目链接

• 主页
• 仓库
• 上游文档
• 软件包管理器页面

命令和别名

• ZydisDisasm
• ZydisInfo

项目历史

The public GitHub repository was created on 2014-10-24, and Zyantific's own 2017 project post described Zydis v2 work as arriving three years after the library's initial release. Early Zydis was a C++11 x86 disassembler; the v2 cycle was a full rewrite that moved the public interface to C99 so it could be used from more languages, drivers, embedded environments, and other low-level contexts.

Zydis evolved from a decoder/disassembler into a broader instruction tooling library. The README now describes it as both a disassembler and code-generation library, while the 2022 v4 project post introduced code generation and rewriting support alongside API simplifications and operand-decoding changes.

The project has kept a package-friendly shape: a CMake build, an optional single-header/single-source amalgamated distribution, no third-party runtime dependency, official documentation, small CLI tools such as ZydisInfo and ZydisDisasm, and bindings or front ends for Rust, Python, and zasm.

采用历史

Zydis adoption is unusually visible for a low-level C library because the README names major open-source consumers including x64dbg, Mozilla Firefox, and WebKit. Those users point to its niche: reverse engineering, debugging, browser JavaScript engines, binary analysis, and code-rewriting tools that need accurate x86 instruction metadata.

Its packaging spread follows the same pattern. The README documents availability through multiple package ecosystems and highlights support for Windows, macOS, Linux, BSDs, UEFI, user mode, and kernel mode, making it attractive to package maintainers who want one small library that builds across uncommon targets.

使用方式

Developers use Zydis to decode byte buffers into instruction structures, format human-readable Intel or AT&T assembly, inspect operands and implicit register or flag effects, and, in newer APIs, encode or rewrite instructions. The bundled examples show direct disassembly and instruction encoding, while ZydisInfo is useful for inspecting the metadata Zydis exposes for a single instruction.

In package-manager terms, Zydis is usually consumed as headers, a library, and a couple of inspection utilities rather than as an end-user application. It sits underneath debuggers, disassemblers, binary instrumentation systems, emulator-adjacent tooling, and security research workflows.

为什么软件包爱好者会关心

Zydis matters to package nerds because it is a modern example of a highly specialized systems library that succeeds by being easy to vendor, package, and cross-compile. The no-libc/no-malloc posture and amalgamated release option explain why downstreams can embed it in places where ordinary libraries are too heavy.

It also shows how package visibility can come from downstream trust rather than a flashy command line. A small formula exposes a library that quietly supports reverse-engineering tools, browser engines, and low-level diagnostics across several operating systems.

时间线

• 2014-10-24: Public GitHub repository for zyantific/zydis is created.
• 2017-07-24: Zyantific announces the v2 alpha, describing a complete rewrite and the move from C++11 to C99.
• 2022-11-20: Zyantific announces the v4 line with code generation, rewriting support, and API simplifications.
• 2020s: The README documents adoption by x64dbg, Mozilla Firefox, WebKit, language bindings, zasm, and package-manager distribution across major desktop and Unix-like systems.

Related projects

• Related projects include x64dbg, Mozilla Firefox's SpiderMonkey/JavaScript engine code, WebKit JavaScriptCore, Intel XED, LLVM instruction data, zasm, zydis-rs, zydis-py, Capstone, distorm, and other x86 reverse-engineering or binary-analysis tools.

来源

• https://api.github.com/repos/zyantific/zydis
• https://doc.zydis.re/
• https://github.com/zyantific/zydis
• https://raw.githubusercontent.com/zyantific/zydis/master/README.md
• https://zyantific.com/posts/zydis-v2-0-alpha-out-now
• https://zyantific.com/posts/zydis-v4-0-released
• https://zydis.re/