Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings. (bloaty 依赖)
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
..
CDisassembler.cls
CInstDetails.cls
CInstruction.cls
CX86Inst.cls
CX86OpMem.cls
CX86Operand.cls
Form1.frm
Form1.frx
Module1.bas
Project1.vbp
Project1.vbw
README.txt
mMisc.bas
mx86.bas
screenshot.png
vbCapstone.cpp
vbCapstone.sln
vbCapstone.vcproj

README.txt


Capstone Disassembly Engine bindings for VB6
Contributed by FireEye FLARE Team
Author: David Zimmer <david.zimmer@fireeye.com>, <dzzie@yahoo.com>
License: Apache
Copyright: FireEye 2017

This is a sample for using the capstone disassembly engine with VB6.

All of the capstone API are implemented, so this lib supports basic
disassembly of all of the processor architectures that capstone implements.

In the vb code, full instruction details are currently only supported for
the x86 processor family.

This sample was built against Capstone 3.0 rc4. Note that if the capstone
structures change in the future this code will have to be adjusted to match.

The vbCapstone.dll is written in C. Project files are provided for VS2008.
It is a small shim to give VB6 access to a stdcall API to access capstone.
You could also modify capstone itself so its exports were stdcall.

The C project has an additional include directory set to ./../../include/
for <capstone.h>. This is for the /capstone/bindings/vb6/ directory structure