Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings. (bloaty 依赖)
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Nguyen Anh Quynh 32238dc8c5 cstool: cleanup 8 years ago
arch Fix two missing register operands in X86 AT&T syntax (#791) 8 years ago
bindings Change pointer-deref-then-assignment to memmove to make PyPy happy. 8 years ago
contrib fix typo, style 8 years ago
cstool cstool: cleanup 8 years ago
docs fix typo, style 8 years ago
include fix typo, style 8 years ago
msvc fix that version was for 2013; should be 2010 9 years ago
packages package: update Brew formula (copied from upstream) 10 years ago
suite fixed issue #726 (snprintf undefined in test_arm_regression) 8 years ago
tests tests: cleanup 8 years ago
windows suppress MSVC code analysis (PREfast) warnings 8 years ago
windowsce Added documentation for building for Windows CE. 9 years ago
xcode port Windows driver support 9 years ago
.appveyor.yml rename appveyor.yml to .appveyor.yml 9 years ago
.gitignore update .gitignore 8 years ago
.travis.yml Fix travis build failures 9 years ago
CMakeLists.txt cstool: prepare for multiple C sources 8 years ago
COMPILE.TXT Added documentation for building for Windows CE. 9 years ago
COMPILE_CMAKE.TXT add M68K to all the docs 9 years ago
COMPILE_MSVC.TXT fix typo, style 8 years ago
CREDITS.TXT Merge remote-tracking branch 'upstream/next' into next 9 years ago
ChangeLog update ChangeLog for 3.0.2 10 years ago
HACK.TXT cstool: update README with more details 8 years ago
LEB128.h port Windows driver support 9 years ago
LICENSE.TXT a a newline to LICENSE.TXT 11 years ago
LICENSE_LLVM.TXT initial import 11 years ago
MCDisassembler.h 2015 10 years ago
MCFixedLenDisassembler.h 2015 10 years ago
MCInst.c x86: properly handle SSE/AVX instructions 8 years ago
MCInst.h x86: properly handle SSE/AVX instructions 8 years ago
MCInstrDesc.c 2015 10 years ago
MCInstrDesc.h port Windows driver support 9 years ago
MCRegisterInfo.c mips: update core 10 years ago
MCRegisterInfo.h port Windows driver support 9 years ago
Makefile Makefile: remove extra / letter for install target 8 years ago
MathExtras.h Merge remote-tracking branch 'upstream/next' into next 9 years ago
README.md add Appveyor CI 9 years ago
RELEASE_NOTES RELEASE_NOTES 10 years ago
SStream.c Merge remote-tracking branch 'upstream/next' into next 9 years ago
SStream.h Added support for building binaries for Windows CE 7 on ARMv7 (a.k.a., Windows Embedded Compact 7) and for Windows CE 8 on ARMv7 (a.k.a., Windows Embedded Compact 2013). 9 years ago
TODO TODO 10 years ago
config.mk Added CAPSTONE_HAS_OSXKERNEL to config.mk 9 years ago
cs.c suppress MSVC code analysis (PREfast) warnings 8 years ago
cs_priv.h add CS_OPT_UNSIGNED option to print immediate in unsigned form. only ARM is supported for now (issue #585) 9 years ago
functions.mk Makefile: put common functions into functions.mk 11 years ago
make.sh Correct build settings for xnu kext. Changed calloc name to avoid potential conflicts 9 years ago
pkgconfig.mk bump version to 4.0 10 years ago
utils.c simplify ARCH_group_name() by using lookup table as suggested by @learn_more. also added the missing group name for GRP_PRIVILEGE 10 years ago
utils.h simplify ARCH_group_name() by using lookup table as suggested by @learn_more. also added the missing group name for GRP_PRIVILEGE 10 years ago

README.md

Capstone Engine

Build Status Build status

Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.

Created by Nguyen Anh Quynh, then developed and maintained by a small community, Capstone offers some unparalleled features:

  • Support multiple hardware architectures: ARM, ARM64 (ARMv8), M68K, Mips, PPC, Sparc, SystemZ, XCore and X86 (including X86_64).

  • Having clean/simple/lightweight/intuitive architecture-neutral API.

  • Provide details on disassembled instruction (called “decomposer” by others).

  • Provide semantics of the disassembled instruction, such as list of implicit registers read & written.

  • Implemented in pure C language, with lightweight wrappers for C++, C#, Go, Java, Lua, NodeJS, Ocaml, Python, Ruby, Rust & Vala ready (available in main code, or provided externally by the community).

  • Native support for all popular platforms: Windows, Mac OSX, iOS, Android, Linux, *BSD, Solaris, etc.

  • Thread-safe by design.

  • Special support for embedding into firmware or OS kernel.

  • High performance & suitable for malware analysis (capable of handling various X86 malware tricks).

  • Distributed under the open source BSD license.

Further information is available at http://www.capstone-engine.org

Compile

See COMPILE.TXT file for how to compile and install Capstone.

Documentation

See docs/README for how to customize & program your own tools with Capstone.

Hack

See HACK.TXT file for the structure of the source code.

License

This project is released under the BSD license. If you redistribute the binary or source code of Capstone, please attach file LICENSE.TXT with your products.