Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings. (bloaty 依赖)
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 

1.5 KiB

1. To install Python binding on *nix, simply run below command:

$ sudo make install

For better performance, install Cython-based binding with:

$ sudo make install_cython

NOTE: to install Cython, depending on if you already have pip or
easy_install installed, simply do either:

$ sudo pip install cython
or:
$ sudo pip install cython


This directory contains some test code to show how to use Capstone API.

- test.py
This code shows the most simple form of API where we only want to get basic
information out of disassembled instruction, such as address, mnemonic and
operand string.

- test_detail.py:
This code shows how to access to architecture-neutral information in disassembled
instructions, such as implicit registers read/written, or groups of instructions
that this instruction belong to.

- test_<arch>.py
These code show how to access architecture-specific information for each
architecture.


2. To install Python binding on Windows:

Recommended method:

Use the Python module installer for 32/64 bit Windows from:

http://www.capstone-engine.org/download.html


Manual method:

If the module installer fails to locate your Python install, or if you have
additional Python installs (e.g. Anaconda / virtualenv), run the following
command in command prompt:

C:\> C:\location_to_python\python.exe setup.py install

Next, copy libcapstone.dll from the 'Core engine for Windows' package available
on the same Capstone download page and paste it in the path:

C:\location_to_python\Lib\site-packages\capstone\