Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings. (bloaty 依赖)
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Nguyen Anh Quynh 4bd4a2f60e add some missing header files into COMPILE.TXT 10 years ago
arch x86: fix operand size for 'CALL PTR [REG]'. bug reported by Gabriel Quadros 10 years ago
bindings python: indentation for README.TXT 10 years ago
contrib vsnprintf fix 11 years ago
docs docs: add a link to online doc of cs_disasm_iter() 10 years ago
include x86: add prefix constant REPE 10 years ago
msvc capstone_dll gets also statically linked to the CRT now 10 years ago
packages package: update Brew to 3.0.1 10 years ago
suite suite: fix an compilation warning reported by MSVC on test_arm_regression.c 10 years ago
tests tests: update test_arm.c to add a sample reflecting the addition of lshift field on arm_op_mem 10 years ago
xcode Changed framework install path to @rpath, other changes to project file 10 years ago
.gitignore x86: more encodings for FXCH & FCOMP. also print LJUMP without * as prefix for Intel syntax. handle BOUND & FARCALL better 10 years ago
CMakeLists.txt CMake: add new option CAPSTONE_BUILD_STATIC_RUNTIME 10 years ago
COMPILE.TXT add some missing header files into COMPILE.TXT 10 years ago
COMPILE_CMAKE.TXT python: setup.py builds Windows core with cmake in release mode 10 years ago
COMPILE_MSVC.TXT added CAPSTONE_X86_ATT_DISABLE_NO to VS projects, readmes 10 years ago
CREDITS.TXT update CREDITS.TXT 10 years ago
ChangeLog python: distribute msvcr120.dll for Windows installer 10 years ago
HACK.TXT Fix utf8-art 10 years ago
LEB128.h
LICENSE.TXT
LICENSE_LLVM.TXT
MANIFEST.in Updated setup.py so it can build the capstone library by itself. 10 years ago
MCDisassembler.h
MCFixedLenDisassembler.h
MCInst.c arm: some load/store instructions writeback without bang letter. bug reported by @jabba2989 10 years ago
MCInst.h arm: some load/store instructions writeback without bang letter. bug reported by @jabba2989 10 years ago
MCInstrDesc.c
MCInstrDesc.h arm: update core. this added a new instruction UDF. also updated Python+Java bindings accordingly 10 years ago
MCRegisterInfo.c
MCRegisterInfo.h
Makefile Makefile: rename BUILD_CORE_ONLY to CAPSTONE_BUILD_CORE_ONLY for consistency 10 years ago
MathExtras.h arm64: update core. this added a lot more details to cs_arm64_op struct 10 years ago
README update README 10 years ago
RELEASE_NOTES python: distribute msvcr120.dll for Windows installer 10 years ago
SStream.c arm64: set absolute (rather than relative) address B/BL. issue reported by Pancake 10 years ago
SStream.h arm64: set absolute (rather than relative) address B/BL. issue reported by Pancake 10 years ago
TODO update TODO 10 years ago
config.mk renamed CAPSTONE_NO_ATT to CAPSTONE_X86_ATT_DISABLE, added options to makefile, cmake, compile.txt 10 years ago
cs.c code style 10 years ago
cs_priv.h add new API cs_group_name() to return group name in string, given the group id 11 years ago
functions.mk
inttypes.h * Fixed bug in Thumb2 pop caused by me incorrectly assuming that 10 years ago
make.sh on OSX, 'make uninstall' should clean files under /usr/local rather than /usr 10 years ago
pkgconfig.mk bump version to 4.0 10 years ago
utils.c fix more MSVC warnings 10 years ago
utils.h fix more MSVC warnings 10 years ago

README

Capstone is a disassembly framework with the target of becoming the ultimate
disasm engine for binary analysis and reversing in the security community.

Created by Nguyen Anh Quynh, then developed and maintained by a small community,
Capstone offers some unparalleled features:

- Support multiple hardware architectures: ARM, ARM64 (ARMv8), Mips, PPC, Sparc,
SystemZ, XCore and X86 (including X86_64).

- Having clean/simple/lightweight/intuitive architecture-neutral API.

- Provide details on disassembled instruction (called “decomposer” by others).

- Provide semantics of the disassembled instruction, such as list of implicit
registers read & written.

- Implemented in pure C language, with lightweight wrappers for C++, C#, Go,
Java, NodeJS, Ocaml, Python, Ruby & Vala ready (available in main code,
or provided externally by the community).

- Native support for all popular platforms: Windows, Mac OSX, iOS, Android,
Linux, *BSD, Solaris, etc.

- Thread-safe by design.

- Special support for embedding into firmware or OS kernel.

- High performance & suitable for malware analysis (capable of handling various
X86 malware tricks).

- Distributed under the open source BSD license.

Further information is available at http://www.capstone-engine.org


[Compile]

See COMPILE.TXT file for how to compile and install Capstone.


[Documentation]

See docs/README for how to customize & program your own tools with Capstone.


[Hack]

See HACK.TXT file for the structuture of the source code.


[License]

This project is released under the BSD license. If you redistribute the binary
or source code of Capstone, please attach file LICENSE.TXT with your products.