Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings. (bloaty 依赖)
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Nguyen Anh Quynh 5a36377c7c x86: add GRP_VM for some VMX instructions 10 years ago
arch x86: add GRP_VM for some VMX instructions 10 years ago
bindings x86: update core. also update all the bindings Java, Ocaml & Python 10 years ago
contrib
docs
include/capstone x86: update core. also update all the bindings Java, Ocaml & Python 10 years ago
msvc
packages
suite
tests
xcode
.gitignore
CMakeLists.txt
COMPILE.TXT
COMPILE_CMAKE.TXT
COMPILE_MSVC.TXT
CREDITS.TXT
ChangeLog
HACK.TXT
LEB128.h 2015 10 years ago
LICENSE.TXT
LICENSE_LLVM.TXT
MANIFEST.in
MCDisassembler.h 2015 10 years ago
MCFixedLenDisassembler.h 2015 10 years ago
MCInst.c 2015 10 years ago
MCInst.h 2015 10 years ago
MCInstrDesc.c 2015 10 years ago
MCInstrDesc.h 2015 10 years ago
MCRegisterInfo.c
MCRegisterInfo.h
Makefile
MathExtras.h 2015 10 years ago
README
RELEASE_NOTES
SStream.c 2015 10 years ago
SStream.h 2015 10 years ago
TODO
config.mk
cs.c 2015 10 years ago
cs_priv.h 2015 10 years ago
functions.mk
inttypes.h
make.sh
pkgconfig.mk
utils.c 2015 10 years ago
utils.h 2015 10 years ago

README

Capstone is a disassembly framework with the target of becoming the ultimate
disasm engine for binary analysis and reversing in the security community.

Created by Nguyen Anh Quynh, then developed and maintained by a small community,
Capstone offers some unparalleled features:

- Support multiple hardware architectures: ARM, ARM64 (ARMv8), Mips, PPC, Sparc,
SystemZ, XCore and X86 (including X86_64).

- Having clean/simple/lightweight/intuitive architecture-neutral API.

- Provide details on disassembled instruction (called “decomposer” by others).

- Provide semantics of the disassembled instruction, such as list of implicit
registers read & written.

- Implemented in pure C language, with lightweight wrappers for C++, C#, Go,
Java, NodeJS, Ocaml, Python, Ruby & Vala ready (available in main code,
or provided externally by the community).

- Native support for all popular platforms: Windows, Mac OSX, iOS, Android,
Linux, *BSD, Solaris, etc.

- Thread-safe by design.

- Special support for embedding into firmware or OS kernel.

- High performance & suitable for malware analysis (capable of handling various
X86 malware tricks).

- Distributed under the open source BSD license.

Further information is available at http://www.capstone-engine.org


[Compile]

See COMPILE.TXT file for how to compile and install Capstone.


[Documentation]

See docs/README for how to customize & program your own tools with Capstone.


[Hack]

See HACK.TXT file for the structuture of the source code.


[License]

This project is released under the BSD license. If you redistribute the binary
or source code of Capstone, please attach file LICENSE.TXT with your products.