Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings. (bloaty 依赖)
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
tandasat e6fd7ac249 Merge remote-tracking branch 'upstream/next' into next 9 years ago
arch Merge remote-tracking branch 'upstream/next' into next 9 years ago
bindings bindings: update Java & Ocaml after recent change on M68k interface 9 years ago
contrib Merge remote-tracking branch 'upstream/next' into next 9 years ago
docs docs: add the link to mnemonic.html 10 years ago
include Merge remote-tracking branch 'upstream/next' into next 9 years ago
msvc fix that version was for 2013; should be 2010 9 years ago
packages package: update Brew formula (copied from upstream) 10 years ago
suite port Windows driver support 9 years ago
tests Merge remote-tracking branch 'upstream/next' into next 9 years ago
windows port Windows driver support 9 years ago
windowsce Added documentation for building for Windows CE. 9 years ago
xcode port Windows driver support 9 years ago
.appveyor.yml rename appveyor.yml to .appveyor.yml 9 years ago
.gitignore port Windows driver support 9 years ago
.travis.yml Fix travis build failures 9 years ago
CMakeLists.txt port Windows driver support 9 years ago
COMPILE.TXT Added documentation for building for Windows CE. 9 years ago
COMPILE_CMAKE.TXT add M68K to all the docs 9 years ago
COMPILE_MSVC.TXT port Windows driver support 9 years ago
CREDITS.TXT Merge remote-tracking branch 'upstream/next' into next 9 years ago
ChangeLog update ChangeLog for 3.0.2 10 years ago
HACK.TXT port Windows driver support 9 years ago
LEB128.h port Windows driver support 9 years ago
LICENSE.TXT a a newline to LICENSE.TXT 11 years ago
LICENSE_LLVM.TXT initial import 11 years ago
MCDisassembler.h 2015 10 years ago
MCFixedLenDisassembler.h 2015 10 years ago
MCInst.c Add support to embed Capstone 3.x branch into OS X kernel extensions. 10 years ago
MCInst.h port Windows driver support 9 years ago
MCInstrDesc.c 2015 10 years ago
MCInstrDesc.h port Windows driver support 9 years ago
MCRegisterInfo.c mips: update core 10 years ago
MCRegisterInfo.h port Windows driver support 9 years ago
Makefile Fix linking step for new lib name 9 years ago
MathExtras.h Merge remote-tracking branch 'upstream/next' into next 9 years ago
README.md add Appveyor CI 9 years ago
RELEASE_NOTES RELEASE_NOTES 10 years ago
SStream.c Merge remote-tracking branch 'upstream/next' into next 9 years ago
SStream.h Added support for building binaries for Windows CE 7 on ARMv7 (a.k.a., Windows Embedded Compact 7) and for Windows CE 8 on ARMv7 (a.k.a., Windows Embedded Compact 2013). 9 years ago
TODO TODO 10 years ago
config.mk Added CAPSTONE_HAS_OSXKERNEL to config.mk 9 years ago
cs.c Merge remote-tracking branch 'upstream/next' into next 9 years ago
cs_priv.h add CS_OPT_UNSIGNED option to print immediate in unsigned form. only ARM is supported for now (issue #585) 9 years ago
functions.mk Makefile: put common functions into functions.mk 11 years ago
make.sh Correct build settings for xnu kext. Changed calloc name to avoid potential conflicts 9 years ago
pkgconfig.mk bump version to 4.0 10 years ago
utils.c simplify ARCH_group_name() by using lookup table as suggested by @learn_more. also added the missing group name for GRP_PRIVILEGE 10 years ago
utils.h simplify ARCH_group_name() by using lookup table as suggested by @learn_more. also added the missing group name for GRP_PRIVILEGE 10 years ago

README.md

Capstone Engine

Build Status Build status

Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.

Created by Nguyen Anh Quynh, then developed and maintained by a small community, Capstone offers some unparalleled features:

  • Support multiple hardware architectures: ARM, ARM64 (ARMv8), M68K, Mips, PPC, Sparc, SystemZ, XCore and X86 (including X86_64).

  • Having clean/simple/lightweight/intuitive architecture-neutral API.

  • Provide details on disassembled instruction (called “decomposer” by others).

  • Provide semantics of the disassembled instruction, such as list of implicit registers read & written.

  • Implemented in pure C language, with lightweight wrappers for C++, C#, Go, Java, Lua, NodeJS, Ocaml, Python, Ruby, Rust & Vala ready (available in main code, or provided externally by the community).

  • Native support for all popular platforms: Windows, Mac OSX, iOS, Android, Linux, *BSD, Solaris, etc.

  • Thread-safe by design.

  • Special support for embedding into firmware or OS kernel.

  • High performance & suitable for malware analysis (capable of handling various X86 malware tricks).

  • Distributed under the open source BSD license.

Further information is available at http://www.capstone-engine.org

Compile

See COMPILE.TXT file for how to compile and install Capstone.

Documentation

See docs/README for how to customize & program your own tools with Capstone.

Hack

See HACK.TXT file for the structure of the source code.

License

This project is released under the BSD license. If you redistribute the binary or source code of Capstone, please attach file LICENSE.TXT with your products.