Virtualization
/
capstone
mirror of https://gitlab.com/qemu-project/capstone.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
2,605 Commits 18 Branches 46 Tags 73 MiB
C 90.4%
C# 2.9%
Java 2%
Python 1.9%
OCaml 1.2%
Other 1.3%
Go to file
Nguyen Anh Quynh bde4bfa11d Merge pull request #608 from PerMildner/next 
Do not truncate branch target address to 32 bit
 		2016-03-27 00:16:01 +07:00
arch Do not truncate branch target address to 32 bit 2016-03-25 17:07:39 +01:00
bindings bugfix: removed leading ./ from OBJDIR to avoid corrupting setup.py install 2016-03-25 22:31:13 +01:00
contrib [contrib][objdump] remove un needed import 2015-10-03 20:49:39 +10:00
docs docs: add the link to mnemonic.html 2015-04-27 16:35:30 +08:00
include/capstone add CS_OPT_UNSIGNED option to print immediate in unsigned form. only ARM is supported for now (issue #585) 2016-03-14 13:52:23 +08:00
msvc [M68K] msvc : add CAPSTONE_HAS_M68K define to all msvc projects 2015-10-10 22:49:21 +11:00
packages package: update Brew formula (copied from upstream) 2015-02-24 20:49:47 +08:00
suite suite: add regress/ 2016-03-10 12:37:25 +08:00
tests arm64: indentation 2016-01-22 22:37:59 +08:00
xcode Updated to recommended settings (per Xcode 7) 2015-10-31 15:40:14 -04:00
.appveyor.yml rename appveyor.yml to .appveyor.yml 2016-03-15 00:01:10 +08:00
.gitignore update .gitignore 2015-10-03 11:33:26 +08:00
.travis.yml travis: support OSX 2016-03-06 22:52:51 +08:00
CMakeLists.txt Fixed missing includes + changed CMakeLists.txt 2015-10-04 14:22:58 +02:00
COMPILE.TXT add M68K to all the docs 2015-10-05 16:14:19 +08:00
COMPILE_CMAKE.TXT add M68K to all the docs 2015-10-05 16:14:19 +08:00
COMPILE_MSVC.TXT add M68K to all the docs 2015-10-05 16:14:19 +08:00
CREDITS.TXT update CREDITS.TXT 2016-03-01 11:09:17 +08:00
ChangeLog update ChangeLog for 3.0.2 2015-03-12 00:10:50 +08:00
HACK.TXT add M68K to all the docs 2015-10-05 16:14:19 +08:00
LEB128.h 2015 2015-03-04 17:45:23 +08:00
LICENSE.TXT a a newline to LICENSE.TXT 2014-02-20 17:08:28 +08:00
LICENSE_LLVM.TXT initial import 2013-11-27 12:11:31 +08:00
MCDisassembler.h 2015 2015-03-04 17:45:23 +08:00
MCFixedLenDisassembler.h 2015 2015-03-04 17:45:23 +08:00
MCInst.c Add support to embed Capstone 3.x branch into OS X kernel extensions. 2015-04-09 18:28:19 +01:00
MCInst.h arm: support cs_regs_access() API 2015-04-07 11:59:26 +08:00
MCInstrDesc.c 2015 2015-03-04 17:45:23 +08:00
MCInstrDesc.h 2015 2015-03-04 17:45:23 +08:00
MCRegisterInfo.c mips: update core 2015-03-02 15:12:42 +08:00
MCRegisterInfo.h mips: fix bugs in the last update 2015-03-02 17:31:44 +08:00
Makefile Fix library install for tests 2016-03-01 00:09:48 -05:00
MathExtras.h 2015 2015-03-04 17:45:23 +08:00
README.md add Appveyor CI 2016-03-08 00:19:07 +08:00
RELEASE_NOTES RELEASE_NOTES 2015-03-12 00:11:03 +08:00
SStream.c Add support to embed Capstone 3.x branch into OS X kernel extensions. 2015-04-09 18:28:19 +01:00
SStream.h 2015 2015-03-04 17:45:23 +08:00
TODO TODO 2015-03-11 11:33:00 +08:00
config.mk Added CAPSTONE_HAS_OSXKERNEL to config.mk 2015-11-05 22:59:45 +01:00
cs.c add CS_OPT_UNSIGNED option to print immediate in unsigned form. only ARM is supported for now (issue #585) 2016-03-14 13:52:23 +08:00
cs_priv.h add CS_OPT_UNSIGNED option to print immediate in unsigned form. only ARM is supported for now (issue #585) 2016-03-14 13:52:23 +08:00
functions.mk Makefile: put common functions into functions.mk 2014-05-01 22:53:52 +08:00
make.sh Correct build settings for xnu kext. Changed calloc name to avoid potential conflicts 2015-11-06 14:44:55 +01:00
myinttypes.h add header guard to myinttypes.h 2015-06-08 23:33:11 +08:00
pkgconfig.mk bump version to 4.0 2014-12-26 23:14:53 +08:00
utils.c simplify ARCH_group_name() by using lookup table as suggested by @learn_more. also added the missing group name for GRP_PRIVILEGE 2015-04-27 12:13:34 +08:00
utils.h simplify ARCH_group_name() by using lookup table as suggested by @learn_more. also added the missing group name for GRP_PRIVILEGE 2015-04-27 12:13:34 +08:00

README.md

Capstone Engine

Build Status Build status

Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.

Created by Nguyen Anh Quynh, then developed and maintained by a small community, Capstone offers some unparalleled features:

  • Support multiple hardware architectures: ARM, ARM64 (ARMv8), M68K, Mips, PPC, Sparc, SystemZ, XCore and X86 (including X86_64).

  • Having clean/simple/lightweight/intuitive architecture-neutral API.

  • Provide details on disassembled instruction (called “decomposer” by others).

  • Provide semantics of the disassembled instruction, such as list of implicit registers read & written.

  • Implemented in pure C language, with lightweight wrappers for C++, C#, Go, Java, Lua, NodeJS, Ocaml, Python, Ruby, Rust & Vala ready (available in main code, or provided externally by the community).

  • Native support for all popular platforms: Windows, Mac OSX, iOS, Android, Linux, *BSD, Solaris, etc.

  • Thread-safe by design.

  • Special support for embedding into firmware or OS kernel.

  • High performance & suitable for malware analysis (capable of handling various X86 malware tricks).

  • Distributed under the open source BSD license.

Further information is available at http://www.capstone-engine.org

Compile

See COMPILE.TXT file for how to compile and install Capstone.

Documentation

See docs/README for how to customize & program your own tools with Capstone.

Hack

See HACK.TXT file for the structure of the source code.

License

This project is released under the BSD license. If you redistribute the binary or source code of Capstone, please attach file LICENSE.TXT with your products.