Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.
Go to file
2017-05-16 18:15:43 +07:00
arch x86: cleanup isPrefixAtLocation() 2017-05-16 17:41:31 +07:00
bindings x86: add UD0 instruction 2017-05-07 11:17:23 +08:00
contrib fix typo, style 2016-09-28 07:33:14 -07:00
cstool cstool: support arm64be 2017-04-25 21:33:26 +08:00
docs fix typo, style 2016-09-28 07:33:14 -07:00
include x86: add UD0 instruction 2017-05-07 11:17:23 +08:00
msvc fix that version was for 2013; should be 2010 2016-05-12 04:30:27 -07:00
packages package: update Brew formula (copied from upstream) 2015-02-24 20:49:47 +08:00
suite suite: add disasm_mc.{py,sh} 2017-05-16 18:15:02 +07:00
tests Merge branch 'next2' into next 2017-04-17 21:27:26 +08:00
windows provide a validity check to prevent against Integer overflow conditions (#870) 2017-03-13 23:35:29 +08:00
windowsce Added documentation for building for Windows CE. 2016-04-12 09:26:47 +02:00
xcode port Windows driver support 2016-05-11 21:48:32 -07:00
.appveyor.yml rename appveyor.yml to .appveyor.yml 2016-03-15 00:01:10 +08:00
.gitignore binding: add Ocaml & Java const files for TMS320C64x 2017-04-17 21:24:06 +08:00
.travis.yml Fix travis build failures 2016-04-30 12:49:37 -04:00
capstone.pc.in CMake: fix pkgconfig file 2017-04-30 23:18:53 +08:00
ChangeLog Java: Support cs_strerror() and cs_regs_access() 2016-11-27 13:59:12 +01:00
CMakeLists.txt cmake: build static MSVCRT by default 2017-05-09 00:35:05 -07:00
COMPILE_CMAKE.TXT add nmake.bat 2017-03-13 15:07:28 +08:00
COMPILE_MSVC.TXT fix typo, style 2016-09-28 07:33:14 -07:00
COMPILE.TXT Added documentation for building for Windows CE. 2016-04-12 09:26:47 +02:00
config.mk Added support for the TMS320C64x architecture. 2017-04-14 17:00:40 +03:00
CREDITS.TXT TMS320C64x support at tests and const generator. 2017-04-14 17:03:28 +03:00
cs_priv.h Added support for the TMS320C64x architecture. 2017-04-14 17:00:40 +03:00
cs.c Minor fixes for the M68K port. 2017-04-14 17:00:40 +03:00
functions.mk Makefile: put common functions into functions.mk 2014-05-01 22:53:52 +08:00
HACK.TXT cstool: update README with more details 2016-10-11 00:21:20 +08:00
LEB128.h port Windows driver support 2016-05-11 21:48:32 -07:00
LICENSE_LLVM.TXT initial import 2013-11-27 12:11:31 +08:00
LICENSE.TXT a a newline to LICENSE.TXT 2014-02-20 17:08:28 +08:00
make.sh improve dependency on header files *.h, and remove clean from make.sh. see PR #793 2016-10-23 02:09:14 +08:00
Makefile Makefile: do not delete capstone.pc.in 2017-05-05 09:47:19 +08:00
MathExtras.h Merge remote-tracking branch 'upstream/next' into next 2016-05-11 22:52:34 -07:00
MCDisassembler.h 2015 2015-03-04 17:45:23 +08:00
MCFixedLenDisassembler.h 2015 2015-03-04 17:45:23 +08:00
MCInst.c x86: add UD0 instruction 2017-05-07 11:17:23 +08:00
MCInst.h x86: add UD0 instruction 2017-05-07 11:17:23 +08:00
MCInstrDesc.c 2015 2015-03-04 17:45:23 +08:00
MCInstrDesc.h port Windows driver support 2016-05-11 21:48:32 -07:00
MCRegisterInfo.c mips: update core 2015-03-02 15:12:42 +08:00
MCRegisterInfo.h port Windows driver support 2016-05-11 21:48:32 -07:00
nmake-x86.bat add nmake-x86.bat 2017-05-09 22:58:23 +08:00
nmake.bat add nmake.bat 2017-03-13 15:07:28 +08:00
pkgconfig.mk Python: Automatically conform to PEP440 for version numbers. ported from Unicorn Python binding 2017-02-01 13:23:15 +08:00
README.md add TMS320C64X to README 2017-04-17 21:31:11 +08:00
RELEASE_NOTES RELEASE_NOTES 2015-03-12 00:11:03 +08:00
SStream.c Merge remote-tracking branch 'upstream/next' into next 2016-05-11 22:52:34 -07:00
SStream.h Added support for building binaries for Windows CE 7 on ARMv7 (a.k.a., Windows Embedded Compact 7) and for Windows CE 8 on ARMv7 (a.k.a., Windows Embedded Compact 2013). 2016-04-07 17:05:00 +02:00
TODO TODO 2015-03-11 11:33:00 +08:00
utils.c simplify ARCH_group_name() by using lookup table as suggested by @learn_more. also added the missing group name for GRP_PRIVILEGE 2015-04-27 12:13:34 +08:00
utils.h Fix compilation from within a macOS kernel extension. #867 2017-03-08 20:58:28 +08:00

Capstone Engine

Build Status Build status

Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.

Created by Nguyen Anh Quynh, then developed and maintained by a small community, Capstone offers some unparalleled features:

  • Support multiple hardware architectures: ARM, ARM64 (ARMv8), M68K, Mips, PPC, Sparc, SystemZ, TMS320C64X, XCore and X86 (including X86_64).

  • Having clean/simple/lightweight/intuitive architecture-neutral API.

  • Provide details on disassembled instruction (called “decomposer” by others).

  • Provide semantics of the disassembled instruction, such as list of implicit registers read & written.

  • Implemented in pure C language, with lightweight bindings for PHP, PowerShell, Emacs, Haskell, Perl, Python, Ruby, C#, NodeJS, Java, GO, C++, OCaml, Lua, Rust, Delphi, Free Pascal & Vala ready either in main code, or provided externally by the community).

  • Native support for all popular platforms: Windows, Mac OSX, iOS, Android, Linux, *BSD, Solaris, etc.

  • Thread-safe by design.

  • Special support for embedding into firmware or OS kernel.

  • High performance & suitable for malware analysis (capable of handling various X86 malware tricks).

  • Distributed under the open source BSD license.

Further information is available at http://www.capstone-engine.org

Compile

See COMPILE.TXT file for how to compile and install Capstone.

Documentation

See docs/README for how to customize & program your own tools with Capstone.

Hack

See HACK.TXT file for the structure of the source code.

License

This project is released under the BSD license. If you redistribute the binary or source code of Capstone, please attach file LICENSE.TXT with your products.