Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.
Go to file
2019-02-21 22:33:15 +08:00
arch trimming MCRegisterClass 2019-02-21 22:33:15 +08:00
bindings fix conflicts 2019-02-18 20:04:30 +08:00
contrib Update SystemZ to LLVM commit 5ad902a6 (#1306) 2018-12-16 21:48:51 +08:00
cstool bpf: print setup config in cstool -v 2019-02-18 20:06:11 +08:00
docs add docs/capstone-logo.png 2018-12-31 16:29:00 +08:00
include Avoids leak in wasm details (#1372) 2019-02-20 23:38:11 +08:00
msvc merge next to master 2018-07-20 12:36:50 +08:00
packages merge next to master 2018-07-20 12:36:50 +08:00
suite Adds corpus generation for bpf architecture (#1396) 2019-02-21 10:42:31 +08:00
tests wasm: fix misordering (#1391) 2019-02-19 00:10:36 +08:00
windows provide a validity check to prevent against Integer overflow conditions (#870) 2017-03-13 23:35:29 +08:00
windowsce Added documentation for building for Windows CE. 2016-04-12 09:26:47 +02:00
xcode merge next to master 2018-07-20 12:36:50 +08:00
.appveyor.yml rename appveyor.yml to .appveyor.yml 2016-03-15 00:01:10 +08:00
.gitattributes Fix language statistics by considering *.inc files to be C files. (#1078) 2018-01-14 20:42:20 +08:00
.gitignore New architecture: BPF (#1388) 2019-02-18 17:39:51 +08:00
.travis.yml Integrate into travis cli (#1378) 2019-02-14 22:15:12 +08:00
capstone.pc.in fix include path in pkg-config template (#1276) 2018-10-23 19:42:01 -03:00
ChangeLog ChangeLog 2019-01-10 13:18:49 +08:00
cmake-x86.sh Add webassembly arch (#1359) 2019-02-01 23:03:47 +08:00
cmake.sh add cmake.sh 2019-02-03 14:38:51 +08:00
CMakeLists.txt respect libsuffix in pkgconfig (#1393) 2019-02-20 10:12:42 +08:00
COMPILE_CMAKE.TXT New architecture: BPF (#1388) 2019-02-18 17:39:51 +08:00
COMPILE_MSVC.TXT Fix CAPSTONE_HAS_PPC flags (#1361) 2019-02-03 09:34:59 +08:00
COMPILE.TXT New architecture: BPF (#1388) 2019-02-18 17:39:51 +08:00
config.mk New architecture: BPF (#1388) 2019-02-18 17:39:51 +08:00
CREDITS.TXT New architecture: BPF (#1388) 2019-02-18 17:39:51 +08:00
cs_priv.h merge next to master 2018-07-20 12:36:50 +08:00
cs.c wasm: fix misordering (#1391) 2019-02-19 00:10:36 +08:00
functions.mk Makefile: put common functions into functions.mk 2014-05-01 22:53:52 +08:00
HACK.TXT Adds corpus generation for bpf architecture (#1396) 2019-02-21 10:42:31 +08:00
LEB128.h Undefined shifts (#1154) 2018-06-02 16:49:36 +08:00
LICENSE_LLVM.TXT initial import 2013-11-27 12:11:31 +08:00
LICENSE.TXT a a newline to LICENSE.TXT 2014-02-20 17:08:28 +08:00
make.sh make.sh: fix ./make.sh ios issue (#1354) 2019-01-25 14:28:17 +08:00
Makefile New architecture: BPF (#1388) 2019-02-18 17:39:51 +08:00
MathExtras.h fix undefined shift in countLeadingZeros (#1157) 2018-06-03 22:27:54 +08:00
MCDisassembler.h 2015 2015-03-04 17:45:23 +08:00
MCFixedLenDisassembler.h 2015 2015-03-04 17:45:23 +08:00
MCInst.c Add webassembly arch (#1359) 2019-02-01 23:03:47 +08:00
MCInst.h Add webassembly arch (#1359) 2019-02-01 23:03:47 +08:00
MCInstrDesc.c merge next to master 2018-07-20 12:36:50 +08:00
MCInstrDesc.h merge next to master 2018-07-20 12:36:50 +08:00
MCRegisterInfo.c merge next to master 2018-07-20 12:36:50 +08:00
MCRegisterInfo.h trimming MCRegisterClass 2019-02-21 22:33:15 +08:00
nmake-x86.bat Add webassembly arch (#1359) 2019-02-01 23:03:47 +08:00
nmake.bat Add webassembly arch (#1359) 2019-02-01 23:03:47 +08:00
pkgconfig.mk v4.1.0: set extra version = 0 2019-01-22 15:28:55 +08:00
README.md New architecture: BPF (#1388) 2019-02-18 17:39:51 +08:00
RELEASE_NOTES empty RELEASE_NOTES for v4.1 2018-12-19 07:50:18 +07:00
SPONSORS.TXT Add webassembly arch (#1359) 2019-02-01 23:03:47 +08:00
SStream.c Avoid overflow in SStream.c (#1381) 2019-02-15 08:18:31 +08:00
SStream.h merge next to master 2018-07-20 12:36:50 +08:00
TODO TODO 2015-03-11 11:33:00 +08:00
utils.c Fix typos. (#1248) 2018-09-17 20:54:00 +08:00
utils.h Fix typos. (#1248) 2018-09-17 20:54:00 +08:00

Capstone Engine

Build Status Build status pypi package pypi downloads

Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.

Created by Nguyen Anh Quynh, then developed and maintained by a small community, Capstone offers some unparalleled features:

  • Support multiple hardware architectures: ARM, ARM64 (ARMv8), BPF, Ethereum VM, Webassembly, M68K, Mips, MOS65XX, PPC, Sparc, SystemZ, TMS320C64X, M680X, XCore and X86 (including X86_64).

  • Having clean/simple/lightweight/intuitive architecture-neutral API.

  • Provide details on disassembled instruction (called “decomposer” by others).

  • Provide semantics of the disassembled instruction, such as list of implicit registers read & written.

  • Implemented in pure C language, with lightweight bindings for D, Clojure, F#, Common Lisp, Visual Basic, PHP, PowerShell, Emacs, Haskell, Perl, Python, Ruby, C#, NodeJS, Java, GO, C++, OCaml, Lua, Rust, Delphi, Free Pascal & Vala ready either in main code, or provided externally by the community).

  • Native support for all popular platforms: Windows, Mac OSX, iOS, Android, Linux, *BSD, Solaris, etc.

  • Thread-safe by design.

  • Special support for embedding into firmware or OS kernel.

  • High performance & suitable for malware analysis (capable of handling various X86 malware tricks).

  • Distributed under the open source BSD license.

Further information is available at http://www.capstone-engine.org

Compile

See COMPILE.TXT file for how to compile and install Capstone.

Documentation

See docs/README for how to customize & program your own tools with Capstone.

Hack

See HACK.TXT file for the structure of the source code.

License

This project is released under the BSD license. If you redistribute the binary or source code of Capstone, please attach file LICENSE.TXT with your products.