Nguyen Anh Quynh | 26ee41a | 2013-11-27 12:11:31 +0800 | [diff] [blame] | 1 | Capstone is a disassembly framework with the target of becoming the ultimate |
| 2 | disasm engine for binary analysis and reversing in the security community. |
| 3 | |
| 4 | Created by Nguyen Anh Quynh, then developed and maintained by a small community, |
| 5 | Capstone offers some unparalleled features: |
| 6 | |
Nguyen Anh Quynh | 92c1750 | 2014-01-17 14:59:21 +0800 | [diff] [blame] | 7 | - Support multiple hardware architectures: ARM, ARM64 (ARMv8), Mips, PPC & X86. |
Nguyen Anh Quynh | 26ee41a | 2013-11-27 12:11:31 +0800 | [diff] [blame] | 8 | |
| 9 | - Having clean/simple/lightweight/intuitive architecture-neutral API. |
| 10 | |
| 11 | - Provide details on disassembled instruction (called “decomposer” by others). |
| 12 | |
| 13 | - Provide semantics of the disassembled instruction, such as list of implicit |
Nguyen Anh Quynh | 2b25445 | 2014-01-22 10:21:25 +0800 | [diff] [blame] | 14 | registers read & written. |
Nguyen Anh Quynh | 26ee41a | 2013-11-27 12:11:31 +0800 | [diff] [blame] | 15 | |
Nguyen Anh Quynh | 2b25445 | 2014-01-22 10:21:25 +0800 | [diff] [blame] | 16 | - Implemented in pure C language, with lightweight wrappers for C++, C#, Go, |
| 17 | Java, Ocaml, Python, Ruby & Vala ready (either available in main code, |
| 18 | or provided externally by community). |
Nguyen Anh Quynh | 26ee41a | 2013-11-27 12:11:31 +0800 | [diff] [blame] | 19 | |
Nguyen Anh Quynh | 92c1750 | 2014-01-17 14:59:21 +0800 | [diff] [blame] | 20 | - Native support for Windows & *nix platforms (with OSX, Linux, *BSD & Solaris |
| 21 | have been confirmed). |
Nguyen Anh Quynh | 26ee41a | 2013-11-27 12:11:31 +0800 | [diff] [blame] | 22 | |
| 23 | - Thread-safe by design. |
| 24 | |
| 25 | - Distributed under the open source BSD license. |
| 26 | |
Nguyen Anh Quynh | b7155b0 | 2013-12-18 00:18:06 +0800 | [diff] [blame] | 27 | Further information is available at http://www.capstone-engine.org |
| 28 | |
Nguyen Anh Quynh | 26ee41a | 2013-11-27 12:11:31 +0800 | [diff] [blame] | 29 | |
| 30 | [Compile] |
Nguyen Anh Quynh | 8afa3dd | 2013-12-18 00:11:25 +0800 | [diff] [blame] | 31 | |
Nguyen Anh Quynh | 8282dc6 | 2014-01-15 21:20:47 +0800 | [diff] [blame] | 32 | See COMPILE.TXT file for how to compile and install Capstone |
Nguyen Anh Quynh | 26ee41a | 2013-11-27 12:11:31 +0800 | [diff] [blame] | 33 | |
| 34 | |
Nguyen Anh Quynh | 8afa3dd | 2013-12-18 00:11:25 +0800 | [diff] [blame] | 35 | [Status] |
Nguyen Anh Quynh | 26ee41a | 2013-11-27 12:11:31 +0800 | [diff] [blame] | 36 | |
Nguyen Anh Quynh | 8afa3dd | 2013-12-18 00:11:25 +0800 | [diff] [blame] | 37 | - Capstone can only compile to Windows via Cygwin, or cross-compile using |
| 38 | MingW. Visual Studio support will be done in the future. |
| 39 | |
| 40 | - X86 engine cannot handle many malware tricks yet. Please report all the raw |
| 41 | binary code that Capstone cannot disassemble, or does that wrongly, so we can |
| 42 | fix that in the next version |
| 43 | |
| 44 | - This package only contains Java & Python bindings. For C#, Go, Ocaml & Ruby, |
| 45 | refer to the corresponding git repositories. |
Nguyen Anh Quynh | 26ee41a | 2013-11-27 12:11:31 +0800 | [diff] [blame] | 46 | |
| 47 | |
| 48 | [Hack] |
| 49 | |
Nguyen Anh Quynh | 8282dc6 | 2014-01-15 21:20:47 +0800 | [diff] [blame] | 50 | See HACK.TXT file for the structuture of the source code. |
Nguyen Anh Quynh | 8afa3dd | 2013-12-18 00:11:25 +0800 | [diff] [blame] | 51 | |
| 52 | |
| 53 | [License] |
| 54 | |
Nguyen Anh Quynh | 24ca24c | 2013-12-18 10:16:07 +0800 | [diff] [blame] | 55 | This project is released under the BSD license. If you redistribute the binary |
| 56 | or source code of Capstone, please attach file LICENSE.TXT with your products. |