| Nguyen Anh Quynh | 26ee41a | 2013-11-27 12:11:31 +0800 | [diff] [blame] | 1 | Capstone is a disassembly framework with the target of becoming the ultimate |
| 2 | disasm engine for binary analysis and reversing in the security community. |
| 3 | |
| 4 | Created by Nguyen Anh Quynh, then developed and maintained by a small community, |
| 5 | Capstone offers some unparalleled features: |
| 6 | |
| Nguyen Anh Quynh | 636f506 | 2014-03-23 22:24:28 +0800 | [diff] [blame] | 7 | - Support multiple hardware architectures: ARM, ARM64 (ARMv8), Mips, PPC, Sparc, |
| 8 | SystemZ and X86. |
| Nguyen Anh Quynh | 26ee41a | 2013-11-27 12:11:31 +0800 | [diff] [blame] | 9 | |
| 10 | - Having clean/simple/lightweight/intuitive architecture-neutral API. |
| 11 | |
| 12 | - Provide details on disassembled instruction (called “decomposer” by others). |
| 13 | |
| 14 | - Provide semantics of the disassembled instruction, such as list of implicit |
| Nguyen Anh Quynh | 38b7bbb | 2014-01-22 10:21:25 +0800 | [diff] [blame] | 15 | registers read & written. |
| Nguyen Anh Quynh | 26ee41a | 2013-11-27 12:11:31 +0800 | [diff] [blame] | 16 | |
| Nguyen Anh Quynh | 38b7bbb | 2014-01-22 10:21:25 +0800 | [diff] [blame] | 17 | - Implemented in pure C language, with lightweight wrappers for C++, C#, Go, |
| 18 | Java, Ocaml, Python, Ruby & Vala ready (either available in main code, |
| 19 | or provided externally by community). |
| Nguyen Anh Quynh | 26ee41a | 2013-11-27 12:11:31 +0800 | [diff] [blame] | 20 | |
| Nguyen Anh Quynh | 92c1750 | 2014-01-17 14:59:21 +0800 | [diff] [blame] | 21 | - Native support for Windows & *nix platforms (with OSX, Linux, *BSD & Solaris |
| 22 | have been confirmed). |
| Nguyen Anh Quynh | 26ee41a | 2013-11-27 12:11:31 +0800 | [diff] [blame] | 23 | |
| 24 | - Thread-safe by design. |
| 25 | |
| Nguyen Anh Quynh | b0b7308 | 2014-03-03 17:57:15 +0800 | [diff] [blame] | 26 | - Special support for embedding into firmware or OS kernel. |
| 27 | |
| Nguyen Anh Quynh | 26ee41a | 2013-11-27 12:11:31 +0800 | [diff] [blame] | 28 | - Distributed under the open source BSD license. |
| 29 | |
| Nguyen Anh Quynh | b7155b0 | 2013-12-18 00:18:06 +0800 | [diff] [blame] | 30 | Further information is available at http://www.capstone-engine.org |
| 31 | |
| Nguyen Anh Quynh | 26ee41a | 2013-11-27 12:11:31 +0800 | [diff] [blame] | 32 | |
| 33 | [Compile] |
| Nguyen Anh Quynh | 8afa3dd | 2013-12-18 00:11:25 +0800 | [diff] [blame] | 34 | |
| Nguyen Anh Quynh | 8282dc6 | 2014-01-15 21:20:47 +0800 | [diff] [blame] | 35 | See COMPILE.TXT file for how to compile and install Capstone |
| Nguyen Anh Quynh | 26ee41a | 2013-11-27 12:11:31 +0800 | [diff] [blame] | 36 | |
| 37 | |
| Nguyen Anh Quynh | 8afa3dd | 2013-12-18 00:11:25 +0800 | [diff] [blame] | 38 | [Status] |
| Nguyen Anh Quynh | 26ee41a | 2013-11-27 12:11:31 +0800 | [diff] [blame] | 39 | |
| Nguyen Anh Quynh | 8afa3dd | 2013-12-18 00:11:25 +0800 | [diff] [blame] | 40 | - Capstone can only compile to Windows via Cygwin, or cross-compile using |
| 41 | MingW. Visual Studio support will be done in the future. |
| 42 | |
| 43 | - X86 engine cannot handle many malware tricks yet. Please report all the raw |
| 44 | binary code that Capstone cannot disassemble, or does that wrongly, so we can |
| 45 | fix that in the next version |
| 46 | |
| 47 | - This package only contains Java & Python bindings. For C#, Go, Ocaml & Ruby, |
| 48 | refer to the corresponding git repositories. |
| Nguyen Anh Quynh | 26ee41a | 2013-11-27 12:11:31 +0800 | [diff] [blame] | 49 | |
| 50 | |
| 51 | [Hack] |
| 52 | |
| Nguyen Anh Quynh | 8282dc6 | 2014-01-15 21:20:47 +0800 | [diff] [blame] | 53 | See HACK.TXT file for the structuture of the source code. |
| Nguyen Anh Quynh | 8afa3dd | 2013-12-18 00:11:25 +0800 | [diff] [blame] | 54 | |
| 55 | |
| 56 | [License] |
| 57 | |
| Nguyen Anh Quynh | 24ca24c | 2013-12-18 10:16:07 +0800 | [diff] [blame] | 58 | This project is released under the BSD license. If you redistribute the binary |
| 59 | or source code of Capstone, please attach file LICENSE.TXT with your products. |