CAPSTONE 4.0.2 

Version 4.0.2, May 8, 2020

Welcome

Capstone is a lightweight multi-platform, multi-architecture disassembly framework.

Our target is to make Capstone the ultimate disassembly engine for binary analysis and reversing in the security community.

Highlight features

Multi-architectures: Arm, Arm64 (Armv8), BPF, Ethereum Virtual Machine, M68K, M680X, Mips, MOS65XX, PowerPC, RISCV, Sparc, SystemZ, TMS320C64X, Web Assembly, XCore & X86 (include X86_64) (details).

Clean/simple/lightweight/intuitive architecture-neutral API.

Provide details on disassembled instruction (called “decomposer” by some others).

Provide some semantics of the disassembled instruction, such as list of implicit registers read & written.

Implemented in pure C language, with bindings for D, Clojure, F#, Common Lisp, Visual Basic, PHP, PowerShell, Haskell, Perl, Python, Ruby, C#, NodeJS, Java, GO, C++, OCaml, Lua, Rust, Delphi, Free Pascal & Vala available.

Native support for Windows & *nix (with Mac OSX, iOS, Android, Linux, *BSD & Solaris confirmed).

Thread-safe by design.

Special support for embedding into firmware or OS kernel.

High performance & suitable for malware analysis (capable of handling various X86 malware tricks).

Distributed under the open source BSD license.

_104K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3y4S2M7s2y4@1L8$3&6W2i4K6u0V1k6h3&6Y4K9h3&6W2i4K6u0W2L8%4u0Y4i4K6u0r3

_effK9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6Y4K9i4c8Z5N6h3u0Q4x3X3g2U0L8$3#2Q4x3V1k6S2M7i4g2&6L8X3S2Q4x3V1k6U0j5i4m8K6N6r3!0F1k6g2)9J5c8X3q4J5j5$3S2A6N6X3g2Q4x3V1j5@1i4K6u0W2x3q4)9J5k6e0u0Q4x3X3g2*7K9i4l9`.

[培训]科锐逆向工程师培训第53期2025年7月8日开班！