Capstone - The Ultimate Disassembler - eXeL@B

Сейчас на форуме: bartolomeo, -Sanchez-, morgot, sashalogout (+5 невидимых)

<< . 1 . 2 . 3 . 4 . 5 .

Посл.ответ	Сообщение
Jupiter Ранг: 605.2 (!), 341thx Активность: 0.47↘0.25 Статус: Модератор Research & Development	Создано: 03 марта 2017 00:47 · Личное сообщение · #1 2 марта 2017 года, была выпущена версия 3.0.5-rc2 дизассемблера Capstone. Предыдущий релиз был в 2015 году. Скачать: www.capstone-engine.org/download.html Компактный пример на питоне: Code: # test1.py 2 from capstone import * 3 4 CODE = b"\x55\x48\x8b\x05\xb8\x13\x00\x00" 5 6 md = Cs(CS_ARCH_X86, CS_MODE_64) 7 for i in md.disasm(CODE, 0x1000): 8 print("0x%x:\t%s\t%s" %(i.address, i.mnemonic, i.op_str)) Запуск и выхлоп: Code: $ python test1.py 0x1000: push rbp 0x1001: mov rax, qword ptr [rip + 0x13b8] Описание изменений: www.capstone-engine.org/changelog.html Version 3.0.5-rc2 March 2, 2017 Release 3.0.5-RC2 is a release candidate version, with important fixes in the core & several bindings. Library Fix build for Visual Studio 2012 Fix X86_REL_ADDR macro Add CS_VERSION_MAJOR, CS_VERSION_MINOR, CS_VERSION_EXTRA Better support for embedding Capstone into Windows kernel drivers Support to embedded Capstone into MacOS kernel Support MacOS 10.11 and up Better support for Cygwin Support build packages for FreeBSD & DragonflyBSD Add a command-line tool "cstool" Properly handle switching to Endian mode at run-time for Arm, Arm64, Mips & Sparc X86 Some random 16-bit code can be handled wrongly. Remove abundant operand type X86_OP_FP Fix instructions MOVQ, LOOP, LOOPE, LOOPNE, CALL/JMP rel16, REPNE LODSD, MOV AX, MOFFS, FAR JMP/CALL Add X86_REG_EFLAGS for STC and STD Fix instruction attributes for SYSEXIT, MOVW, ROL, LGS, SLDT Rename registers ST0-ST7 to be consistent with asm output Arm* Properly handle IT instruction Fix LDRSB Fix writeback for LDR Fix Thumb BigEndian setup Fix arith extender Fix writeback for LDR Rename enum arm64_mrs_reg to arm64_sysreg PowerPC Print 0 offset for memory operand Sparc Fix POPC instruction Python binding Better PyPy support Add __version__ Better support for Python 3 Fix CS_SKIPDATA_CALLBACK prototype Cast skipdata function inside binding to simplify the API Java binding Better handle input with invalid code PowerShell binding New binding ----- EnJoy! \| Сообщение посчитали полезным: Abraham, plutos, oldman, nice, DenCoder

plutos Ранг: 622.6 (!), 521thx Активность: 0.33↗0.89 Статус: Участник _Вечный_Студент_	Создано: 11 мая 2020 04:00 · Поправил: plutos · Личное сообщение · #2 --> CAPSTONE 4.0.2 <-- Version 4.0.2, May 8, 2020 They are very happy to announce version 4.0.2 of Capstone disassembler framework! This release fixes some bugs of v4.0.1, as well as introduces some improvements for several bindings. They strongly encourage all users of v4.0.1 to upgrade. ----- Give me a HANDLE and I will move the Earth. \| Сообщение посчитали полезным: Bronco, soft, mak

<< . 1 . 2 . 3 . 4 . 5 .

Для печати

Для печати