Tyler Wilding
bfc4c18ada
- Adds `capstone` as a disassembling library that could eventually replace Zydis (for now left that alone) - Replicates all of the existing x86 tests to ARM64, fixed a bunch of underlying issues along the way - There are a very small handful of tests remaining that need to be enabled / fixed
Capstone Disassembly Engine bindings for VB6 Contributed by FireEye FLARE Team Author: David Zimmer david.zimmer@fireeye.com, dzzie@yahoo.com License: Apache 2.0 Copyright: FireEye 2017
This is a sample for using the capstone disassembly engine with VB6.
All of the capstone API are implemented, so this lib supports basic disassembly of all of the processor architectures that capstone implements.
In the vb code, full instruction details are currently only supported for the x86 processor family.
This sample was built against Capstone 3.0 rc4. Note that if the capstone structures change in the future this code will have to be adjusted to match.
The vbCapstone.dll is written in C. Project files are provided for VS2008. It is a small shim to give VB6 access to a stdcall API to access capstone. You could also modify capstone itself so its exports were stdcall.
The C project has an additional include directory set to ./../../include/ for <capstone.h>. This is for the /capstone/bindings/vb6/ directory structure