You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
jianglk.darker 7ee447c011
v811_spc009_project
4 months ago
..
CDisassembler.cls v811_spc009_project 4 months ago
CInstDetails.cls v811_spc009_project 4 months ago
CInstruction.cls v811_spc009_project 4 months ago
CX86Inst.cls v811_spc009_project 4 months ago
CX86OpMem.cls v811_spc009_project 4 months ago
CX86Operand.cls v811_spc009_project 4 months ago
Form1.frm v811_spc009_project 4 months ago
Form1.frx v811_spc009_project 4 months ago
Module1.bas v811_spc009_project 4 months ago
Project1.vbp v811_spc009_project 4 months ago
Project1.vbw v811_spc009_project 4 months ago
README.txt v811_spc009_project 4 months ago
mMisc.bas v811_spc009_project 4 months ago
mx86.bas v811_spc009_project 4 months ago
screenshot.png v811_spc009_project 4 months ago
vbCapstone.cpp v811_spc009_project 4 months ago
vbCapstone.sln v811_spc009_project 4 months ago
vbCapstone.vcproj v811_spc009_project 4 months ago

README.txt

This file contains invisible Unicode characters!

This file contains invisible Unicode characters that may be processed differently from what appears below. If your use case is intentional and legitimate, you can safely ignore this warning. Use the Escape button to reveal hidden characters.


Capstone Disassembly Engine bindings for VB6
Contributed by FireEye FLARE Team
Author:  David Zimmer <david.zimmer@fireeye.com>, <dzzie@yahoo.com>
License: Apache  
Copyright: FireEye 2017

This is a sample for using the capstone disassembly engine with VB6.

All of the capstone API are implemented, so this lib supports basic 
disassembly of all of the processor architectures that capstone implements.

In the vb code, full instruction details are currently only supported for
the x86 processor family.

This sample was built against Capstone 3.0 rc4. Note that if the capstone
structures change in the future this code will have to be adjusted to match.

The vbCapstone.dll is written in C. Project files are provided for VS2008.
It is a small shim to give VB6 access to a stdcall API to access capstone.
You could also modify capstone itself so its exports were stdcall.

The C project has an additional include directory set to ./../../include/
for <capstone.h>. This is for the /capstone/bindings/vb6/ directory structure