文本文件  |  31行  |  1.04 KB


Capstone Disassembly Engine bindings for VB6
Contributed by FireEye FLARE Team
Author:  David Zimmer <david.zimmer@fireeye.com>, <dzzie@yahoo.com>
License: Apache  
Copyright: FireEye 2017

This is a sample for using the capstone disassembly engine with VB6.

All of the capstone API are implemented, so this lib supports basic 
disassembly of all of the processor architectures that capstone implements.

In the vb code, full instruction details are currently only supported for
the x86 processor family.

This sample was built against Capstone 3.0 rc4. Note that if the capstone
structures change in the future this code will have to be adjusted to match.

The vbCapstone.dll is written in C. Project files are provided for VS2008.
It is a small shim to give VB6 access to a stdcall API to access capstone.
You could also modify capstone itself so its exports were stdcall.

The C project has an additional include directory set to ./../../include/
for <capstone.h>. This is for the /capstone/bindings/vb6/ directory structure