https://github.com/Pigrecos/Capstone4Delphi

Capstone Disassembler Library Binding for Delphi
https://github.com/Pigrecos/Capstone4Delphi

assembler delphi disassembler pascal reverse-engineering x86 x86-64

Last synced: about 1 month ago
JSON representation

Capstone Disassembler Library Binding for Delphi

• Host: GitHub
• URL: https://github.com/Pigrecos/Capstone4Delphi
• Owner: Pigrecos
• License: mpl-2.0
• Created: 2021-03-28T18:57:51.000Z (about 3 years ago)
• Default Branch: main
• Last Pushed: 2021-04-05T22:01:05.000Z (about 3 years ago)
• Last Synced: 2024-01-09T01:15:06.146Z (5 months ago)
• Topics: assembler, delphi, disassembler, pascal, reverse-engineering, x86, x86-64
• Language: Pascal
• Homepage:
• Size: 554 KB
• Stars: 16
• Watchers: 5
• Forks: 2
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Lists

• awesome-pascal - Capstone4Delphi - engine.org/) Binding for Delphi (Debugging / error handling ##)

README

        
# Capstone4Delphi

 Capstone Disassembler Library Binding for Delphi . [Capstone Disassembler Library](http://www.capstone-engine.org/)

 

## Usage

  Included is the wrapper class `TCapstone` in `Capstone.pas`, very flexible and with many features,Creation, comparison, conversion etc .. .

  The example below is incomplete. 

  

~~~pas

uses

  SysUtils, Classes, Capstone, CapstoneCmn, CapstoneApi;

var

  disasm    : TCapstone;

  addr      : UInt64;

  insn      : TCpuIstruz;

  AInsn     : TListCpuIstruz;

  stream    : TMemoryStream;

  filename  : string;

  nIstruz,i : NativeUInt;

  reg1,reg2 : TCpuReg;

begin

    if ParamCount = 0 then

    begin

        WriteLn('test ');

        Halt(1);

    end;

    filename := ParamStr(1);

    if not FileExists(filename) then

    begin

        WriteLn(Format('File %s not found', [filename]));

        Halt(1);

    end;

    stream := TMemoryStream.Create;

    try

      stream.LoadFromFile(filename);

      stream.Position := 0;

      disasm := TCapstone.Create;

      try

        disasm.Mode := CS_MODE_32;

        addr := 0;

        if disasm.Open = CS_ERR_OK then

        begin

            try

              nIstruz := disasm.DisAsmBlock(addr,stream.Memory, stream.Size,AInsn);

              for i := 0 to nIstruz - 1 do

              begin

                  insn := AInsn[i];

                  if disasm.IsJcc(insn)      then  WriteLn(Format('[Jcc Group Dest: %x] %x  %s', [disasm.BranchDestination(insn), insn.address, insn.ToString]))

                  else if disasm.IsCall(insn)then  WriteLn(Format('[Call Group Dest: %x] %x  %s', [disasm.BranchDestination(insn),insn.address, insn.ToString]))

                  else if disasm.Isjmp(insn) then  WriteLn(Format('[jmp Group Dest: %x] %x  %s', [disasm.BranchDestination(insn),insn.address, insn.ToString]))

                  else if disasm.IsRet(insn) then  WriteLn(Format('[ret Group] %x  %s', [insn.address, insn.ToString]))

                  else

                     WriteLn(Format('%x  %s', [insn.address, insn.ToString]));

              end;

              reg1.reg := EAX;

              reg1.size := 1;

              reg2.reg  := ECX;

              reg2.Parent := reg1.Parent;

            except

              raise Exception.Create('Error Decompiler!');

            end;

        end else

        begin

            WriteLn('ERROR!');

        end;

      finally

        disasm.Free;

      end;

    finally

      stream.Free;

    end;

end.

~~~