Capstone is an open source decompilation support framework capable of binary analysis and reverse, supporting multiple platforms and structures, such as ARM, ARM64, SystemZ, XCore, Sparc, PowerPC, and X64. Capstone distributes the API structurally independently, providing useful information regarding data decompilation.
Capstone does not require installation and can be invoked directly from a Command Prompt command line window. The syntax is [-d]
With Capstone, some semantics of decompiled commands are displayed, including a list of hidden registers (read and write). Capstone is designed with secure threads, mined in pure C, providing links for Perl, Delphi, Free Pascal, Haskell, Ruby, C#, Lua, Rust, etc.
IDA is also an application capable of decompiling binary programs through decompression and analysis without mining source code,
Capstone is distributed under the BSD license, which allows users to embed in the firmware and operating system kernel. In addition, this framework is also used to analyze malware, optimize performance for the system.
For the Visual Basic language, the VB Decompiler tool supports decompilation of programs (EXE, DLLs or OCX) written in this programming language, the advantage of
Key Features of Capstone:
– Support decompilation.
– Binary analysis and reversal.
– Supports multiple platforms and structures.