Capstone Disassembly Engine bindings for VB6 Contributed by FireEye FLARE Team Author: David Zimmer david.zimmer@fireeye.com, dzzie@yahoo.com License: Apache 2.0 Copyright: FireEye 2017

This is a sample for using the capstone disassembly engine with VB6.

All of the capstone API are implemented, so this lib supports basic disassembly of all of the processor architectures that capstone implements.

In the vb code, full instruction details are currently only supported for the x86 processor family.

This sample was built against Capstone 3.0 rc4. Note that if the capstone structures change in the future this code will have to be adjusted to match.

The vbCapstone.dll is written in C. Project files are provided for VS2008. It is a small shim to give VB6 access to a stdcall API to access capstone. You could also modify capstone itself so its exports were stdcall.

The C project has an additional include directory set to ./../../include/ for <capstone.h>. This is for the /capstone/bindings/vb6/ directory structure