Files
ctf/2026/srdnlen_quals/forensic/chapter2/disasm.py

13 lines
304 B
Python

from capstone import *
# Load your extracted relic
with open("relic.bin", "rb") as f:
code = f.read()
# Initialize Capstone for x86-64
md = Cs(CS_ARCH_X86, CS_MODE_64)
# Disassemble the first 100 instructions
for i in md.disasm(code, 0x0):
print(f"0x{i.address:x}:\t{i.mnemonic}\t{i.op_str}")