search

intel / processwatch

GNU General Public License v2.0
132 stars 10 forks source link

Missing categories on X86 #18

Open grahamwoodward opened 3 months ago

grahamwoodward commented 3 months ago

I know there's never going to be a 1 to 1 mapping between the Zydis categories and Capstone but I wonder how possible/easy it is to work out what the correct Capstone category is for now missing Zydis categories, for instance what would be the Zydis "amx_tile" Capstone equivilant?

grahamwoodward commented 3 months ago

the PR to use Capstone has essentially broken backwards compatibility in so far as anyone using pre-Capstone can no longer specify certain categories

matthew-olson-intel commented 1 month ago

Thanks! I just wrote a batch in the branch add_zydis_back which should fix this problem for everyone: this time, we'll use Zydis for x86, and Capstone for ARM. Things seem to work on my end, and I got a buddy with an M2 Macbook to try out the ARM side.

I did it that way because Capstone's x86 support is very out-of-date, complicated to fix, and they may want to either drop x86 support or simply call Zydis to do the disassembly of x86.

Can you test that branch and see if it looks better for you? The x86 side is definitely fixed for me.

grahamwoodward commented 1 month ago

I can try the build on aarch64 if you want?

matthew-olson-intel commented 1 month ago

Yes, that'd be great! If it works for you, then I'll merge into master.