I'm trying to play around with the Capstone Disassembler in C.
In the documentation they show the following use of the
count = cs_disasm(handle, CODE, sizeof(CODE)-1, 0x1000, 0, &insn)
The thing that bugs me is that
0x1000. In the documentation (source code actually) it says:
@address: address of the first instruction in given raw code buffer.
I can't really understand what does that really mean, because from what I understand the
insn array is being dynamically allocated and filled, and that's where the instructions will reside (or are they?)
Why is it a fixed value like
0x1000? is that actually address in the memory of the program? (isn't that an illegal address space for a C program to use?)
Thanks in advance