{
  "added_at": "2026-11-06",
  "category": "native-analysis",
  "description_en": "Automation-ready disassembly and static analysis library for shellcode and PE binaries that outputs disassembly, functions and imports as JSON. It offers a light emulation mode that enumerates all paths and a slower full emulation mode, simulated TEB and PEB structures, and FLIRT-style signatures.",
  "description_zh": "面向自动化的反汇编与静态分析库，处理 shellcode 和 PE 二进制文件，并以 JSON 输出反汇编、函数和导入表。它提供枚举所有路径的轻量模拟模式和较慢的完整模拟模式，以及模拟的 TEB、PEB 结构和 FLIRT 风格签名。",
  "entry_url": "https://awesomerea.org/resources/xori/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/xori/",
  "evidence_url": "https://github.com/endgameinc/xori/blob/d58a7427ee7928a92e32cd8fe6d1153b2aaf5568/README.md",
  "group": "tools",
  "id": "xori",
  "json_url": "https://awesomerea.org/resources/xori/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/xori/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/xori/index.md",
  "name": "Xori",
  "name_zh": "Xori 反汇编与静态分析库",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "Covers i386 and x86-64 PE, PE+ and plain shellcode. Built with Rust and Cargo; the README cites rustc 1.27.0, and the browser GUI needs Node.js.",
    "AGPL-3.0 per LICENSE.txt."
  ],
  "requirements_zh": [
    "支持 i386 和 x86-64 的 PE、PE+ 及纯 shellcode。使用 Rust 和 Cargo 构建；README 提到 rustc 1.27.0，浏览器 GUI 需要 Node.js。",
    "依 LICENSE.txt 采用 AGPL-3.0 许可。"
  ],
  "targets": [
    "binary"
  ],
  "url": "https://github.com/endgameinc/xori",
  "verification": "source-reviewed",
  "verified_at": "2026-11-06"
}