feat: add ARM disassembler operation

[thomasxm]

Summary

• Adds new "Disassemble ARM" operation for ARM architecture disassembly
• Uses Capstone disassembly framework with vendored capstone.min.js (includes upstream bug fix)
• Supports ARM (32-bit), Thumb, and ARM64 (AArch64) architectures

Details

Supported Architectures

Architecture	Modes
ARM (32-bit)	ARM, Thumb, Thumb + Cortex-M, ARMv8
ARM64 (AArch64)	Default

Features

• Little Endian and Big Endian support
• Configurable starting address for position-independent analysis
• Toggle instruction hex bytes display
• Toggle instruction position display

Why Capstone?

Capstone is the industry standard disassembly framework used by:

• Radare2, Binary Ninja, IDA Pro plugins
• Frida, Unicorn Engine, QEMU
• Angr, Pwntools, ROPgadget

This ensures accurate disassembly for security research and binary analysis.

Test plan

11 automated tests covering ARM32, ARM64, and Thumb modes

Manual test vectors

ARM32:
Input: 0100a0e3 001081e0 001041e0
Output:
mov r0, #1
add r1, r1, r0
sub r1, r1, r0

ARM64:
Input: fd7bbfa9 fd030091 c0035fd6
Output:
stp x29, x30, [sp, #-0x10]!
mov x29, sp
ret

Thumb:
Input: 80b5 0844 80bd
Output:
push {r7, lr}
add r0, r1
pop {r7, pc}

Files changed

File	Change
package.json	Add @alexaltea/capstone-js dependency
src/core/operations/DisassembleARM.mjs	New operation
src/core/vendor/capstone.min.js	Vendored Capstone with bug fix
src/core/config/Categories.json	Add to "Other" category
tests/operations/tests/DisassembleARM.mjs	Test suite
tests/operations/index.mjs	Register tests