stream dissembler and hooking library by Gil Dabah
https://github.com/gdabah
diStormX
distorm3
the wikie is here:
https://github.com/gdabah/distorm/wiki
https://github.com/gdabah
diStormX
The ultimate hooking library
Features:
Supports both x86/x64
Simple APIs and batch hooks
Low memory foot print, will re-use trampoline pages as much as possible
RWX sensitive, will temporarily enable RWX and then revert to RX when writing trampolines
Uses a private heap
Uses an OS abstraction layer - easy to add support for other OSs
Currently supports only Windows
This library is licensed under BSD.
distorm3
Powerful Disassembler Library For x86/AMD64
Welcome to the diStorm3 binary stream disassembler library project.
diStorm3 is really a decomposer, which means it takes an instruction and returns a binary structure which describes it rather than static text, which is great for advanced binary code analysis.
diStorm3 is super lightweight (~45KB), ultra fast and easy to use (a single API)!
"We benchmarked five popular open-source disassembly libraries and chose diStorm3, which had the best performance (and furthermore, has complete 64-bit support).", July 2014, Quoting David Williams-King in his Thesis about Binary Shuffling.
diStorm3.3.3 is now licensed under BSD!
the wikie is here:
https://github.com/gdabah/distorm/wiki