Distorm64 is a fast disassembler library for the x86-64 instruction set. main features are:
- it's really fast.
- it supports multi-threading.
- it supports amd64, and all other 80x86 instruction sets.
- it supports up to date instruction sets, such as vmx and sse4.
- it handles instruction prefixes in a serious manner.
- unused/extra prefixes are dropped (output as db'ed).
- lock prefix works only on lockable instructions if the first operand is in
the form of memory indirection.
- repn/z prefix works only on repeatable string instructions as well as i/o
instructions.
- segment override prefixes are possible where memory indirection address is
being used (and specially treated with string and i/o instructions).
- some sse2 instructions support pseudo opcodes (cmp family).
- "native" instructions, those which have the same mnemonic in different
decoding modes, unless there's an operand size prefix, which then a suffix letter is concatenated to the mnemonic in order to indicate the operation size (instructions like: pusha, iret, etc.).
- xlat instruction is treated specially when prefixed.
- drops invalid instructions when their operands are invalid.
- won't decode instructions which are longer than 15 bytes.
- cr8 register is now accessible using the lock prefix in 32 bits decoding
mode.
- in 64-bit decoding mode the segment override prefixes cs, ds, es and ss are
ignored.