bddisasm is a fast, lightweight, x86/x64 instruction decoder. The project also features a fast, basic, x86/x64 instruction emulator, designed specifically to detect shellcode-like behavior.
Similar to #23: bddisasm decodes 64666526490f3f as PFRSQRTV mm2, mm7 when in 64-bit mode, despite being a 16/32-bit only instruction on some very old AMD Geode CPUs:
Similar to #23: bddisasm decodes
64666526490f3f
asPFRSQRTV mm2, mm7
when in 64-bit mode, despite being a 16/32-bit only instruction on some very old AMD Geode CPUs:See Iced's documentation for a reference on it being 16/32 only: https://docs.rs/iced-x86/1.10.0/iced_x86/enum.Code.html#variant.D3NOW_Pfrsqrtv_mm_mmm64