bddisasm is a fast, lightweight, x86/x64 instruction decoder. The project also features a fast, basic, x86/x64 instruction emulator, designed specifically to detect shellcode-like behavior.
Apache License 2.0
888
stars
115
forks
source link
Can you add these instruction simulations? These instructions are used extensively when simulating vmprotect #60
case ND_INS_BSWAP: case ND_INS_BSF: case ND_INS_BSR: case ND_INS_SHLD: case ND_INS_SHRD: