bddisasm is a fast, lightweight, x86/x64 instruction decoder. The project also features a fast, basic, x86/x64 instruction emulator, designed specifically to detect shellcode-like behavior.
Fixed RFLAGS setting issues for arithmetic and shift instructions.
Added support for AESDEC, AESDECLAST and AESIMC emulation in bdshemu https://github.com/bitdefender/bddisasm/issues/34 https://github.com/bitdefender/bddisasm/issues/35 https://github.com/bitdefender/bddisasm/issues/36 https://github.com/bitdefender/bddisasm/issues/37 https://github.com/bitdefender/bddisasm/issues/38
On AMD, operand size is never forced to 64 bit - instead, it only defaults to 64 bit, which means that 0x66 can be used to encode 16 bit version of the instructions. By supplying the ND_VEND_AMD vendor hint, bddisasm will provide the operand size specific to AMD. Added missing Default 64 flag for the ENTER instruction. Fixed INTO and DMINT decoding in 64 bit mode (they are invalid).
Initial bddisasm release.