Model x86 and x86-64 shellcode in a constrained browser interpreter. Step backward, inspect registers and memory, and stop safely at syscalls and unknown opcodes.
The emulator interprets a documented x86/x64 subset inside private browser memory. It models register and immediate moves, integer arithmetic, flags, stack operations, calls, branches, simple ModRM and SIB memory operands, interrupts, and syscall boundaries.
Execution stops at system calls, interrupts, external transfers, returns, unsupported opcodes, memory faults, or the 10,000-instruction ceiling. No operating-system API or native instruction is invoked. Every modeled step records register and flag state plus reversible memory writes.
This bounded teaching and triage model is not a hardened malware sandbox. Use an isolated professional environment for adversarial samples requiring full CPU, API, process, or network behavior.
No. It models supported instructions in TypeScript with a private Uint8Array memory space. It never invokes native code, a system call, an interrupt, or an operating-system API.
The emulator stops with the exact address and opcode rather than guessing. It also stops at syscalls, interrupts, external control transfers, invalid memory, and the instruction limit.
It can extract and model a selected byte range or detected entry offset, but it does not load a full process image, dynamic linker, operating-system APIs, or every CPU instruction. Use the executable inspector first.
Assemble a deterministic Intel x86 or x86-64 subset into exact instruction boundaries and machine-code bytes entirely in the browser.
Free online disassembler: convert hex machine code to assembly. Multi-architecture (x86, x86-64, ARM, ARM64, RISC-V, MIPS, PowerPC, SPARC, 68K), Intel/AT&T syntax, 100% client-side.
Keep binary artifacts, hashes, notes, findings, derived files, and analysis-tool handoffs together in a private browser workspace.
Author, compile, and run YARA-X rules against local artifacts with exact pattern offsets, bounded scans, and evidence handoff.