| Bit | Flag | Name | Description |
|---|---|---|---|
| 0 | CF | Carry Flag | Set if unsigned overflow (carry/borrow out of MSB) |
| 1 | — | Reserved | Always 1 |
| 2 | PF | Parity Flag | Set if lowest byte has even number of set bits |
| 3 | — | Reserved | — |
| 4 | AF | Auxiliary Carry Flag | Carry from bit 3 → bit 4 (used in BCD arithmetic) |
| 5 | — | Reserved | — |
| 6 | ZF | Zero Flag | Set if result == 0 |
| 7 | SF | Sign Flag | Set if result is negative (MSB = 1) |
| 8 | TF | Trap Flag | Enables single-step debugging |
| 9 | IF | Interrupt Enable Flag | Enables/disables interrupts |
| 10 | DF | Direction Flag | String ops direction (0 = forward, 1 = backward) |
| 11 | OF | Overflow Flag | Set if signed overflow |
| 12–13 | IOPL | I/O Privilege Level | Privilege level for I/O operations |
| 14 | NT | Nested Task | Controls task chaining (legacy) |
| 15 | — | Reserved | — |
| 16 | RF | Resume Flag | Suppresses debug exceptions |
| 17 | VM | Virtual-8086 Mode | Enables virtual 8086 mode |
| 18 | AC | Alignment Check | Alignment checking for memory accesses |
| 19 | VIF | Virtual Interrupt Flag | Virtual version of IF |
| 20 | VIP | Virtual Interrupt Pending | Indicates pending virtual interrupt |
| 21 | ID | ID Flag | Allows CPUID instruction |
| 22–63 | — | Reserved | Not used |
BLUE TEAM / MALWARE REVERSE / ANALYSIS / STATIC / DISASSEMBLY / ASM