Skip to content

Commit

Permalink
Fill readme
Browse files Browse the repository at this point in the history
  • Loading branch information
momo5502 committed Oct 19, 2024
1 parent f6c4ccc commit a6b50f9
Showing 1 changed file with 20 additions and 2 deletions.
22 changes: 20 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,11 +7,29 @@
<img src="https://img.shields.io/github/commit-activity/m/momo5502/emulator?color=FF3131"/>
</h1>

The project is still in a very early, prototypy state.
However, constant progress is being made :)
A high-performance Windows process emulator that operates at the syscall level, providing full control over process execution through comprehensive hooking capabilities.

Built in C++ and powered by the Unicorn Engine.

![Preview](./docs/images/preview.jpg)

## Key Features

* __Syscall-Level Emulation__: Instead of reimplementing Windows APIs, the emulator operates at the syscall level, allowing it to leverage existing system DLLs
* __Advanced Memory Management__: Supports Windows-specific memory types including reserved, committed, built on top of Unicorn's memory management
* __Complete PE Loading__: Handles executable and DLL loading with proper memory mapping, relocations, and TLS
* __Exception Handling__: Implements Windows structured exception handling (SEH) with proper exception dispatcher and unwinding support
* __Threading Support__: Provides a scheduled (round-robin) threading model
* __State Management__: Supports both full state serialization and fast in-memory snapshots
* __Debugging Interface__: Implements GDB serial protocol for integration with common debugging tools (IDA Pro, GDB, LLDB, VS Code, ...)

Perfect for security research, malware analysis, and DRM research where fine-grained control over process execution is required.

## Code Disclaimer

The project is still in a very early, prototypy state.
However, constant progress is being made :)

## YouTube Overview

[![YouTube video](./docs/images/yt.jpg)](https://www.youtube.com/watch?v=Y6NXwI7x7Og)
Expand Down

0 comments on commit a6b50f9

Please sign in to comment.