*vmprotect packed DLL, full user-mode emulation

Unicorn PE
Unicorn PE is an unicorn based instrumentation project/framework designed to emulate code execution for windows PE files, especially packed ones.

Feature
Dump PE image from emu-memory into file, fix import table, especially packed ones.
Partial support for exception. (only #DB and #BP)
Show disasm for all instructions that is being executed.

--> Link <--

Dependencies
A modification of https://github.com/DarthTon/Blackbone is done for PE manual-mapping.
https://github.com/unicorn-engine/unicorn for emulation.
https://github.com/aquynh/capstone for disasm.

-----
RE In Progress [!] Coding Hazard [!] Stay Clear of this Cube

| Сообщение посчитали полезным: plutos, vden