hzqst/unicorn_pe
Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.
A PE dumper for processes protected by user mode anti-tamper solutions (hyperion, theia, etc.)
Appears on
Quick read
Latest capture 2026-08-29 03:07
0 paths
Agent instructions and tool configuration found in this repository.
No config files detected.
4 observed captures since 2026-06-24. Observed captures are shown by default.
Stars from first capture +5
Observed captures only
All tracked data
Observed snapshots
Observed snapshots
Nearest indexed repositories by embedding similarity.
Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.
Riot Vanguard streamed module to PE converter. Resolves hashed imports, reconstructs sections, and writes valid DLLs from RITO format binaries.
Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.
Decrypting and intercepting encrypted imports of Vanguards Kernel Driver
Il2CppDumper fork with a native Rust PDB generator for x64 PE (GameAssembly.dll): function names, full struct types and typed prototypes, auto-loaded by IDA.
vdk is a set of utilities used to help with exploitation of a vulnurable driver.