From Collaborative RCE Tool Library
Pokas x86 Emulator for Generic Unpacking
| Tool name: | Pokas x86 Emulator for Generic Unpacking |
|
||
|---|---|---|---|---|
| Author: | Amr Thabet | |||
| Website: | http://sourceforge.net/projects/x86emu/ | |||
| Current version: | 1.0.0.0 | |||
| Last updated: | July 18, 2010 | |||
| Direct D/L link: | Locally archived copy | |||
| License type: | GPL | |||
| Description: | Pokas x86 Emulator is an Application-Only emulator created for generic unpacking and testing the antivirus detection algorithms. This Emulator has many features some of them are: 1. Has an assembler and a disassembler from and to mnemonics. 2. Support adding new APIs and adding the emulation function to them. 3. Support a very powerful debugger that has a parser that parses the condition you give and create a very fast native code that perform the check on this condition. 4. Support seh and support tib, teb, peb and peb_ldr_data. 5. It monitors all the memory writes and log up to 10 previous Eips and saves the last accessed and the last modified place in memory. 6. it support 6 APIs:GetModuleHandleA, LoadLibrayA, GetProcAddress, VirtualAlloc, VirtualFree and VirtualProtect. 7. With all of these it's FREE and open source. It successfully emulates: 1. UPX 2. FSG 3. MEW 4. Aspack 5. PECompact 6. Morphine But it does contain bugs and it still in the beta version. It surely will be fixed soon ith the help of your feedback. It still doesn't support multithreading and doesn't support Linux ELF executables. It's still working only on windows but the Linux version will be available soon. you can download it from https://sourceforge.net/projects/x86emu/ AmrThabet amr.thabet_*at*_student.alx.edu.eg |
|||
| Related URLs: | No related URLs have been submitted for this tool yet | |||
Feed containing all updates for this tool.
(please also edit it if you think it fits well in some additional category, since this can also be controlled)
You are welcome to add your own useful notes about this tool, for others to see!