# kdemulator

> kdemulator executes Windows x86-64 kernel-driver binaries outside a live kernel for IOCTL analysis. It maps PE sections into Unicorn, intercepts imported NT API calls and supplies minimal kernel-object and memory stubs. The CLI can invoke DriverEntry, send one IOCTL or run a mutation loop over an IOCTL input buffer.

- Type: Tool
- Targets: Binary
- Category: Debugging and dynamic analysis
- Relationship: Foundation tool
- Sources reviewed: 2026-11-06
- Added to the catalog: 2026-11-06
- Original resource: <https://github.com/000nico/kdemulator>
- Primary source: <https://github.com/000nico/kdemulator/blob/44c05218b4b83d8a864df540aead218dbdf48e6a/README.md>
- Catalog page: <https://awesomerea.org/resources/kdemulator/>
- Record JSON: <https://awesomerea.org/resources/kdemulator/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/kdemulator/index.md)

## Requirements & limits

- **Scope:** Windows x86-64 driver .sys files are the documented inputs.
- **Limits:** Emulation covers only the driver's own code and directly imported functions; hardware-facing drivers need additional stubs.
- **License:** Unlicense.

## Primary sources

1. <https://github.com/000nico/kdemulator/blob/44c05218b4b83d8a864df540aead218dbdf48e6a/README.md>
2. <https://github.com/000nico/kdemulator/blob/44c05218b4b83d8a864df540aead218dbdf48e6a/emu-cli.md>
3. <https://github.com/000nico/kdemulator/blob/44c05218b4b83d8a864df540aead218dbdf48e6a/LICENSE>

## More in Native binaries

- [angr-management](https://awesomerea.org/resources/angr-management/index.md) · Tool
- [QIRA](https://awesomerea.org/resources/qira/index.md) · Tool
- [Dependencies](https://awesomerea.org/resources/dependencies-pe/index.md) · Tool
- [Hachoir](https://awesomerea.org/resources/hachoir/index.md) · Tool
- [Pigaios](https://awesomerea.org/resources/pigaios/index.md) · Tool
- [MachOExplorer](https://awesomerea.org/resources/machoexplorer/index.md) · Tool

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.