{
  "added_at": "2026-11-06",
  "additional_evidence_urls": [
    "https://github.com/000nico/kdemulator/blob/44c05218b4b83d8a864df540aead218dbdf48e6a/emu-cli.md",
    "https://github.com/000nico/kdemulator/blob/44c05218b4b83d8a864df540aead218dbdf48e6a/LICENSE"
  ],
  "category": "dynamic-analysis",
  "description_en": "kdemulator executes Windows x86-64 kernel-driver binaries outside a live kernel for IOCTL analysis. It maps PE sections into Unicorn, intercepts imported NT API calls and supplies minimal kernel-object and memory stubs. The CLI can invoke DriverEntry, send one IOCTL or run a mutation loop over an IOCTL input buffer.",
  "description_zh": "kdemulator 在真实内核之外执行 Windows x86-64 内核驱动二进制文件，以分析 IOCTL。它将 PE 节映射到 Unicorn，截获导入的 NT API 调用，并提供最小化的内核对象与内存模拟；命令行可运行 DriverEntry、发送单次 IOCTL 或循环变异输入。",
  "entry_url": "https://awesomerea.org/resources/kdemulator/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/kdemulator/",
  "evidence_url": "https://github.com/000nico/kdemulator/blob/44c05218b4b83d8a864df540aead218dbdf48e6a/README.md",
  "group": "tools",
  "id": "kdemulator",
  "json_url": "https://awesomerea.org/resources/kdemulator/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/kdemulator/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/kdemulator/index.md",
  "name": "kdemulator",
  "name_zh": "kdemulator Windows 内核驱动模拟分析工具",
  "record_type": "resource",
  "relationship": "foundation",
  "requirement_facets": [
    "scope",
    "limits",
    "license"
  ],
  "requirements": [
    "Windows x86-64 driver .sys files are the documented inputs.",
    "Emulation covers only the driver's own code and directly imported functions; hardware-facing drivers need additional stubs.",
    "Unlicense."
  ],
  "requirements_zh": [
    "文档中的输入是 Windows x86-64 驱动 .sys 文件。",
    "模拟范围仅包括驱动自身代码和直接导入的函数；访问硬件的驱动需要额外桩函数。",
    "Unlicense 许可证。"
  ],
  "targets": [
    "binary"
  ],
  "url": "https://github.com/000nico/kdemulator",
  "verification": "source-reviewed",
  "verified_at": "2026-11-06"
}