momo5502/sogen

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

3553 stars · 243 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Sogen is a C++ userspace emulator that runs Windows and Linux binaries at the CPU and syscall level without a real operating system, executing real system DLLs for faithful behavior. It supports pluggable CPU backends (Unicorn, icicle-emu, Hyper-V, KVM, FEX), full hooking/rewriting of instructions, memory and API calls, deterministic runs, and snapshot/restore of emulator state.

Use cases

• emulate a Windows binary on Linux without a VM
• analyze malware in a sandboxed deterministic environment
• debug a process invisibly to bypass anti-debug checks
• trace and rewrite syscalls and API calls of a program
• run Windows games and apps cross-platform
• snapshot and restore emulator state during reverse engineering
• hook individual instructions and memory accesses

When to choose

• you need instruction-level visibility and control over a Windows or Linux binary
• you want deterministic, reproducible execution for analysis
• you need debugging that is invisible to anti-debug techniques
• you want to run real system DLLs instead of reimplemented API stubs
• you need cross-platform emulation including browser or ARM targets

When to avoid

• you just want to run Windows software normally with full performance - use Wine or a VM
• you need a full OS environment with real drivers and hardware access
• you need production deployment of applications rather than analysis
• you require perfect compatibility with complex GUI applications

Facets

library · maturity active

simulation reverse-engineering security parser reverse-engineering security developer-tools simulation windows browser cpp cross-platform userspace-emulator cpu-emulation syscall-emulation malware-analysis gdb-protocol unicorn-engine deterministic-execution snapshot-restore pe-loader anti-debug debugging linux macos android ios

Member repositories

For agents

markdown · JSON · MCP: product_card(name="momo5502/sogen")