HexCore Binary Analysis

Analyze PE/ELF binaries with disassembly, emulation, and automated pipelines in VS Code.

26|5|Updated Jan 18, 2026
One-click install
npx skills add https://github.com/AkashaCorporation/HikariSystem-HexCore --skill hexcore-binary-analysis
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: HexCore Binary Analysis
Source: https://github.com/AkashaCorporation/HikariSystem-HexCore/tree/main/.agent/skills/hexcore
Command: npx skills add https://github.com/AkashaCorporation/HikariSystem-HexCore --skill hexcore-binary-analysis

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

HexCore Binary Analysis simplifies and accelerates complex binary analysis and reverse engineering tasks inside a VS Code-based environment by consolidating multiple engines and automation capabilities into a single workflow.

Core Features & Use Cases

  • Disassembly with Capstone across multiple architectures (x86/x64, ARM, ARM64, MIPS, etc.)
  • Emulation with Unicorn and a full debugger pipeline, including IR lifting (Remill) and MLIR-based decompilation (Helix) for faster comprehension
  • Automated pipelines to run static and dynamic analyses, extract strings, map CFGs, and generate consolidated reports
  • Use Case: Malware analysts can pipeline a binary, extract indicators, and auto-generate a vulnerability report within VS Code

Quick Start

Run a headless HexCore job to analyze a sample binary and generate a consolidated report

Frequently Asked Questions about HexCore Binary Analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform reverse engineering and binary analysis inside VS Code?

Binary analysis in VS Code is done by running integrated disassembly, IR lifting, and emulation engines. This allows you to analyze PE/ELF targets and extract insights without leaving your editor environment.

Can I emulate and debug x86 or ARM binaries without installing external tools?

Yes, emulation and debugging for x86/x64 and ARM binaries run directly inside VS Code. The integrated pipeline handles these workflows headlessly without requiring external engine installations.

How do I automate malware analysis and generate vulnerability reports?

Automate malware analysis by running a headless pipeline job on your sample binary. This extracts indicators, maps control flow graphs, and auto-generates a consolidated vulnerability report.

What architectures and executable formats are supported for disassembly?

Disassembly supports PE and ELF executable formats across multiple architectures including x86, x64, ARM, ARM64, and MIPS, using the integrated Capstone engine for static analysis.

Does binary decompilation use MLIR or IR lifting workflows?

Binary decompilation uses MLIR-based workflows via the Helix engine and IR lifting through Remill. This translates low-level instructions into higher-level representations for faster comprehension.