I’ve had some more time to work on this, I think I’ll have a solve soon. Unicorn engine has been invaluable for dynamic analysis, there probably won’t be anything you can read online about how to solve this, just a lot of RE. As a hint, try understanding the interaction between the .pcode, .vmrun, and .vm sections.