libmwemu 0.24.1

x86 32/64bits and system internals emulator, for securely emulating malware and other stuff.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20

use crate::{tests::helpers, *};

#[test]
// this tests windows 32bits shellcodes, and fetching apis and doing some api calls, pointing
// to strings etc.
pub fn sc32win_peb_ldr_rot() {
    helpers::setup();

    let mut emu = emu32();
    emu.cfg.maps_folder = "../../maps/maps32/".to_string();

    let sample = "../../test/sc32win_peb_ldr_rot.bin";
    emu.load_code(sample);
    emu.run(Some(0x3c0116));

    let ptr = emu.regs().get_ebx();
    assert_eq!(ptr, 0x3c01b8);
    let s: String = emu.maps.read_string(ptr);
    assert!(s.starts_with("Host: msn.com"));
}