libmwemu 0.24.3

x86 32/64bits and system internals emulator, for securely emulating malware and other stuff.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41

use crate::emu;
use crate::serialization;
use crate::winapi::winapi64::kernel32;

mod file;
mod heap;
mod loader;
mod memory;
mod misc;
mod string;
mod sync;

pub fn gateway(addr: u64, emu: &mut emu::Emu) -> String {
    let api = kernel32::guess_api_name(emu, addr);
    let api = api.split("!").last().unwrap_or(&api);
    if file::dispatch(api, emu)
        || heap::dispatch(api, emu)
        || loader::dispatch(api, emu)
        || memory::dispatch(api, emu)
        || string::dispatch(api, emu)
        || sync::dispatch(api, emu)
        || misc::dispatch(api, emu)
    {
        return String::new();
    }

    if emu.cfg.skip_unimplemented == false {
        if emu.cfg.dump_on_exit && emu.cfg.dump_filename.is_some() {
            serialization::Serialization::dump(&emu, emu.cfg.dump_filename.as_ref().unwrap());
        }

        unimplemented!("atemmpt to call unimplemented API 0x{:x} {}", addr, api);
    }
    log::warn!(
        "calling unimplemented API 0x{:x} {} at 0x{:x}",
        addr,
        api,
        emu.regs().rip
    );
    return api.to_ascii_lowercase();
}