libmwemu 0.24.4

x86 32/64bits and system internals emulator, for securely emulating malware and other stuff.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56

pub mod aarch64;
pub mod x86;

use serde::{Deserialize, Serialize};

#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
pub enum Arch {
    X86,
    X86_64,
    Aarch64,
}

#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
pub enum OperatingSystem {
    Windows,
    Linux,
    MacOS,
}

impl OperatingSystem {
    pub fn is_windows(self) -> bool {
        matches!(self, OperatingSystem::Windows)
    }

    pub fn is_linux(self) -> bool {
        matches!(self, OperatingSystem::Linux)
    }

    pub fn is_macos(self) -> bool {
        matches!(self, OperatingSystem::MacOS)
    }
}

impl Arch {
    /// True for any 64-bit address space (X86_64 or Aarch64).
    /// Use for pointer width, address space decisions (e.g., Maps).
    pub fn is_64bits(self) -> bool {
        matches!(self, Arch::X86_64 | Arch::Aarch64)
    }

    /// True for x86-64 specifically. Use for x86 32-vs-64 branching
    /// (decoder, registers, operand sizes, etc.).
    pub fn is_x64(self) -> bool {
        matches!(self, Arch::X86_64)
    }

    /// True for any x86 variant (32 or 64).
    pub fn is_x86(self) -> bool {
        matches!(self, Arch::X86 | Arch::X86_64)
    }

    /// True for AArch64 / ARM64.
    pub fn is_aarch64(self) -> bool {
        matches!(self, Arch::Aarch64)
    }
}