libmwemu 0.24.5

x86 32/64bits and system internals emulator, for securely emulating malware and other stuff.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100

#[test]
fn test_banzai_initially_empty() {
    let emu = crate::emu64();

    // Banzai should have no API params by default
    // We test this by trying to get params for a non-existent function (which should panic)
    // Since we can't test  panics easily here, we just verify the structure exists
}

#[test]
fn test_banzai_add_function() {
    let mut emu = crate::emu64();

    // Add a function to banazai list
    emu.banzai_add("CreateFileA", 7);

    // Verify it was added by trying to get params
    let params = emu.banzai.get_params("CreateFileA");
    assert_eq!(params, 7, "Parameter count should match");
}

#[test]
fn test_banzai_add_multiple_functions() {
    let mut emu = crate::emu64();

    // Add multiple functions
    emu.banzai_add("CreateFileA", 7);
    emu.banzai_add("ReadFile", 5);
    emu.banzai_add("WriteFile", 5);

    // Verify all were added
    assert_eq!(emu.banzai.get_params("CreateFileA"), 7);
    assert_eq!(emu.banzai.get_params("ReadFile"), 5);
    assert_eq!(emu.banzai.get_params("WriteFile"), 5);
}

#[test]
fn test_banzai_different_param_counts() {
    let mut emu = crate::emu64();

    // Add functions with different parameter counts
    emu.banzai_add("Func0", 0);
    emu.banzai_add("Func1", 1);
    emu.banzai_add("Func10", 10);

    assert_eq!(emu.banzai.get_params("Func0"), 0);
    assert_eq!(emu.banzai.get_params("Func1"), 1);
    assert_eq!(emu.banzai.get_params("Func10"), 10);
}

#[test]
fn test_banzai_add_overwrite() {
    let mut emu = crate::emu64();

    // Add a function
    emu.banzai_add("TestFunc", 5);
    assert_eq!(emu.banzai.get_params("TestFunc"), 5);

    // Add it again with different param count
    emu.banzai_add("TestFunc", 10);

    // Should be overwritten
    assert_eq!(
        emu.banzai.get_params("TestFunc"),
        10,
        "Parameter count should be updated"
    );
}

#[test]
fn test_banzai_32bit_mode() {
    let mut emu = crate::emu32();

    emu.banzai_add("TestFunc32", 3);
    assert_eq!(
        emu.banzai.get_params("TestFunc32"),
        3,
        "Banzai should work in 32-bit mode"
    );
}

#[test]
fn test_banzai_enable_works() {
    let mut emu = crate::emu64();

    // enable_banzai and disable_banzai exist and should not panic
    emu.enable_banzai();
    emu.disable_banzai();
}

#[test]
fn test_banzai_add_clears_previous() {
    let mut emu = crate::emu64();

    emu.banzai_add("Func1", 1);
    emu.banzai_add("Func2", 2);

    assert_eq!(emu.banzai.get_params("Func1"), 1);
    assert_eq!(emu.banzai.get_params("Func2"), 2);
}