NAME=pd varsub-issue FILE=bins/mach0/mac-ls2 CMDS=< \\u00a2\\u20ac\\U00010348 in yellow:\e[33m ......... \e[0m\n" 0x00401693 mov edi, 0x4021ff ; "utf8> \\u00a2\\u20ac\\U00010348 in yellow:.[33m ... .[0m." 0x004016ac mov edi, 0x40224a ; 'J"@' ; u"utf16le> \\u00a2\\u20ac\\U00010348 in green:.[32m ... .[0m." 0x004016ed mov edi, 0x40258c ; U"utf32le> \\u00a2\\u20ac\\U00010348 in cyan:.[36m ... .[0m." 0x004016f7 mov edi, 0x40266c ; U"Mountain range with embedded quad zeros: .A.A.A." EOF RUN NAME=bin.str.enc utf8 FILE=bins/elf/strenc CMDS=< \\u00a2\\u20ac\\U00010348 in yellow:\e[33m \u00a2\u20ac\U00010348 \e[0m\n" 0x00401693 mov edi, 0x4021ff ; "utf8> \\u00a2\\u20ac\\U00010348 in yellow:\e[33m \xc2\xa2\xe2\x82\xac\xf0\x90\x8d\x88 \e[0m\n" 0x00401693 mov edi, 0x4021ff ; "utf8> \\u00a2\\u20ac\\U00010348 in yellow:\e[33m \u00a2\u20ac\U00010348 \e[0m\n" EOF RUN NAME=bin.str.enc 8bit FILE=bins/pe/testapp-msvc64.exe CMDS=< \\u00a2\\u20ac\\U00010348 in green:\e[32m \xa2\u20ac\U00010348 \e[0m\n" 0x004016b6 mov edi, str.e_e_b ; "_%e%e%b% " 0x004016b6 mov edi, str.e_e_b ; u"\u255f\u2565\u2565\u2562 is a wall with no embedded zeros\n" 0x004016c0 mov edi, 0x40230c ; " %B%" 0x004016c0 mov edi, 0x40230c ; u"\u2520\u2542\u2500\u2500\u2542\u2528 is a fence with embedded zeros\n" 0x004016ca mov edi, 0x40235a ; 'Z#@' ; u"\u2520\u2542-\u2500-\u2500\u2542\u2528 is a fence with embedded double zeros\n" 0x004016d4 mov edi, str.e_e_e_e_e_e_e_e_e_k_e_e_e_e_e_e_e_e_e_k_e_e_e_e_e_e_e_e_e_k_e_e_e_e_e_e_e_e_e_k_e_e_e_e_e_e_e_e_e_k_e_e_e_e_e_e_e_e_e_k_e_e_e_e_e_e_e_e_e_k_e_e_e_e_e_e_e_e_e_k_e_e_e_e_e_e_e_e_e_k_e_e_e_e_e_e_e_e_e_k_e_e_e_e_e_e_e_e_e_k_e_e_e_e_e_e_e_e_e_k_e_e_e_e_e_e_e_e_e_k_e_e_e_e_e_e_e_e_e_k_e_e_e_e_e_e_e_e_e_k_e_e_e_e_e_e_e_e_e_k_e_e_e_e_e_e_e_e_e_k_e_e_e_e_e_e_e_e_e_k ; u"\u2565\u2565\u2565\u2565\u2565\u2565\u2565\u2565\u2565\u256b\u2565\u2565\u2565\u2565\u2565\u2565\u2565\u2565\u2565\u256b\u2565\u" EOF RUN NAME=bin.str.enc utf32le FILE=bins/elf/strenc CMDS=< \\u00a2\\u20ac\\U00010348 in cyan:\e[36m \xa2\u20ac\U00010348 \e[0m\n" 0x004016f7 mov edi, 0x40266c ; U"Mountain range with embedded quad zeros: \U00010300A\U00010300A\U00010300A\n" 0x00401701 mov edi, 0x402730 ; '0'@' ; "e%" 0x00401701 mov edi, 0x402730 ; '0'@' ; U"\u2565\u2565\u2565\u2565\u2565\u2565\u2565\u2565\u2565\u256b\u2565\u2565\u2565\u2565\u2565\u2565\u2565\u2565\u2565\u256b\u2565\u" EOF RUN NAME=bin.str.enc guess utf16le FILE=bins/pe/testapp-msvc64.exe CMDS=< \\u00a2\\u20ac\\U00010348 in cyan:\e[36m \xa2\u20ac\U00010348 \e[0m\n" utf32be utf16le EOF RUN NAME=bin.str.enc error handling FILE== CMDS=< %S\ufeff\n" EOF RUN NAME=show string at src if dst is stack (x86_cs MOV) FILE=bins/elf/7786-utf16le CMDS=< 0xa00c25ff"},{"offset":134514022,"text":" ; int printf(-1)"}] EOF RUN NAME=pdJ asm.emu=1 string FILE=bins/elf/crackme0x00b CMDS=< 0x0040296a bf01000000 mov edi, 1 | || 0x0040296f e80cf9ffff call sym.imp.isatty EOF RUN NAME=pd @a overwrites analysis hints FILE=bins/elf/analysis/ls-linux64 CMDS=< 0x00000008 feffffea b 8 0x0000000c 01207047 ldrbmi r2, [r0, -r1]! 0x00000010 00c09fe5 ldr ip, [pc] ; [0x18:4]=13 ; 24 EOF RUN NAME=two-operand line highlight; asm.highlight ecHw fix; ec wordhl/linehl FILE=bins/elf/redpill CMDS=<+<<' 0x000009a9 mov word [rbp - 0x2c], 0x3e5d ; ']>' 0x000009b3 movabs rax, 0x3c2b3c3c5b3e3e3e ; '>>>[<<+<' EOF RUN NAME=asm.imm.str, asm.cmd.right=false, pd and pdJ FILE=bins/elf/echo-bin CMDS=<>>[<<+<' 0x000009b3 48b83e3e3e5b. movabs rax, 0x3c2b3c3c5b3e3e3e [{"offset":2483,"text":" ; '>>>[<<+<'"},{"offset":2483,"text":" 0x000009b3 48b83e3e3e5b. movabs rax, 0x3c2b3c3c5b3e3e3e"}] EOF RUN NAME=asm.imm.str short false positive FILE=bins/elf/analysis/fast CMDS=<dH\x8b\x04%(" \ 0x00005b08 ff150ac30100 call qword [reloc.__libc_start_main] ; [reloc.__libc_start_main:8]=0x23708 reloc.target.__libc_start_main EOF RUN NAME=asm.lines.ret, pd and pdJ FILE=bins/elf/crackme0x05 CMDS=<