ba8c170852
* Added build files [Capstone to Zydis] * x86 Analysis [Capstone to Zydis] * Changed x86 RzIL [Capstone to Zydis] * Changed asm and arch files [Capstone to Zydis] * Compilation, build error and test fixes [Capstone to Zydis] * Test changes [Capstone to Zydis] * Remaining changes [Capstone to Zydis] * Added BE support [Capstone to Zydis] --------- Co-authored-by: tushar3q34 <tushar3q34@gmail.com>
42 lines
656 B
Text
42 lines
656 B
Text
NAME=pi pdq with ahi2
|
|
FILE=malloc://1024
|
|
CMDS=<<EOF
|
|
e asm.bytes=true
|
|
e asm.arch=x86
|
|
e asm.bits=64
|
|
wx 48b96e74646c6c2e646c
|
|
ahi s
|
|
pi 1
|
|
pdq 1
|
|
EOF
|
|
EXPECT=<<EOF
|
|
mov rcx, 'ld.lldtn'
|
|
0x00000000 48b96e74646c6c2e646c mov rcx, 'ld.lldtn'
|
|
EOF
|
|
RUN
|
|
|
|
NAME=uafbug pi pdq
|
|
FILE=malloc://1024
|
|
CMDS=<<EOF
|
|
e asm.bytes=true
|
|
e asm.arch=x86
|
|
e asm.bits=64
|
|
wx 48b96e74646c6c2e646c
|
|
ahi i
|
|
pi 1
|
|
ahi s
|
|
pi 1
|
|
pdq 1
|
|
ia > /dev/null
|
|
pdq 1
|
|
ia > /dev/null
|
|
pdq 1
|
|
EOF
|
|
EXPECT=<<EOF
|
|
mov rcx, 110.116.100.108
|
|
mov rcx, 'ld.lldtn'
|
|
0x00000000 48b96e74646c6c2e646c mov rcx, 'ld.lldtn'
|
|
0x00000000 48b96e74646c6c2e646c mov rcx, 'ld.lldtn'
|
|
0x00000000 48b96e74646c6c2e646c mov rcx, 'ld.lldtn'
|
|
EOF
|
|
RUN
|