ba8c170852
* Added build files [Capstone to Zydis] * x86 Analysis [Capstone to Zydis] * Changed x86 RzIL [Capstone to Zydis] * Changed asm and arch files [Capstone to Zydis] * Compilation, build error and test fixes [Capstone to Zydis] * Test changes [Capstone to Zydis] * Remaining changes [Capstone to Zydis] * Added BE support [Capstone to Zydis] --------- Co-authored-by: tushar3q34 <tushar3q34@gmail.com>
33 lines
553 B
Text
33 lines
553 B
Text
NAME=PE: corkami dll.dll - DYNAMIC_BASE/ASLR disabled
|
|
FILE=bins/pe/dll.dll
|
|
ARGS=-n
|
|
CMDS=!rz-bin -I bins/pe/dll.dll | grep "PIE false"
|
|
EXPECT=<<EOF
|
|
PIE false
|
|
EOF
|
|
RUN
|
|
|
|
NAME=PE: corkami aslr.dll - DYNAMIC_BASE/ASLR enabled
|
|
FILE=bins/pe/aslr.dll
|
|
ARGS=-n
|
|
CMDS=!rz-bin -I bins/pe/aslr.dll | grep PIE | grep true
|
|
EXPECT=<<EOF
|
|
PIE true
|
|
EOF
|
|
RUN
|
|
|
|
NAME=PE: corkami aslr.dll - entrypoint
|
|
FILE=bins/pe/aslr.dll
|
|
CMDS=s
|
|
EXPECT=<<EOF
|
|
0x1001000
|
|
EOF
|
|
RUN
|
|
|
|
NAME=PE: corkami aslr.dll - pi 1
|
|
FILE=bins/pe/aslr.dll
|
|
CMDS=pi 1
|
|
EXPECT=<<EOF
|
|
mov eax, 0x01
|
|
EOF
|
|
RUN
|