bf2871c7eb
* Add CIL support * refactor dotnet parsing to pe/dotnet.c * parse PE CLR metatables (based on yara implementation) * use CLR methoddefs to add binsymbols (including method namespace/class) * parse CLR method headers * CIL disassembler using .NET opcodes.def * CIL analysis plugin
12 lines
171 B
Text
12 lines
171 B
Text
NAME=PE: corkami dotnet20.exe - open
|
|
FILE=bins/pe/dotnet20.exe
|
|
CMDS=<<EOF
|
|
s @ sym.HelloWorld::Main
|
|
s @ sym.HelloWorld::.ctor
|
|
q!
|
|
EOF
|
|
EXPECT=<<EOF
|
|
0x402051
|
|
0x40205f
|
|
EOF
|
|
RUN
|