diff --git a/suite/test_xedparse.py b/suite/test_xedparse.py index 1dbada64d34b076f0d2e45e0c7079ae1e4ec894f..9a6a6e50b7fdf9decae8963dcb874d8a06e10e6b 100755 --- a/suite/test_xedparse.py +++ b/suite/test_xedparse.py @@ -47,18 +47,18 @@ def runTest(n, x64, ip, expectedData, asm): printTest(x64, ip, expectedData, asm, []) return False -#runTest(0, False, 0x77513BEE, [0xEB, 0xFE], "JMP SHORT 0x77513BEE") -#runTest(1, False, 0x77513BEE, [0xEB, 0x07], "JMP SHORT 0x77513BF7") -#runTest(2, False, 0x77513BEE, [0xEB, 0xCF], "JMP SHORT 0x77513BBF") +runTest(0, False, 0x77513BEE, [0xEB, 0xFE], "JMP 0x77513BEE") +runTest(1, False, 0x77513BEE, [0xEB, 0x07], "JMP 0x77513BF7") +runTest(2, False, 0x77513BEE, [0xEB, 0xCF], "JMP 0x77513BBF") runTest(3, False, 0x405C5B, [0xE9, 0xCA, 0x70, 0x00, 0x00], "JMP 0x0040CD2A") runTest(4, False, 0x405C5B, [0xE9, 0x40, 0xFE, 0xFF, 0xFF], "JMP 0x00405AA0") runTest(5, False, 0x405C5B, [0xFF, 0x25, 0x00, 0x01, 0x00, 0x00], "JMP DWORD PTR DS:[0x100]") runTest(6, False, 0x405CCC, [0xFF, 0x15, 0x10, 0x00, 0x00, 0x00], "CALL DWORD PTR DS:[0x10]") runTest(7, False, 0x405C5B, [0xE8, 0xCA, 0x70, 0x00, 0x00], "CALL 0x0040CD2A") runTest(8, False, 0x405EF0, [0xE8, 0x06, 0xFF, 0xFF, 0xFF], "CALL 0x00405DFB") -#runTest(9, True, 0x7FFCAA022104, [0xEB, 0xFE], "JMP SHORT 0x7FFCAA022104") -#runTest(10, True, 0x7FFCAA022104, [0xEB, 0x22], "JMP SHORT 0x7FFCAA022128") -#runTest(11, True, 0x7FFCAA022104, [0xEB, 0xF9], "JMP SHORT 0x7FFCAA0220FF") +runTest(9, True, 0x7FFCAA022104, [0xEB, 0xFE], "JMP 0x7FFCAA022104") +runTest(10, True, 0x7FFCAA022104, [0xEB, 0x22], "JMP 0x7FFCAA022128") +runTest(11, True, 0x7FFCAA022104, [0xEB, 0xF9], "JMP 0x7FFCAA0220FF") runTest(12, True, 0x7FFCA9FF197C, [0xE9, 0x35, 0x64, 0x93, 0x53], "JMP 0x7FFCFD927DB6") runTest(13, True, 0x7FFCAA022104, [0xE9, 0x7C, 0xF4, 0xFC, 0xFF], "JMP 0x7FFCA9FF1585") #runTest(14, True, 0x123456789, [0xFF, 0x25, 0xFA, 0xFF, 0xFF, 0xFF], "JMP QWORD[0x123456789]")