本文整理汇总了C#中IScanner.Expect方法的典型用法代码示例。如果您正苦于以下问题：C# IScanner.Expect方法的具体用法？C# IScanner.Expect怎么用？C# IScanner.Expect使用的例子？那么恭喜您, 这里精选的方法代码示例或许可以为您提供帮助。您也可以进一步了解该方法所在类IScanner的用法示例。
在下文中一共展示了IScanner.Expect方法的3个代码示例，这些例子默认根据受欢迎程度排序。您可以为喜欢或者感觉有用的代码点赞，您的评价将有助于系统推荐出更棒的C#代码示例。
示例1: Bwi_CallingAllocaWithNonConstant
public void Bwi_CallingAllocaWithNonConstant()
{
scanner = mr.StrictMock<IScanner>();
arch = new IntelArchitecture(ProcessorMode.Protected32);
program.Platform = new DefaultPlatform(null, arch);
var sig = CreateSignature(Registers.esp, Registers.eax);
var alloca = new ExternalProcedure("alloca", sig, new ProcedureCharacteristics
{
IsAlloca = true
});
trace.Add(m => m.Call(Address.Ptr32(0x2000), 4));
using (mr.Record())
{
scanner.Stub(x => x.FindContainingBlock(
Arg<Address>.Is.Anything)).Return(block);
scanner.Expect(x => x.GetImportedProcedure(
Arg<Address>.Is.Equal(Address.Ptr32(0x2000u)),
Arg<Address>.Is.NotNull)).Return(alloca);
scanner.Stub(x => x.GetTrace(null, null, null)).IgnoreArguments().Return(trace);
}
var wi = CreateWorkItem(Address.Ptr32(0x1000), new FakeProcessorState(arch));
wi.ProcessInternal();
mr.VerifyAll();
Assert.AreEqual(1, block.Statements.Count);
Assert.AreEqual("esp = alloca(eax)", block.Statements.Last.ToString());
}示例2: Bwi_CallTerminatingProcedure_StopScanning
public void Bwi_CallTerminatingProcedure_StopScanning()
{
proc = Procedure.Create("proc", Address.Ptr32(0x002000), new Frame(PrimitiveType.Pointer32));
var terminator = Procedure.Create("terminator", Address.Ptr32(0x0001000), new Frame(PrimitiveType.Pointer32));
terminator.Characteristics = new ProcedureCharacteristics {
Terminates = true,
};
block = proc.AddBlock("the_block");
scanner = mr.StrictMock<IScanner>();
arch.Stub(a => a.PointerType).Return(PrimitiveType.Word32);
scanner.Stub(s => s.FindContainingBlock(Arg<Address>.Is.Anything)).Return(block);
scanner.Stub(s => s.GetCallSignatureAtAddress(Arg<Address>.Is.Anything)).Return(null);
scanner.Stub(s => s.GetImportedProcedure(Arg<Address>.Is.Anything, Arg<Address>.Is.NotNull)).Return(null);
scanner.Expect(s => s.ScanProcedure(
Arg<Address>.Is.Anything,
Arg<string>.Is.Anything,
Arg<ProcessorState>.Is.Anything))
.Return(terminator);
scanner.Expect(s => s.TerminateBlock(Arg<Block>.Is.NotNull, Arg<Address>.Is.NotNull));
arch.Stub(a => a.FramePointerType).Return(PrimitiveType.Pointer32);
scanner.Stub(s => s.GetTrace(null, null, null)).IgnoreArguments().Return(trace);
mr.ReplayAll();
trace.Add(m => m.Call(Address.Ptr32(0x0001000), 4));
trace.Add(m => m.SideEffect(new ProcedureConstant(VoidType.Instance, new PseudoProcedure("shouldnt_decompile_this", VoidType.Instance, 0))));
var wi = CreateWorkItem(Address.Ptr32(0x2000), new FakeProcessorState(arch));
wi.ProcessInternal();
Assert.AreEqual(1, block.Statements.Count, "Should only have rewritten the Call to 'terminator'");
mr.VerifyAll();
}示例3: Bwi_CallingAllocaWithConstant
public void Bwi_CallingAllocaWithConstant()
{
scanner = mr.StrictMock<IScanner>();
prog.Architecture = new IntelArchitecture(ProcessorMode.Protected32);
var sig = CreateSignature(Registers.esp, Registers.eax);
var alloca = new ExternalProcedure("alloca", sig);
alloca.Characteristics = new ProcedureCharacteristics
{
IsAlloca = true
};
using (mr.Record())
{
scanner.Stub(x => x.FindContainingBlock(
Arg<Address>.Is.Anything)).Return(block);
scanner.Expect(x => x.GetImportedProcedure(
Arg<Address>.Matches(a => a.ToLinear() == 0x2000u),
Arg<Address>.Is.NotNull)).Return(alloca);
scanner.Stub(x => x.GetTrace(null, null, null)).IgnoreArguments().Return(trace);
}
trace.Add(m => m.Call(Address.Ptr32(0x2000), 4));
var state = new FakeProcessorState(prog.Architecture);
state.SetRegister(Registers.eax, Constant.Word32(0x0400));
var wi = CreateWorkItem(Address.Ptr32(0x1000), state);
wi.ProcessInternal();
mr.VerifyAll();
Assert.AreEqual(1, block.Statements.Count);
Assert.AreEqual("esp = esp - 0x00000400", block.Statements.Last.ToString());
}