Sha256: 1fe715634fdead482d20925ff9ec9f2725137e622e7ff62c1297da0ead41d930

Contents?: true

Size: 713 Bytes

Versions: 16

Compression:

Stored size: 713 Bytes

Contents

require File.expand_path(File.dirname(__FILE__) + '/spec_helper')
require File.expand_path(File.dirname(__FILE__) + '/../lib/pedump')

describe "corkami/manyimportsW7.exe" do
  before :all do
    @sample = sample
  end

  it "should have 2 imports" do
    @sample.imports.size.should == 2
    @sample.imports.map(&:module_name).should == %w'kernel32.dll msvcrt.dll'
    @sample.imports.map do |iid|
      (iid.original_first_thunk + iid.first_thunk).uniq.map(&:name)
    end.flatten.should == ["ExitProcess", "printf"]
  end

  it "should have 1 TLS" do
    @sample.tls.size.should == 1
    @sample.tls.first.AddressOfIndex.should == 0x401148
    @sample.tls.first.AddressOfCallBacks.should == 0x401100
  end
end

Version data entries

16 entries across 16 versions & 1 rubygems

Version Path
pedump-0.5.0 spec/manyimportsW7_spec.rb
pedump-0.4.16 spec/manyimportsW7_spec.rb
pedump-0.4.15 spec/manyimportsW7_spec.rb
pedump-0.4.14 spec/manyimportsW7_spec.rb
pedump-0.4.13 spec/manyimportsW7_spec.rb
pedump-0.4.12 spec/manyimportsW7_spec.rb
pedump-0.4.11 spec/manyimportsW7_spec.rb
pedump-0.4.10 spec/manyimportsW7_spec.rb
pedump-0.4.9.2 spec/manyimportsW7_spec.rb
pedump-0.4.9.1 spec/manyimportsW7_spec.rb
pedump-0.4.9 spec/manyimportsW7_spec.rb
pedump-0.4.8 spec/manyimportsW7_spec.rb
pedump-0.4.7 spec/manyimportsW7_spec.rb
pedump-0.4.6 spec/manyimportsW7_spec.rb
pedump-0.4.5 spec/manyimportsW7_spec.rb
pedump-0.4.4 spec/manyimportsW7_spec.rb