dotscope 0.6.0

A high-performance, cross-platform framework for analyzing and reverse engineering .NET PE executables
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77

//! Factory methods for raw modification integrity validation testing.
//!
//! Contains helper methods migrated from raw modification integrity validation source files
//! for creating test assemblies with various integrity validation scenarios.

use crate::{
    metadata::{
        tables::{CodedIndex, CodedIndexType, FieldRaw, MethodDefRaw, TableId, TypeDefRaw},
        token::Token,
    },
    test::{get_testfile_wb, TestAssembly},
    Result,
};

/// Test factory for RawChangeIntegrityValidator following the golden pattern.
///
/// Creates test assemblies covering basic integrity validation scenarios.
/// Note: This validator primarily uses direct corruption testing rather than file-based tests.
///
/// Originally from: `src/metadata/validation/validators/raw/modification/integrity.rs`
pub fn raw_change_integrity_validator_file_factory() -> Result<Vec<TestAssembly>> {
    let mut assemblies = Vec::new();

    if let Some(clean_path) = get_testfile_wb() {
        assemblies.push(TestAssembly::new(clean_path, true));
    }

    Ok(assemblies)
}

/// Creates a dummy TypeDef for testing purposes.
///
/// Originally from: `src/metadata/validation/validators/raw/modification/integrity.rs`
pub fn create_dummy_typedef(rid: u32) -> Result<TypeDefRaw> {
    Ok(TypeDefRaw {
        rid,
        token: Token::new(rid | 0x0200_0000),
        offset: 0,
        flags: 0,
        type_name: 1,
        type_namespace: 0,
        extends: CodedIndex::new(TableId::TypeRef, 1, CodedIndexType::TypeDefOrRef),
        field_list: 1,
        method_list: 1,
    })
}

/// Creates a dummy Field for testing purposes.
///
/// Originally from: `src/metadata/validation/validators/raw/modification/integrity.rs`
pub fn create_dummy_field(rid: u32) -> Result<FieldRaw> {
    Ok(FieldRaw {
        rid,
        token: Token::new(rid | 0x0400_0000),
        offset: 0,
        flags: 0,
        name: 1,
        signature: 1,
    })
}

/// Creates a dummy MethodDef for testing purposes.
///
/// Originally from: `src/metadata/validation/validators/raw/modification/integrity.rs`
pub fn create_dummy_method(rid: u32) -> Result<MethodDefRaw> {
    Ok(MethodDefRaw {
        rid,
        token: Token::new(rid | 0x0600_0000),
        offset: 0,
        rva: 0,
        impl_flags: 0,
        flags: 0,
        name: 1,
        signature: 1,
        param_list: 1,
    })
}