
# <-- This is a comment

#Range to be processed
#test_range=0x7f6f0000,0x7f6f7000
#modules=msvcrt.dll,kernel32.dll

#Assignment examples (use it if you need to pass a context)
#eflags=0x202
#eax=0x3
#ebx=0x12345678

#Any registers equal to any register
reg32==reg32

#Stack pivotings
#esp==reg32

#Stack pivoting to the 3rd. function argument
#esp==[ebp+0x0c]

#Pop value to EAX register
#eax==[esp+0x00]

#Pop value to any register
#reg32==[esp+0x00]

#PUSHAD/RETs
#[esp+0x00]==esi and [esp+0x04]==ebp and eip==edi

#Write a register to mem
#[eax+0x10]==reg32
