cecio
cecio
Yes, it is exactly this. Thanks!
Ok, let me know if you need some rework or modification you think could be useful. Thanks!
Thanks for the reply! I did some more work. It looks like the issue is somewhere in `PEB_LDR_DATA` and specifically in `InLoadOrderModuleList` and `InMemoryOrderModuleList` `LIST_ENTRY` This is a well-known sequence...
May be I found something interesting. In `speakeasy/windows/objman.py` in class `Process` we have the method `add_module_to_peb`. ``` def add_module_to_peb(self, module): pld = self.peb_ldr_data list_type = self.nt_types.LIST_ENTRY(self.emu.get_ptr_size()) # Initialize the LDTE...
I tried to move the `ldr_entries` initialization from the `Process` scope to the `__init__` method of the `Process` object: it works fine, the two shellcodes are running fine, no matter...
Hi @Fuhua-Chen, do you have any news on this issue? Thanks
yeah, great catch! I'll fix it asap. Thanks for pointing this out!
Fixed with commit 1a001f3
I can not replicate the 2nd part of your issue: with the add of `git` package I see the entire build running fine 🤔
Good point. I added `build-essential` as well Thanks a lot for your help!