Results 75 comments of cecio

Yes, it is exactly this. Thanks!

Ok, let me know if you need some rework or modification you think could be useful. Thanks!

Thanks for the reply! I did some more work. It looks like the issue is somewhere in `PEB_LDR_DATA` and specifically in `InLoadOrderModuleList` and `InMemoryOrderModuleList` `LIST_ENTRY` This is a well-known sequence...

May be I found something interesting. In `speakeasy/windows/objman.py` in class `Process` we have the method `add_module_to_peb`. ``` def add_module_to_peb(self, module): pld = self.peb_ldr_data list_type = self.nt_types.LIST_ENTRY(self.emu.get_ptr_size()) # Initialize the LDTE...

I tried to move the `ldr_entries` initialization from the `Process` scope to the `__init__` method of the `Process` object: it works fine, the two shellcodes are running fine, no matter...

Hi @Fuhua-Chen, do you have any news on this issue? Thanks

yeah, great catch! I'll fix it asap. Thanks for pointing this out!

I can not replicate the 2nd part of your issue: with the add of `git` package I see the entire build running fine 🤔

Good point. I added `build-essential` as well Thanks a lot for your help!