unicorn_pe

unicorn_pe copied to clipboard

C0000005了,这个偏移我也没看出是哪个指针....

4

 跑这个驱动出现的问题 [mhyprot2.zip](https://github.com/hzqst/unicorn_pe/files/5266107/mhyprot2.zip)

RightFS

There is a question about MapImageToEngine which is similar to the previous

1

(My English is not well, please forgive me) I tried to running uncorn_pe as "uncorn_pe.exe test.exe -disasm" under the DEBUG mode，but when I step to `ctx->MapImageToEngine(modInfo.name, (PVOID)modInfo.baseAddress, modInfo.size, modInfo.baseAddress, ((LDR_DATA_TABLE_ENTRY_BASE_T*)(modInfo.ldrPtr))->EntryPoint);`...

OrpheusQ

Hi, the release version does not display any logs, it is not always profitable to work on the debug version, because there is no optimization in it. Best Regards

UnlimitedChild

Unexpected program termination during emulation

1

Hi, unicorn_pe cpudata.exe -disasm BlackBone: Allocate: Allocating at address 0x0000023ECC610000 (0x1000 bytes) BlackBone: Allocate: Allocating at address 0x0000023ECC620000 (0x1000 bytes) BlackBone: Allocate: Allocating at address 0x0000023ECC630000 (0x4000 bytes) BlackBone: ManualMap:...

UnlimitedChild

compile was fine but its say failed to MapImage how should i do?

3

this is the full information about run it, thanks F:\Git Strore\unicorn_pe\x64\Debug>unicorn_pe.exe TestErrorDriver.sys BlackBone: PDB: Failed to load msdia140.dll, error 0x0000007e BlackBone: PDB: blackbone::PDBHelper::Init: (CoCreateDiaDataSource()) failed with HRESULT 0x8007007e BlackBone: PatternData:...

kawainekome

OS: Windows 10, Version 1809 Created 64-bit console application to test, but it seems there is a failure somewhere within mapping the image. I have attached images of the debug...

Object9999

是不是这波update blackbone #10 把之前能mmap driver的代码给冲了

sup817ch

The program was created successfully but there is no exe in the directory

huamanlouyyy

Thank you for your great project, any plan to support x86?

niucool