drltrace icon indicating copy to clipboard operation
drltrace copied to clipboard

drltrace will not work on GUI Apps

Open tohitsugu opened this issue 1 year ago • 1 comments

Running Windows 11 Pro

Downloaded the latest 64-bit version of the program. Trying to use the example from the documentation to run calc.exe fails:

.\drltrace.exe -logdir . -- calc.exe

<Application C:\Windows\system32\calc.exe (50824).  Dr. LTrace internal crash at PC 0x00000000710cb79b.  Please report this at ???.  Program aborted.
0xc0000005 0x00000000 0x00000000710cb79b 0x00000000710cb79b 0x0000000000000001 0x000000007118dcbc
Base: 0x0000000071000000
Registers: eax=0x0000000000000001 ebx=0x000002540e418040 ecx=0xffffffffffffffff edx=0x0000000000000001
        esi=0x00000094038ff258 edi=0x0000000000000000 esp=0x00000094038ff118 ebp=0x0000000000000000
        r8 =0xffffffffffffffe0 r9 =0x000002540e323520 r10=0x0000000000000000 r11=0x0000000000000246
        r12=0x0000000000000001 r13=0x0000000000000000 r14=0x00000094038ff800 r15=0x0000000000000000
        eflags=0x0000000000010286
version 7.91.18333, custom build
-no_dynamic_options -client_lib 'C:\Users\ianfr\Desktop\drltrace_win64\bin64\drltracelib.dll;0;-logdir . -logdir `C:\Users\ianfr\Desktop\drltrace_win64\bin64` -config `C:\Users\ianfr\Desktop\drltrace_win64\bin64\drltrace.config` ' -code_api -probe_api -stack_size 56K -max_elide_jmp 0 -max_elide_call 0 -no_inline_ignored_>`

image

Trying to run it on other GUI apps either also crashes, or else fails to start the program with no output:

.\drltrace.exe -logdir . -print_ret_addr -- 'C:\Users\ianfr\OneDrive\Transfer\assembly-re-projs\session1\gui-crackme-1\GUICrackMe1.exe'
INFO: C:\Users\ianfr\OneDrive\Transfer\assembly-re-projs\session1\gui-crackme-1\GUICrackMe1.exe sucessfully started, waiting app for exit
 11/28/2023 08:10:01

tohitsugu avatar Nov 28 '23 16:11 tohitsugu

Hi @tohitsugu. Sorry, I do not have time anymore to maintain this project. The issue is likely related to DynamoRIO's underlying library version. It is very likely need to be updated to support the latest Windows.

mxmssh avatar Dec 02 '23 03:12 mxmssh