-
Notifications
You must be signed in to change notification settings - Fork 199
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Unexpected program termination during emulation #22
Comments
Second case .. unicorn_pe controls.exe -disasm end of processing, the program is not loaded :( |
Hi,
unicorn_pe cpudata.exe -disasm
BlackBone: Allocate: Allocating at address 0x0000023ECC610000 (0x1000 bytes)
BlackBone: Allocate: Allocating at address 0x0000023ECC620000 (0x1000 bytes)
BlackBone: Allocate: Allocating at address 0x0000023ECC630000 (0x4000 bytes)
BlackBone: ManualMap: Mapping image 'cpudata.exe' with flags 0x1d001
BlackBone: ManualMap: Loading new image 'cpudata.exe'
BlackBone: ManualMap: Image base allocated at 0x0000023ecc640000
BlackBone: ManualMap: Performing image copy
BlackBone: ManualMap: Relocating image 'cpudata.exe'
BlackBone: ManualMap: Calling entry point for 'cpudata.exe', Reason: 1
BlackBone: ManualMap: DllMain of 'cpudata.exe' returned 0
BlackBone: Free: Decommit at address 0x0000023ECC64B000 (0x1000 bytes)
23ecc641000 enter 0x80, 0
23ecc641004 sub rsp, 0x60
23ecc641008 xor rcx, rcx
23ecc64100b call qword ptr [rip + 0x3057]
UC_MEM_FETCH_UNMAPPED from 7ff8535ce090
UC_MEM_FETCH_UNMAPPED rip at 7ff8535ce090
BlackBone: ManualMap: Unmapping image 'cpudata.exe'
BlackBone: ManualMap: Calling entry point for 'cpudata.exe', Reason: 0
here the program exits, but it was not closed manually, it works normally for a while, and then closes spontaneously.
cpudata.zip
It was a debug version, on the release version the behavior is similar
unicorn_pe cpudata.exe
UC_MEM_FETCH_UNMAPPED from 140704527212688
UC_MEM_FETCH_UNMAPPED rip at 140704527212688
uc_emu_start return: 8
entrypoint return: 0
last rip: 167095a100b (cpudata.exe+100b)
Doesn't work with additional options at all - unicorn_pe controls.exe -disasm.
Doesn't start - unicorn_pe cpuid.exe
The text was updated successfully, but these errors were encountered: