search

hzqst / unicorn_pe

Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.
MIT License
787 stars 199 forks source link

fix 2017 build #36

Closed brandonros closed 2 years ago

brandonros commented 2 years ago

fixes https://github.com/hzqst/unicorn_pe/issues/35

brandonros commented 2 years ago 
"C:\Program Files (x86)\Microsoft Visual Studio\2017\BuildTools\Common7\Tools\VsDevCmd.bat"
MSBuild unicorn_pe.sln /p:Platform=x64
brandonros commented 2 years ago 
.\x64\Debug\unicorn_pe.exe                                                    
BlackBone: PDB: Failed to load msdia140.dll, error 0x0000007e
BlackBone: PDB: blackbone::PDBHelper::Init: (CoCreateDiaDataSource()) failed with HRESULT 0x8007007e
BlackBone: PatternData: LdrProtectMrdata not found
usage: unicorn_pe (filename) [-k] [-disasm]
.\x64\Debug\unicorn_pe.exe C:\Users\Brandon\Desktop\redacted.exe
BlackBone: PDB: Failed to load msdia140.dll, error 0x0000007e
BlackBone: PDB: blackbone::PDBHelper::Init: (CoCreateDiaDataSource()) failed with HRESULT 0x8007007e
BlackBone: PatternData: LdrProtectMrdata not found                                                  
BlackBone: Allocate: Allocating at address 0x00000174E00B0000 (0x1000 bytes)
BlackBone: Allocate: Allocating at address 0x00000174E00C0000 (0x1000 bytes)                       
BlackBone: Allocate: Allocating at address 0x00000174E00D0000 (0x4000 bytes)                       
BlackBone: ManualMap: Mapping image 'C:\Users\Brandon\Desktop\redacted.exe' with flags 0x5d001
BlackBone: ManualMap: Loading new image 'C:\Users\Brandon\Desktop\redacted.exe'               
BlackBone: ManualMap: Image base allocated at 0x00000174e00e0000                                   
BlackBone: ManualMap: Performing image copy                                                        
BlackBone: ManualMap: Relocating image 'c:\users\brandon\desktop\redacted.exe'
BlackBone: ManualMap: Can't relocate image, no relocation flag                     
BlackBone: Free: Free at address 0x00000174E00E0000                                
failed to MapImage                                          
BlackBone: Free: Free at address 0x00000174E00B0000         
BlackBone: Free: Free at address 0x00000174E00D0000         
BlackBone: Free: Free at address 0x00000174E00C0000
brandonros commented 2 years ago

@hzqst any recommendation on 

BlackBone: PDB: Failed to load msdia140.dll, error 0x0000007e
BlackBone: PDB: blackbone::PDBHelper::Init: (CoCreateDiaDataSource()) failed with HRESULT 0x8007007e
BlackBone: PatternData: LdrProtectMrdata not found                                                  
BlackBone: Allocate: Allocating at address 0x00000174E00B0000 (0x1000 bytes)
BlackBone: Allocate: Allocating at address 0x00000174E00C0000 (0x1000 bytes)                       
BlackBone: Allocate: Allocating at address 0x00000174E00D0000 (0x4000 bytes)                       
BlackBone: ManualMap: Mapping image 'C:\Users\Brandon\Desktop\redacted.exe' with flags 0x5d001
BlackBone: ManualMap: Loading new image 'C:\Users\Brandon\Desktop\redacted.exe'               
BlackBone: ManualMap: Image base allocated at 0x00000174e00e0000                                   
BlackBone: ManualMap: Performing image copy                                                        
BlackBone: ManualMap: Relocating image 'c:\users\brandon\desktop\redacted.exe'
BlackBone: ManualMap: Can't relocate image, no relocation flag                     
BlackBone: Free: Free at address 0x00000174E00E0000                                
failed to MapImage                                          
BlackBone: Free: Free at address 0x00000174E00B0000         
BlackBone: Free: Free at address 0x00000174E00D0000         
BlackBone: Free: Free at address 0x00000174E00C0000

Edit: see https://github.com/hzqst/unicorn_pe/issues/35#issuecomment-1129533853