search

mxmssh / drltrace

Drltrace is a library calls tracer for Windows and Linux applications.
BSD 3-Clause "New" or "Revised" License
387 stars 65 forks source link

drltrace will not work on GUI Apps #34

Open tohitsugu opened 9 months ago

tohitsugu commented 9 months ago

Running Windows 11 Pro

Downloaded the latest 64-bit version of the program. Trying to use the example from the documentation to run calc.exe fails:

.\drltrace.exe -logdir . -- calc.exe

<Application C:\Windows\system32\calc.exe (50824).  Dr. LTrace internal crash at PC 0x00000000710cb79b.  Please report this at ???.  Program aborted.
0xc0000005 0x00000000 0x00000000710cb79b 0x00000000710cb79b 0x0000000000000001 0x000000007118dcbc
Base: 0x0000000071000000
Registers: eax=0x0000000000000001 ebx=0x000002540e418040 ecx=0xffffffffffffffff edx=0x0000000000000001
        esi=0x00000094038ff258 edi=0x0000000000000000 esp=0x00000094038ff118 ebp=0x0000000000000000
        r8 =0xffffffffffffffe0 r9 =0x000002540e323520 r10=0x0000000000000000 r11=0x0000000000000246
        r12=0x0000000000000001 r13=0x0000000000000000 r14=0x00000094038ff800 r15=0x0000000000000000
        eflags=0x0000000000010286
version 7.91.18333, custom build
-no_dynamic_options -client_lib 'C:\Users\ianfr\Desktop\drltrace_win64\bin64\drltracelib.dll;0;-logdir . -logdir `C:\Users\ianfr\Desktop\drltrace_win64\bin64` -config `C:\Users\ianfr\Desktop\drltrace_win64\bin64\drltrace.config` ' -code_api -probe_api -stack_size 56K -max_elide_jmp 0 -max_elide_call 0 -no_inline_ignored_>`

image

Trying to run it on other GUI apps either also crashes, or else fails to start the program with no output: 

.\drltrace.exe -logdir . -print_ret_addr -- 'C:\Users\ianfr\OneDrive\Transfer\assembly-re-projs\session1\gui-crackme-1\GUICrackMe1.exe'
INFO: C:\Users\ianfr\OneDrive\Transfer\assembly-re-projs\session1\gui-crackme-1\GUICrackMe1.exe sucessfully started, waiting app for exit
 11/28/2023 08:10:01
mxmssh commented 9 months ago

Hi @tohitsugu. Sorry, I do not have time anymore to maintain this project. The issue is likely related to DynamoRIO's underlying library version. It is very likely need to be updated to support the latest Windows.