Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

GetProcAddress issue #134

Open
aaron-dadum opened this issue Feb 22, 2021 · 0 comments
Open

GetProcAddress issue #134

aaron-dadum opened this issue Feb 22, 2021 · 0 comments

Comments

@aaron-dadum
Copy link

Hi!
I encountered problems with get proc address, looks like the emu doesn't want to write to a data section, is this a question of config?

| push crackme.412CE8                                     | 412CE8:"FlsAlloc"
| call esi                                                | esi:GetProcAddress
| xor eax,dword ptr ds:[418480]                           |
| mov dword ptr ds:[41AE20],eax                           | < this is where it fails with access deny err

Also, speaking of emulation being slow, in GetProcAddress handler, looks like some cycles are wasted there:

def GetProcAddress(self, emu, argv, ctx={}):

***

	mods = emu.get_user_modules()
	for mod in mods:
		if mod.get_base() == hmod:
			bn = mod.get_base_name()
			mname, _ = os.path.splitext(bn)
			rv = emu.get_proc(mname, proc)
			# maybe break the loop and stop interating once the rv of the foo is found?

	return rv

I mean this emulator is great for reversing a packer, but I run into constant problems when trying to run through it anything else.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant