cseagle / sk3wldbg

Debugger plugin for IDA Pro backed by the Unicorn Engine

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

trying to use the dbg under windows

dummys opened this issue · comments

Hi,

Got an error when trying to use the dbg plugin under windows.
I put the unicorn1.dll in IDA directory and put both .plw, .p64 in the plugins directory.
Grabbed libglib-2.0-0.dll, libintl-8.dll, libgcc_s_dw2-1.dll, from Qemu and put them in the IDA directory as well. When running Ida I get: LoadLibrary(C:\Program files\ida\plugins\sk3wldbg_user.plw) error: The specified module could not be found.

What is wrong in my installation ?
Latest ida of course.

I just updated the readme, there are a few transitive dependencies that were not listed. Please make sure you have all of: libglib-2.0-0.dll, libintl-8.dll, libgcc_s_dw2-1.dll, libwinpthread-1.dll, libiconv-2.dll.

Yes I put it on IDADIR, still same error. How can I debug it ?
I run a procmon and see that all lib is found and read...

Your version is working on windows ? Or you use it under linux ?

It works for me on Windows 7, Linux, and Mac

Are you getting any messages in IDA's output window related to sk3wldbg?

Yes i'm getting a "The Specified procedure could not be found." and after "can't load the file".
I checked in procmon and ida is not trying to open other lib than the one you gave to me. Can you share your dll ?

I'm running idaq.exe in a 64 windows 7 machine.
When I debug ida with ida, I get an unknown exception code C0000139 (exc.code c0000139, tid 4436) when loading libgcc_s_dw2-1.dll.

I'm sorry but when I look in a new installation of cygwin, all dll is now renammed to "cygglib-2.00.dll, cygiconv-2.dll cygintl-8.dll.

which version are you using ? I'm sure it's not the latest. You really should put the version in the readme.

Ok so at the end I made your stuff works. Please update the documentation to tell windows user to download and install TDM-GCC.
http://sourceforge.net/projects/tdm-gcc/files/TDM-GCC%20Installer/tdm64-gcc-5.1.0-2.exe/download

This is the only one where I found working DLL's.

When launching the debuggers on any binary I get a crash on unicorn1.dll.

Did you try to use it under windows 7 x64 but ida 32bit version idaq.exe ?
how can I debug this error ?

"Unhandled exception at 0x7dea4683 in idaq.exe: 0xC0000005; Access violation reading location 0x02045438"

It's a simple push 0x22 instruction

I run the debugger routinely on Win 7 x64 with idaq and no problems. Did you ever try installing the Msys libraries per the readme?

So what I've done so far:

I'm on a deconnected workstation, so I use the latest Cygwin setup_x86.exe to do a download only.
Iselected in the package list the same package you put on the readme: make gcc-core pkg-config libpcre-devel zlib-devel libglib2.0-devel
I tried with the setup_x86_x64.exe also.

But with Cygwin, there is no dll called libglib-2.0-0.dll, libintl-8.dll, libgcc_s_dw2-1.dll, libwinpthread-1.dll, libiconv-2.dll. So for me it's not good. Then I tried TDM-GCC where I finally found the lib, puting the lib in IDADIR folder with unicorn1.dll and launching IDA, I get the result I shown to you.

The best would be to show the exact url of your source and how you install it.
Because with cygwin is definitely not working.

no news ? I'm really looking forward to make it works...

Can you post how you get all lib under windows ?

Following exactly your stuff on a internet connected computer:

download latest cygwin64, installed, then install the apt-cyg script and:
putting c:\Cygwin64\bin in the PATH.
apt-cyg install make gcc-core pkg-config libpcre-devel zlib-devel libglib2.0-devel

Result: sk3wldbg: the specified module could not be found.

There is really a problem in your readme.

Finally got it working with Msys2. Do not use this fucking Cygwin, it's useless and it didn't work with the latest version.