eurecom-s3/loaders_modeling

loaders_modeling's Issues

[Error] Windows 10 MiCreateImageFileMap.lmod V11 not me

Hi, I test the win10 MiCreateImageFileMap.lmod by using a 64bits exe, which can run on win10.19041 correctly.
As well as the script outputs "Verification failed", which is not occured when I use 32-bits binary.

❯ python3 verify.py models/windows/10/MiCreateImageFileMap.lmod ../createprocess.exe 
2021-12-22 22:57:48 ubuntu modelLang.backends.python_backend[6579] CRITICAL Terminal condition V11 not met. Verification failed

I checked the Terminal condition V11, which is "optHdr.Magic == 0x10b", that means the binary must be 32-bits.

Is it an mistake? Or it just support 32-bits PE file by now.
Thanks!

This is my test file, it just create a process named hello.exe.
createprocess.zip

reduce() arg 2 must support iteration

hi there!

I've read the amazing paper LOST IN THE LOADER: THE MANY FACES OF THE WINDOWS PE FILE FORMAT, so get to here.

however I try to reproduce this project in python3 by python3 ./generate.py, and it shows the errors below:

is there possible any testcase for learning?

thanks!

Error when running generate.py on Ubuntu 22.04 and 20.04

Hi, I tried your tool which I like a lot but I have an issue when running the generate.py file.

I ran the installation process just as you explained it on Ubuntu 22.04 and 20.04. Everything went well, the file verify.py seems to work perfectly. However when I ran the generate.py file as you did in the example I got this error :

Traceback (most recent call last):
  File "/home/xxxxx/Documents/loaders_modeling/./generate.py", line 68, in <module>
    backend = Z3Backend(name=modelname, voi=voi)
  File "/home/xxxxx/Documents/loaders_modeling/modelLang/backends/z3_backend.py", line 21, in __init__
    self.z3_funcs = { 'ADD'       : Sum,
NameError: name 'Sum' is not defined. Did you mean: 'sum'?

I did some research about where it could come from but didn't find anything..

Do you have any idea about what is the problem ?

P.S. : I installed z3 as explained using apt