hasherezade/tiny_tracer

check that INS_IsControlFlow is true

maskelihileci opened this issue · 1 comments

Excluded 0 functions
Watch 0 functions
Watch 0 syscalls
SyscallTable size: 1589
===============================================
This application is instrumented by TinyTracer v.2.7.1
Tracing module: G:\PR\Compiled_IntelPt\gtnszz.exe
See file G:\PR\Compiled_IntelPt\gtnszz.exe.tag for analysis results
===============================================
E: G:\FL\TRACER\tiny_tracer-2.7.1\TinyTracer.cpp:750: Cannot use IARG_BRANCH_TARGET_ADDR with instruction at 0xb1fd7f: jmp far 0xb59fc7, 0x33
E:  check that INS_IsControlFlow is true

Windows ver ; Windows 10 1607
İntel Pin : 3.26

Tracer.ini

ENABLE_SHORT_LOGGING=True
USE_DEBUG_SYMBOLS=False
FOLLOW_SHELLCODES=1
;FOLLOW_SHELLCODES:
; 0 : trace only the main target module
; 1 : follow only the first shellcode called from the main module
; 2 : follow also the shellcodes called recursively from the the original shellcode
; 3 : follow any shellcodes
TRACE_RDTSC=False
TRACE_INT=False
TRACE_SYSCALL=True
LOG_SECTIONS_TRANSITIONS=True
LOG_SHELLCODES_TRANSITIONS=True
HEXDUMP_SIZE=8
HOOK_SLEEP=False
SLEEP_TIME=10
; ANTIDEBUG: (Windows only)
; 0 : Disabled
; 1 : Standard
; 2 : Deep (may lead to some false positives)
ANTIDEBUG=1
ANTIVM=0

hi @maskelihileci
I fixed it: df38621
Check it out and let me know if everything is fine now.