Unexplained crashes.

VMProtect
1

Hello, I am attempting to manual map a dll into a process. If the dll is packed with vmp lite and kernel+usermode debugging is on it crashes. Without debugging on, it doesnt.

It gave a 0x0000004 error (similar to that). It works on my pc but not others, very odd.

2

Do you mean the message “Initialization error 4”?

3

Here are the errors on other peoples computers, on mine it works all the time.
Has something to do the kernel option of VMProtectIsDebuggerPresent, or even the debugger + kernel option in the VMProtect application.

Error 1:

Unhandled exception at 0x1000B75B: 0x80000004: Single step.

Error 2:

Exception thrown at 0x771ADA51 (ntdll.dll): 0xC0000005: Access violation reading location 0x00000008

4

It seems your maual loaded DLL doesn’t support exceptions. Try to use LoadLibrary instead of your method.

5

Do you really think that your DLL is invisible in the memory if you loaded it manually? :slight_smile:)

6

Please notice that the main problem - it is your manual loading method. It doesn’t support exceptions even if a DLL will use something like this:

try {
  throw ...;
} catch (...)
{
  ...
}