Unexplained crashes.

Issues related to VMProtect
Locked
bigguy
Posts: 10
Joined: Thu Feb 09, 2017 3:21 pm
Location: Pyongyang, North Korea

Unexplained crashes.

Post by bigguy »

Hello, I am attempting to manual map a dll into a process. If the dll is packed with vmp lite and kernel+usermode debugging is on it crashes. Without debugging on, it doesnt.

It gave a 0x0000004 error (similar to that). It works on my pc but not others, very odd.
Admin
Site Admin
Posts: 2566
Joined: Mon Aug 21, 2006 8:19 pm
Location: Russia, E-burg
Contact:

Re: Unexplained crashes.

Post by Admin »

Do you mean the message "Initialization error 4"?
bigguy
Posts: 10
Joined: Thu Feb 09, 2017 3:21 pm
Location: Pyongyang, North Korea

Re: Unexplained crashes.

Post by bigguy »

Here are the errors on other peoples computers, on mine it works all the time.
Has something to do the kernel option of VMProtectIsDebuggerPresent, or even the debugger + kernel option in the VMProtect application.

Error 1:
Unhandled exception at 0x1000B75B: 0x80000004: Single step.
Error 2:
Exception thrown at 0x771ADA51 (ntdll.dll): 0xC0000005: Access violation reading location 0x00000008
Admin
Site Admin
Posts: 2566
Joined: Mon Aug 21, 2006 8:19 pm
Location: Russia, E-burg
Contact:

Re: Unexplained crashes.

Post by Admin »

It seems your maual loaded DLL doesn't support exceptions. Try to use LoadLibrary instead of your method.
Admin
Site Admin
Posts: 2566
Joined: Mon Aug 21, 2006 8:19 pm
Location: Russia, E-burg
Contact:

Re: Unexplained crashes.

Post by Admin »

Do you really think that your DLL is invisible in the memory if you loaded it manually? :))
Admin
Site Admin
Posts: 2566
Joined: Mon Aug 21, 2006 8:19 pm
Location: Russia, E-burg
Contact:

Re: Unexplained crashes.

Post by Admin »

Please notice that the main problem - it is your manual loading method. It doesn't support exceptions even if a DLL will use something like this:

Code: Select all

try {
  throw ...;
} catch (...)
{
  ...
}
Locked