v4.0.0.16 and the hooking example

[mezzo]

first off, I have to say that the 4.0.0.16 version crashes on startup one out of three times. Each time I start it, it seems to be generating new DLL files
It doesn't clean up the old ones when it crashes (windows offers to send mickeysoft the debug output, no thanks), so I can see it's building 2 DLL's..
one of about 333Kb and one of 968Kb. It also makes an *.lzs file of about 1.461Mb

Anyway, so once every 3 or 4 times, MHS does seems to manage to make DLL's that work and the app starts. I loaded the hook checking example and it crashes again.. after a few tries, I get the following output:

==== Showing ReadProcessMemory ====
==== Showing WriteProcessMemory ====
==== Showing VirtualProtectEx ====
==== Showing NtOpenProcess ====
Internal error on address 805C9CFE!
==== Showing KeStackAttachProcess ====
Internal error on address 804F8ADA!
==== Showing KeAttachProcess ====
Internal error on address 804F89DA!
==== Showing NtProtectVirtualMemory ====
Internal error on address 00000000!

I'm under the impression this is the same problem as we had a few versions ago,
the issue with different DLL versions
(I'm on XP32bit SP@, but apparantly have a different set of DLL versions then you have).
L.Spiro, you have any ideas what could be causing this ?

[L. Spiro]

I do not know why it is crashing on start-up but you can not examine kernel-mode hooks because the kernel-mode driver is not loading for you.


This can really only be fixed in the next version where I will finally have an options page to allow modifying how the anti-anti-cheat behaves and to even turn it off.


L. Spiro