Kernel32.dll relocation because of MCH

c++ / delphi package - dll injection and api hooking
Post Reply
EaSy
Posts: 150
Joined: Tue Oct 23, 2012 12:33 pm

Kernel32.dll relocation because of MCH

Post by EaSy »

Hello,
we have a problem with relocation of kernel32.dll in 64b processes. The problem is that MCH driver allocates its remote process buffer in place of original kernel32 address space. System tries to realocate kernel32 in another place, but dialog box appears about this and application crashes. Can you improve your remote memory allocation?

Here is screenshot about this. You can see error state (1), normal state (2), error msgbox (3) and memory content of coliding MCH memory (4).
screen.png
screen.png (152.56 KiB) Viewed 4005 times
Thx
PP
madshi
Site Admin
Posts: 10753
Joined: Sun Mar 21, 2004 5:25 pm

Re: Kernel32.dll relocation because of MCH

Post by madshi »

Does this happen to be Vista? Did you test this with the latest 3.1.6 version? I've already fixed a similar bug for Vista in 3.1.6.

http://madshi.net/madCollection.exe (madCodeHook 3.1.6, installer 2.7.8.0)
EaSy
Posts: 150
Joined: Tue Oct 23, 2012 12:33 pm

Re: Kernel32.dll relocation because of MCH

Post by EaSy »

Yes, it is vista. We will try it with the latest setup, thx.
EaSy
Posts: 150
Joined: Tue Oct 23, 2012 12:33 pm

Re: Kernel32.dll relocation because of MCH

Post by EaSy »

Seems to work. Thx.
Post Reply