Skip to content

Unrecoverable Errors Happen Intermittently On Some Wrapped Functions #2

@rkbennett

Description

@rkbennett

First off, great project and I've really enjoyed messing with it.

I've been trying to use it to call several native functions with the wrp functions, and most of them work well. However, when I use wrpNtAllocateVirtualMemory, I'll occasionally see the logs go into a loop for an extended period of time and then a generic error pop-up will come up. Is this something you've run into before? It seems to only happen intermittently on that one specific function call.

Here's an example of the log output when it happens:

[*] Calling function ntdll.dll!NtAllocateVirtualMemory

[] Hardware Breakpoint added at address: 0x7ff82cd04370 (syscall)
[
] Hardware Breakpoint added at address: 0x7ff82cd04384 (ret)
[] Hardware Breakpoint hit at 0x7ff82cd04370 (syscall)
[
] Storing Context
[] Hardware Breakpoint hit at 0x7ff82cd04370 (syscall)
[
] Storing Context
[] Hardware Breakpoint hit at 0x7ff82cd04370 (syscall)
[
] Storing Context
[] Hardware Breakpoint hit at 0x7ff82cd04370 (syscall)
[
] Storing Context
[] Hardware Breakpoint hit at 0x7ff82cd04370 (syscall)
[
] Storing Context
[] Hardware Breakpoint hit at 0x7ff82cd04370 (syscall)
[
] Storing Context
[] Hardware Breakpoint hit at 0x7ff82cd04370 (syscall)
[
] Storing Context
[] Hardware Breakpoint hit at 0x7ff82cd04370 (syscall)
[
] Storing Context
[] Hardware Breakpoint hit at 0x7ff82cd04370 (syscall)
[
] Storing Context
[] Hardware Breakpoint hit at 0x7ff82cd04370 (syscall)
[
] Storing Context
[] Hardware Breakpoint hit at 0x7ff82cd04370 (syscall)
[
] Storing Context
[] Hardware Breakpoint hit at 0x7ff82cd04370 (syscall)
[
] Storing Context
[] Hardware Breakpoint hit at 0x7ff82cd04370 (syscall)
[
] Storing Context
[] Hardware Breakpoint hit at 0x7ff82cd04370 (syscall)
[
] Storing Context
[] Hardware Breakpoint hit at 0x7ff82cd04370 (syscall)
[
] Storing Context
[] Hardware Breakpoint hit at 0x7ff82cd04370 (syscall)
[
] Storing Context
[] Hardware Breakpoint hit at 0x7ff82cd04370 (syscall)
[
] Storing Context
[] Hardware Breakpoint hit at 0x7ff82cd04370 (syscall)
[
] Storing Context
[] Inside ntdll after setting TF at 0x7ff82cd07d40 (0xa7d40)
[
] Generating stack & changing RIP & invoking intended syscall (ssn: 0x18)
[] Hardware Breakpoint hit at 0x7ff82cd04384 (ret)
[
] Restoring stack pointer

And a screenshot of the generic pop-up:

Image

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions