Jump to content

Deep Behavioural Inspection breaking MapViewOfFile3() & VirtualAlloc2()


Fobes
 Share

Go to solution Solved by Marcos,

Recommended Posts

Hi there, I contribute to the open source project PCSX2.

Recently, our memory allocation was updated, and we experienced issues with some users.

When looking through our dump of modules loaded, I took note of `C:\Program Files\ESET\ESET Security\ebehmoni.dll`

Sure enough, downloading and installing ESET NODE32 allowed me to reproduce the issue, but not under a debugger.
Disabling the Deep Behavioural Inspection allowed the program to run without error.


There is a topic here with a minimum reproducible example that inhibits what I think is the same exact issue.
https://learn.microsoft.com/en-us/answers/questions/869439/virtualalloc2-and-mapviewoffile3-strange-behaviour.html
(Example: https://docs.microsoft.com/en-us/windows/win32/api/memoryapi/nf-memoryapi-virtualalloc2)

My belief is that some part of the monitoring going on is breaking these calls.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...