Enigma Protector

Posted: **Thu Nov 10, 2016 6:07 am**

Hello, I use enigma to protect my soft (compiled with Delphi XE7). Soft works well but after some time (always different) I get errors. In delphi I use Madexcept tool, but it does not handle any exceptions. Soft just breaks and that is all. I think that there there is somewhere bug in enigma software. Is there possibility to trace it?

My error logs:

Code: Select all

Faulting application name: ANPR_VID_full.exe, version: 4.0.0.6, time stamp: 0x5822ba30
Faulting module name: ANPR_VID_full.exe, version: 4.0.0.6, time stamp: 0x5822ba30
Exception code: 0xc0000005
Fault offset: 0x02e8eaf3
Faulting process ID: 0x17e4
Faulting application start time: 0x01d23a67e32d2c8e
Faulting application path: C:\ANPR\ANPR_VID_full.exe
Faulting module path: C:\ANPR\ANPR_VID_full.exe
Report ID: 889d7db0-ddaa-45b8-9fbc-c0aa9522970d
Faulting package full name: 
Faulting package-relative application ID: 

Faulting application name: ANPR_VID_full.exe, version: 4.0.0.6, time stamp: 0x5822ba30
Faulting module name: ntdll.dll, version: 10.0.10586.122, time stamp: 0x56cc16f5
Exception code: 0xc0000409
Fault offset: 0x00033012
Faulting process ID: 0x14cc
Faulting application start time: 0x01d23a6737d78fef
Faulting application path: C:\ANPR\ANPR_VID_full.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report ID: c8fed046-efac-4172-8f92-db16a6b94d29
Faulting package full name: 
Faulting package-relative application ID: 

Faulting application name: ANPR_VID_full.exe, version: 4.0.0.6, time stamp: 0x5822fa0e
Faulting module name: ntdll.dll, version: 10.0.10586.122, time stamp: 0x56cc16f5
Exception code: 0xc0000005
Fault offset: 0x0003e230
Faulting process ID: 0x1d98
Faulting application start time: 0x01d23a7cb8f01b54
Faulting application path: C:\ANPR\ANPR_VID_full.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report ID: b9f3100b-3260-4082-9775-4907d1e30e7a
Faulting package full name: 
Faulting package-relative application ID: 

Faulting application name: ANPR_VID_full.exe, version: 4.0.0.6, time stamp: 0x5820ac14
Faulting module name: ntdll.dll, version: 10.0.10586.122, time stamp: 0x56cc16f5
Exception code: 0xc0000409
Fault offset: 0x00033012
Faulting process ID: 0x1fd0
Faulting application start time: 0x01d23b13366c8bbe
Faulting application path: C:\ANPR\ANPR_VID_full.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report ID: 26cf59de-b64e-4ad1-9dc8-cc3ad03c52cc
Faulting package full name: 
Faulting package-relative application ID: 

Faulting application name: ANPR_VID_full.exe, version: 4.0.0.6, time stamp: 0x5822fa0e
Faulting module name: KERNELBASE.dll, version: 10.0.10586.162, time stamp: 0x56cd55ab
Exception code: 0xc0000409
Fault offset: 0x000bdad8
Faulting process ID: 0x1f68
Faulting application start time: 0x01d23a756c4e06dd
Faulting application path: C:\ANPR\temp\ANPR_VID_full.exe
Faulting module path: C:\Windows\SYSTEM32\KERNELBASE.dll
Report ID: 2e32dd3e-ed86-4c26-9013-1ae90c0c26c7
Faulting package full name: 
Faulting package-relative application ID: 

Faulting application name: ANPR_VID_full.exe, version: 4.0.0.6, time stamp: 0x5822fa0e
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x00410ffa
Faulting process ID: 0x1c44
Faulting application start time: 0x01d23a7ef5657400
Faulting application path: C:\ANPR\ANPR_VID_full.exe
Faulting module path: unknown
Report ID: 4c9d6c83-3ba1-4b5c-a263-28057cfa8c92
Faulting package full name: 
Faulting package-relative application ID:

Posted: **Sun Nov 20, 2016 4:41 pm**

Hi, with the given information, unfortunately, it is impossible to trace if the problem is caused by protection.

But as far as I see, the exception happens in the module ntdll.dll and not in the protected module.

Please note, same problem can be caused by tons of other software that affects your process, like antivirus, viruses, other programs that injecting own code in the process.

Please reply on the following questions to provide a more detailed picture of the problem:
1. Is it a random error? Soft works but then the exception appears, after that, the exception is gone again, or it starts to appear always?
2. Problem happens when file starts, or when the file is working?
3. Does the problem happen on any computer, or some particular only?
4. Have ou tried unprotected soft on the problem pc if it works well?
5. Are you using any virtualization markers, or Virtual Machine feature through map file?

Enigma Protector

Track where is a bug

Track where is a bug

Re: Track where is a bug