After time a module fetched will become unavailable about pcileech

[ufrisk]

This seems to be related to a game. If this behavior is in any way related to some games anti-cheat I'm unfortunately not helping out.

---

With that being said, what you're describing sounds a bit like normal Windows behavior though.

After quite some time Windows may "page out" certain parts of virtual memory from physical memory to disk - making it unavailable to DMA. This sometimes happens to the 1st page in the module, the PE header.

You can check if this out if you, when the issue occurs, mount the MemProcFS file system. Check out your M:\name<your_process>\memmap\ directory and the file vad.txt to see if your module is still in it.

If it's still in it check out M:\name<your_process>\memmap\vad-v<your_module_name> and the 1st line should display the paging status of the module.

If the PE header is paged out to disk there is not much I can do. I guess you'd be able to save the memory range from earlier working instances (active memory pages will still be possible to read) or access the range location though the VAD map.

Best wishes with this :)

[ReeceXW]

Hi, thanks for replying, nothing to do with an anticheat here.

Your assumption is likely correct and I'll have a look into that, thanks!