Description
CreateProcess sets the initial EIP to kernel32!BaseProcessStartThunk.
If the process in question does not import from kernel32, there is no kernel32.dll loaded at that location, so the app crashes on start.
We need to ensure that kernel32 is loaded for all Win32 processes.
Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
001b:77de546b ?? ???
kd> g
(../../subsystems/win32/csrss/csrsrv/api/wapi.c:1235) Exception in 23c.240. Killing...
Test case attached.