Interestingly I'm als getting a crash while reloading the DLL in a very similar fashion, unfortunately it's crashing deep, deep into ntdll.dll
10/14 18:52:10.493 I/Unload DLL
25b8:1c60 @ 74231718 - LdrpProcessDetachNode - INFO: Uninitializing DLL "Y:\workspace\private\RealEngine\_out\bin\hotreload_13120937502133\rengine_hotreload.dll" (Init routine: 00007FF9749F131B)
25b8:1c60 @ 74231718 - LdrpUnloadNode - INFO: Unmapping DLL "Y:\workspace\private\RealEngine\_out\bin\hotreload_13120937502133\rengine_hotreload.dll"
25b8:1c60 @ 74231718 - LdrpProcessDetachNode - INFO: Uninitializing DLL "C:\WINDOWS\System32\WS2_32.dll" (Init routine: 00007FF98E378F60)
25b8:1c60 @ 74231718 - LdrpUnloadNode - INFO: Unmapping DLL "C:\WINDOWS\System32\WS2_32.dll"
25b8:1c60 @ 74231718 - LdrLoadDll - ENTER: DLL name: Y:\workspace\private\RealEngine\_out\bin\hotreload_13120937530493\rengine_hotreload.dll
25b8:1c60 @ 74231718 - LdrpLoadDllInternal - ENTER: DLL name: Y:\workspace\private\RealEngine\_out\bin\hotreload_13120937530493\rengine_hotreload.dll
25b8:1c60 @ 74231718 - LdrpResolveDllName - ENTER: DLL name: Y:\workspace\private\RealEngine\_out\bin\hotreload_13120937530493\rengine_hotreload.dll
25b8:1c60 @ 74231718 - LdrpResolveDllName - RETURN: Status: 0x00000000
25b8:1c60 @ 74231718 - LdrpMapViewOfSection - ENTER: DLL name: Y:\workspace\private\RealEngine\_out\bin\hotreload_13120937530493\rengine_hotreload.dll
ModLoad: 00007ff9`749f0000 00007ff9`74a4f000 Y:\workspace\private\RealEngine\_out\bin\hotreload_13120937530493\rengine_hotreload.dll
25b8:1c60 @ 74231718 - LdrpMapViewOfSection - RETURN: Status: 0x00000000
25b8:1c60 @ 74231718 - LdrpFindDllActivationContext - INFO: Probing for the manifest of DLL "Y:\workspace\private\RealEngine\_out\bin\hotreload_13120937530493\rengine_hotreload.dll" failed with status 0xc0000089
25b8:1c60 @ 74231718 - LdrpFindKnownDll - ENTER: DLL name: WS2_32.dll
25b8:1c60 @ 74231718 - LdrpFindKnownDll - RETURN: Status: 0x00000000
25b8:1c60 @ 74231718 - LdrpMapViewOfSection - ENTER: DLL name: C:\WINDOWS\System32\WS2_32.dll
ModLoad: 00007ff9`8e360000 00007ff9`8e3ca000 C:\WINDOWS\System32\WS2_32.dll
(25b8.1c60): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Bitdefender\Bitdefender 2015\Active Virus Control\Avc3_00369_005\avcuf64.dll -
ntdll!memcpy+0x49:
00007ff9`8ebeb409 8841ff mov byte ptr [rcx-1],al ds:0000027a`62583a02=48
0:000> k
Child-SP RetAddr Call Site
000000fc`9d4fd868 00000000`7007dc06 ntdll!memcpy+0x49
000000fc`9d4fd870 00000000`7007e4e5 avcuf64!AvcGetJumpCode+0xc006
000000fc`9d4fdb40 00000000`700dfc63 avcuf64!AvcGetJumpCode+0xc8e5
000000fc`9d4fdc80 00000000`7007cfd3 avcuf64!AvcGetJumpCode+0x6e063
000000fc`9d4fdd70 0000027a`62590164 avcuf64!AvcGetJumpCode+0xb3d3
000000fc`9d4fde80 00007ff9`8eb4ddc5 0x0000027a`62590164
000000fc`9d4fdfa0 00007ff9`8eb4da52 ntdll!LdrpMapViewOfSection+0xb5
000000fc`9d4fe040 00007ff9`8eb4d925 ntdll!LdrpMapImage+0x72
000000fc`9d4fe0e0 00007ff9`8eb4d47e ntdll!LdrpMapDllWithSectionHandle+0x2d
000000fc`9d4fe120 00007ff9`8eb68266 ntdll!LdrpLoadKnownDll+0xe6
000000fc`9d4fe180 00007ff9`8eb67a4b ntdll!LdrpLoadDependentModule+0x756
000000fc`9d4fe710 00007ff9`8eb4d991 ntdll!LdrpMapAndSnapDependency+0x187
000000fc`9d4fe790 00007ff9`8eb4c84c ntdll!LdrpMapDllWithSectionHandle+0x99
000000fc`9d4fe7d0 00007ff9`8eb4a7cb ntdll!LdrpMapDllNtFileName+0x130
000000fc`9d4fe8a0 00007ff9`8eb4a559 ntdll!LdrpMapDllFullPath+0xcb
000000fc`9d4fea20 00007ff9`8eb66a7e ntdll!LdrpProcessWork+0x5d
000000fc`9d4fea80 00007ff9`8eb6651d ntdll!LdrpLoadDllInternal+0x132
000000fc`9d4feb00 00007ff9`8eb49efc ntdll!LdrpLoadDll+0xf1
000000fc`9d4feca0 00007ff9`8b0ccd7f ntdll!LdrLoadDll+0x8c
000000fc`9d4feda0 00000000`7007ce90 KERNELBASE!LoadLibraryExW+0x16f
000000fc`9d4fee10 0000027a`62590164 avcuf64!AvcGetJumpCode+0xb290
*** WARNING: Unable to verify checksum for game.exe
000000fc`9d4fef20 00007ff7`ac13114a 0x0000027a`62590164
000000fc`9d4ff040 00007ff7`ac132ee8 game!dll_open+0x4a
000000fc`9d4ff290 00007ff7`ac132f3a game!dll_load+0x168
000000fc`9d4ff520 00007ff7`ac13321f game!engine_reload+0x3a
000000fc`9d4ff560 00007ff7`ac133420 game!mainloop+0x26f
000000fc`9d4ff5f0 00007ff7`ac133658 game!entry+0x1a0
000000fc`9d4ff9d0 00007ff9`8e478364 game!WinMain+0x108
000000fc`9d4ffa40 00007ff9`8eba5e91 KERNEL32!BaseThreadInitThunk+0x14
000000fc`9d4ffa70 00000000`00000000 ntdll!RtlUserThreadStart+0x21
Which is most interesting, is that I wasn't even initializing remotery. I was just, erroneously, calling rmt_LogText.