Hello, can i suggest something about Memory Protection?:
Separate the options on the Memory Protection's listview:
CRC Checks.
Virtual Memory Checks (hooks NtProtectVirtualMemory).
All.
So we can choose the protection level about Memory Protection, i suggest this because if some module gets loaded on a VMProtected process, if it calls too much VirtualProtect, then the CPU usage increases.