2017-12-17 11:09 CET

View Issue Details Jump to Notes ]
IDProjectCategoryView StatusLast Update
0000412Cheat Engine(No Category)public2015-10-11 09:18
Reporterpausebreak7 
Assigned To 
PrioritynormalSeverityminorReproducibilityhave not tried
StatusnewResolutionopen 
Platformwin7OSx64OS Version
Summary0000412: dark byte vm detect bypass ok but kernel debug process dead bug or rdtsc time check detect
Description1.
Old Bug process restart f5 debug start

http://cheatengine.org/mantis/view.php?id=340

code google cheat engine rev 2629,2631 error

process dead

2.

Open Source Code

https://github.com/a0rtega/pafish [^]

https://github.com/a0rtega/pafish/archive/v0.5.4.zip [^]

pafish Code Check the difference between Cpu timestamp counters rdtsc

forcing VM Exit Code Detect
Additional Informationcpuid detect bypass success!

error& not bypass?

1.kernel debug process dead bug

2.vmexit rdtsc time check detect

TagsNo tags attached.
Attached Files

-Relationships
+Relationships

-Notes

~0000880

pausebreak7 (reporter)

crash code debugeventhandler.pas

line 790,791 Crash Code

original
if (not (CurrentDebuggerInterface is TNetworkDebuggerInterface)) and (debugreg in [0..4]) and (bpp.breakpointMethod=bpmDebugRegister) and (bpp.debugRegister<>debugreg) then
continue; //this is not the correct breakpoint. Skip it

edit
//if (not (CurrentDebuggerInterface is TNetworkDebuggerInterface)) and (debugreg in //[0..4]) and (bpp.breakpointMethod=bpmDebugRegister) and //(bpp.debugRegister<>debugreg) then
//continue; //this is not the correct breakpoint. Skip it

Original code Process ReTarget Debugging Crash

Edit code Process ReTarget Debugging Not Crash
+Notes

-Issue History
Date Modified Username Field Change
2015-10-11 08:47 pausebreak7 New Issue
2015-10-11 09:18 pausebreak7 Note Added: 0000880
2016-02-29 11:30 Carter Greatshow Issue cloned: 0000442
+Issue History