2017-03-25 08:56 CET

View Issue Details Jump to Notes ]
IDProjectCategoryView StatusLast Update
0000412Cheat Engine(No Category)public2015-10-11 09:18
Assigned To 
PrioritynormalSeverityminorReproducibilityhave not tried
Platformwin7OSx64OS Version
Summary0000412: dark byte vm detect bypass ok but kernel debug process dead bug or rdtsc time check detect
Old Bug process restart f5 debug start


code google cheat engine rev 2629,2631 error

process dead


Open Source Code

https://github.com/a0rtega/pafish [^]

https://github.com/a0rtega/pafish/archive/v0.5.4.zip [^]

pafish Code Check the difference between Cpu timestamp counters rdtsc

forcing VM Exit Code Detect
Additional Informationcpuid detect bypass success!

error& not bypass?

1.kernel debug process dead bug

2.vmexit rdtsc time check detect

TagsNo tags attached.
Attached Files




pausebreak7 (reporter)

crash code debugeventhandler.pas

line 790,791 Crash Code

if (not (CurrentDebuggerInterface is TNetworkDebuggerInterface)) and (debugreg in [0..4]) and (bpp.breakpointMethod=bpmDebugRegister) and (bpp.debugRegister<>debugreg) then
continue; //this is not the correct breakpoint. Skip it

//if (not (CurrentDebuggerInterface is TNetworkDebuggerInterface)) and (debugreg in //[0..4]) and (bpp.breakpointMethod=bpmDebugRegister) and //(bpp.debugRegister<>debugreg) then
//continue; //this is not the correct breakpoint. Skip it

Original code Process ReTarget Debugging Crash

Edit code Process ReTarget Debugging Not Crash

-Issue History
Date Modified Username Field Change
2015-10-11 08:47 pausebreak7 New Issue
2015-10-11 09:18 pausebreak7 Note Added: 0000880
2016-02-29 11:30 Carter Greatshow Issue cloned: 0000442
+Issue History