| View previous topic :: View next topic |
| Author |
Message |
661089799107
Expert Cheater
![]() Reputation: 3
Joined: 25 Jan 2009
Posts: 186
|
 Posted: Sun Aug 25, 2013 10:43 am Post subject: Kernel debugger crashes target |
 |
|
CE Version: 6.3
Operating System: Windows 8 x64 (AMD)
Problem: When using the kernel mode debugger the target process will crash when a breakpoint is triggered.
DbgPrint:
| Code: |
Created a hash algoritm
Valid signature
IOCTL_CE_GETVERSION. Version=2000014
IOCTL_CE_INITIALIZE
Calling ObOpenObjectByPointer
ntStatus=0
Calling ObOpenObjectByPointer
ntStatus=0
debugger_setGlobalDebugState(0)
debugger_setGlobalDebugState(0)
debugger_setGlobalDebugState(0)
debugger_setGlobalDebugState(0)
debugger_setGlobalDebugState(0)
debugger_setGlobalDebugState(0)
IOCTL_CE_HOOKINTS
Calling dpc routine for cpunr 0
Hooking int1 for cpu 1
inthook_HookInterrupt for cpu 1 (vmxusable=0)
interrupt 1 newCS=10 newEIP=fffff8801007b1c0 jumpbacklocation=FFFFF88010084590
InterruptHook[1].hooked=0
vmxusable=0
64-bit: DBVM is not loaded and a non dbvm hookable interrupt is being hooked that falls below 32
Calling dpc routine for cpunr 1
Hooking int1 for cpu 2
inthook_HookInterrupt for cpu 2 (vmxusable=0)
interrupt 1 newCS=10 newEIP=fffff8801007b1c0 jumpbacklocation=FFFFF88010084590
InterruptHook[1].hooked=0
vmxusable=0
64-bit: DBVM is not loaded and a non dbvm hookable interrupt is being hooked that falls below 32
Calling dpc routine for cpunr 2
Hooking int1 for cpu 5
inthook_HookInterrupt for cpu 5 (vmxusable=0)
interrupt 1 newCS=10 newEIP=fffff8801007b1c0 jumpbacklocation=FFFFF88010084590
InterruptHook[1].hooked=0
vmxusable=0
64-bit: DBVM is not loaded and a non dbvm hookable interrupt is being hooked that falls below 32
Calling dpc routine for cpunr 3
Hooking int1 for cpu 6
inthook_HookInterrupt for cpu 6 (vmxusable=0)
interrupt 1 newCS=10 newEIP=fffff8801007b1c0 jumpbacklocation=FFFFF88010084590
InterruptHook[1].hooked=0
vmxusable=0
64-bit: DBVM is not loaded and a non dbvm hookable interrupt is being hooked that falls below 32
Calling dpc routine for cpunr 4
Hooking int1 for cpu 3
inthook_HookInterrupt for cpu 3 (vmxusable=0)
interrupt 1 newCS=10 newEIP=fffff8801007b1c0 jumpbacklocation=FFFFF88010084590
InterruptHook[1].hooked=0
vmxusable=0
64-bit: DBVM is not loaded and a non dbvm hookable interrupt is being hooked that falls below 32
Calling dpc routine for cpunr 5
Hooking int1 for cpu 4
inthook_HookInterrupt for cpu 4 (vmxusable=0)
interrupt 1 newCS=10 newEIP=fffff8801007b1c0 jumpbacklocation=FFFFF88010084590
InterruptHook[1].hooked=0
vmxusable=0
64-bit: DBVM is not loaded and a non dbvm hookable interrupt is being hooked that falls below 32
IOCTL_CE_DEBUGPROCESS
debugger_startDebugging. Processid=11b8
Int1 jump back = 10:fffff8035f2cec40
IOCTL_CE_DEBUGPROCESS
debugger_startDebugging. Processid=11b8
Int1 jump back = 10:fffff8035f2cec40
IOCTL_CE_DEBUGPROCESS
debugger_startDebugging. Processid=11b8
Int1 jump back = 10:fffff8035f2cec40
IOCTL_CE_DEBUGPROCESS
debugger_startDebugging. Processid=11b8
Int1 jump back = 10:fffff8035f2cec40
IOCTL_CE_DEBUGPROCESS
debugger_startDebugging. Processid=11b8
Int1 jump back = 10:fffff8035f2cec40
IOCTL_CE_DEBUGPROCESS
debugger_startDebugging. Processid=11b8
Int1 jump back = 10:fffff8035f2cec40
Calling ObOpenObjectByPointer
ntStatus=0
|
Last edited by 661089799107 on Sun Aug 25, 2013 1:15 pm; edited 1 time in total |
|
| Back to top |
|
 |
Dark Byte
Site Admin
 Reputation: 474
Joined: 09 May 2003
Posts: 25952
Location: The netherlands
|
| Posted: Sun Aug 25, 2013 11:45 am Post subject: |
|
|
It looks like the driver doesn't know dbvm is loaded.
How did you launch dbvm? From CD/USB (Won't work for AMD's) or the about screen?
See if you can force load dbvm with the about screen, then restart cheat engine and see if that makes a difference.
Tip: Enable kernelmode openprocess so the driver launches when cheat engine does
_________________
Tools give you results. Knowledge gives you control.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
|
661089799107
Expert Cheater
![]() Reputation: 3
Joined: 25 Jan 2009
Posts: 186
|
| Posted: Sun Aug 25, 2013 12:00 pm Post subject: |
|
|
Yeah I noticed that message as well, and found it odd.
I have the 3 CE kernel routines enabled, and kernel debugger selected.
Dbvm was launched automatically via CE.
When opening cheat engine it shows "DBK64 LOADED" changing in multiple colors in the top left corner.
|
|
| Back to top |
|
|
Dark Byte
Site Admin
Reputation: 474
Joined: 09 May 2003
Posts: 25952
Location: The netherlands
|
| Posted: Sun Aug 25, 2013 12:19 pm Post subject: |
|
|
that just means the driver is loaded, not dbvm
Go to the about screen and click on "your system supports dbvm" or make sure that it says "Your system is running dbvm version 8"
If it says your system is running dbvm version 8, try closing cheat engine, run the kernelmodule unloader, and then start cheat engine again
_________________
Tools give you results. Knowledge gives you control.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
|
661089799107
Expert Cheater
![]() Reputation: 3
Joined: 25 Jan 2009
Posts: 186
|
| Posted: Sun Aug 25, 2013 12:42 pm Post subject: |
|
|
Oh sorry. I thought that meant it was loaded :\
When clicking on it in the about screen it locks up the computer, and have to turn off via power button.
|
|
| Back to top |
|
|
Dark Byte
Site Admin
Reputation: 474
Joined: 09 May 2003
Posts: 25952
Location: The netherlands
|
| Posted: Sun Aug 25, 2013 12:59 pm Post subject: |
|
|
Try launching it when absolutely nothing else is running (e.g after a fresh reboot, even before launching the game)
But yeah, could be your system isn't supported right now
_________________
Tools give you results. Knowledge gives you control.
Like my help? Join me on Patreon so i can keep helping |
|
| Back to top |
|
|
661089799107
Expert Cheater
![]() Reputation: 3
Joined: 25 Jan 2009
Posts: 186
|
| Posted: Sun Aug 25, 2013 1:13 pm Post subject: |
|
|
Alright I guess it's doesn't work on my system then, but it does say "your system supports dbvm".
Thanks for help
|
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
