Cheat Engine

astralmaster · How do I cheat? Reputation: 0 Joined: 10 Oct 2014 Posts: 2

When trying to attach to a particular process using VEHDebugger the

Dark Byte · Posted: Fri Mar 31, 2017 3:53 pm Post subject:

find out what api's DuplicateHandle uses and write stubs for that that use the kernelmode memory access or related instead

alternatively, change the code to use named events, and then open them in the DLL part of vehdebug

of course, there's still the issue that DLL injection will probably fail as well

astralmaster · How do I cheat? Reputation: 0 Joined: 10 Oct 2014 Posts: 2

The built-in injection routine in CEFuncProc.pas is indeed failing but I succeeded using NtCreateThreadEx that I plan to port to this unit as an alternative to InjectDll method. I just didn't really know where to start with HasDebugEvent and other events needed for VEHDebug. Depending on complexity I might have luck in replicating DuplicateHandle API as suggested.

Edit:

If anybody stumbles upon the same problem, you can use NtDuplicateObject to get a duplicate handle.