Cheat Engine

[skynet888]

Hello Darkbyte,
Why doesn’t Cheat Engine display thread TIDs in decimal? System tools like Windows Task Manager, Process Monitor, and PCHunter all show thread TIDs in decimal. As a result, users have to open a calculator every time to convert the TIDs shown in CE from hexadecimal to decimal in order to match them with the TIDs in those system tools. I extremely strongly suggest that CE display thread TIDs in decimal!
By the way, In last post you didn’t get what I meant.What I’m saying is: I first create process A with CREATE_SUSPENDED. At this point, the process is suspended right after only ntdll.dll is loaded, with no other DLLs loaded yet, and LdrInitializeThunk hasn’t been executed.
Even if I set breakpoints on ntdll!LdrInitializeThunk or ntdll!LdrLoadDll at this exact moment with the kernel-mode debugger, then resume process A, the breakpoints will never hit(I suggest you try it yourself).
However, if I use the Windows debugger, it can break at LdrInitializeThunk without any problem.But the Windows debugger has all kinds of weird issues when debugging packed programs with anti-user-mode-debugger protections, so I only use the kernel-mode debugger.