A forum for reverse engineering, OS internals and malware analysis 

Skype + Kernel Debugger

Discussion on reverse-engineering and debugging.

Re: Skype + Kernel Debugger

 #12323  by EP_X0FF
 Sun Mar 25, 2012 12:49 am
Just to mention that, SCII also freezes PC with kernel mode debugging ON. Annoying crap :)

Re: Skype + Kernel Debugger

 #12341  by everdox
 Sun Mar 25, 2012 11:46 pm
EP_X0FF wrote:Just to mention that, SCII also freezes PC with kernel mode debugging ON. Annoying crap :)
just out of curiousity, aside from generating exceptions in usermode for anti-debugger purposes are they explicitly checking for kdb? like kuser_shared or ntqsi? or haven't you looked.

Re: Skype + Kernel Debugger

 #12344  by EP_X0FF
 Mon Mar 26, 2012 3:49 am
everdox wrote:
EP_X0FF wrote:Just to mention that, SCII also freezes PC with kernel mode debugging ON. Annoying crap :)
just out of curiousity, aside from generating exceptions in usermode for anti-debugger purposes are they explicitly checking for kdb? like kuser_shared or ntqsi? or haven't you looked.
No, Starcraft 2 not looking for KDB specially. Probably this surprise was some sort of anti-cheat part. Anyway, /noumex solves this problem.
 Return to “Reverse Engineering and Debugging”