https://pwn.dog/Recent content on pwn.dogHugoenTue, 02 Jun 2026 20:00:00 +0000https://pwn.dog/posts/indistinguishable-what-vac-checks/Tue, 02 Jun 2026 20:00:00 +0000https://pwn.dog/posts/indistinguishable-what-vac-checks/Finale of the Anti-Lag+ teardown. We mapped the feature byte-for-byte; now we line it up against what Valve Anti-Cheat is publicly known to look for. Every single signal a cheat trips, Anti-Lag+ tripped too - because at the instruction level they were the same thing.https://pwn.dog/posts/the-control-plane-atiapfxx-blb/Tue, 02 Jun 2026 16:00:00 +0000https://pwn.dog/posts/the-control-plane-atiapfxx-blb/Part 3 of the Anti-Lag+ teardown. The hook lived in code - but the on/off switch was data. Reverse-engineering AMD&rsquo;s per-game application-profile database (atiapfxx.blb / the BWJE format) and the single byte that turned the feature off.https://pwn.dog/posts/the-hook-engine-amdihk64/Tue, 02 Jun 2026 12:00:00 +0000https://pwn.dog/posts/the-hook-engine-amdihk64/Part 2 of the Anti-Lag+ teardown. A deep dive into amdihk64 - a Microsoft Detours-based inline-hook engine that ships in the same driver package and also hooks raw input. It&rsquo;s a sibling to the Delag detour from Part 1; I couldn&rsquo;t prove it&rsquo;s on the Anti-Lag+ path itself, and I say so.https://pwn.dog/posts/detouring-yourself-into-a-ban/Tue, 02 Jun 2026 00:00:00 +0000https://pwn.dog/posts/detouring-yourself-into-a-ban/A symbol-level teardown of the Adrenalin 23.10.1 feature that got Counter-Strike 2 players VAC-banned - what it hooked, how it hooked it, and the single byte that turned it off.https://pwn.dog/about/Mon, 01 Jan 0001 00:00:00 +0000https://pwn.dog/about/<p><strong>pwn.dog</strong> is a reverse-engineering notebook - driver teardowns, anti-cheat internals, exploitation, and debugging write-ups. Mostly low-level Windows internals and whatever rabbit hole is open this week.</p> <p>Everything here is research and documentation only.</p>