question about rev 787

barlam · 6th July 2006, 21:26

i can view my memory and pointers(i tried wall vac and it works).My problem now is that even if i can see memory view fine,when i try to modify something i got dc.I didnt bypass 786,so i think that's my problem(my uce was for rev783). Am i right or rev787 has a new different method to block modifications of the memory?

DHS1 · 6th July 2006, 21:31

Mem View is "patched" so you'll get DC after a few seconds if you modify it. =(

barlam · 6th July 2006, 21:46

i know that memory view is "patched",i'm just asking if the method gameguard uses to check if debug registers are being used it's the same that was for rev786 (hook ZwGetContextThread )

~~pensoftware~~ · 6th July 2006, 21:53

ur uce works with pointers?

Anomalistica · 6th July 2006, 21:55

my uce does not work, apparently..
ill make a new one ><

barlam · 6th July 2006, 22:04

yes pointers work,and i can see the right instructions in memory view.i just need to bypass the hook to let me be able to modify my registers.I hope modifying SDT address of the function will be enough..

YoPoI · 6th July 2006, 22:41

Quote:

Originally Posted by barlam

yes pointers work,and i can see the right instructions in memory view.i just need to bypass the hook to let me be able to modify my registers.I hope modifying SDT address of the function will be enough..

how your pinters work on mi UCE i see all value ???? i see only the address..
omg..
can u tell me your setting?

barlam · 6th July 2006, 22:45

it's not a problem related to settings

YoPoI · 6th July 2006, 22:47

ok.. waht the problem?

aka1491 · 6th July 2006, 23:27

He isnt going to tell you...

GotYouBad · 6th July 2006, 23:30

I notified nProtect and that is why there was another GameGuard update

6th July 2006, 21:26	#1
barlam Lord of Destiny Join Date: 16th May 2006 Posts: 59	question about rev 787 i can view my memory and pointers(i tried wall vac and it works).My problem now is that even if i can see memory view fine,when i try to modify something i got dc.I didnt bypass 786,so i think that's my problem(my uce was for rev783). Am i right or rev787 has a new different method to block modifications of the memory?

6th July 2006, 21:31	#2
DHS1 Dark Lord Join Date: 9th Jan 2005 Posts: 48	Mem View is "patched" so you'll get DC after a few seconds if you modify it. =( __________________ http://img106.exs.cx/img106/5528/Mysignature.jpg

6th July 2006, 21:46	#3
barlam Lord of Destiny Join Date: 16th May 2006 Posts: 59	i know that memory view is "patched",i'm just asking if the method gameguard uses to check if debug registers are being used it's the same that was for rev786 (hook ZwGetContextThread )

6th July 2006, 21:53	#4
~~pensoftware~~ Banned by Warnings Apprentice Knight Join Date: 17th May 2006 Posts: 78	ur uce works with pointers?

6th July 2006, 21:55	#5
Anomalistica Dark Mage Join Date: 21st Apr 2006 Posts: 23	my uce does not work, apparently.. ill make a new one ><

6th July 2006, 22:04	#6
barlam Lord of Destiny Join Date: 16th May 2006 Posts: 59	yes pointers work,and i can see the right instructions in memory view.i just need to bypass the hook to let me be able to modify my registers.I hope modifying SDT address of the function will be enough..

6th July 2006, 22:45	#8
barlam Lord of Destiny Join Date: 16th May 2006 Posts: 59	it's not a problem related to settings

6th July 2006, 22:47	#9
YoPoI Lord of Destiny Join Date: 25th Aug 2005 Posts: 65	ok.. waht the problem?

6th July 2006, 23:27	#10
aka1491 Lord Join Date: 1st Jun 2006 Posts: 36	He isnt going to tell you...

6th July 2006, 23:30	#11
GotYouBad Dark Mage Join Date: 7th Apr 2006 Posts: 23	I notified nProtect and that is why there was another GameGuard update