| View previous topic :: View next topic |
| Author |
Message |
homer_simpson Grandmaster Cheater
Reputation: 0
Joined: 25 Feb 2007 Posts: 596
|
Posted: Thu Mar 20, 2008 3:42 pm Post subject: What Memory Writing APIs are not hooked |
|
|
| Im talking about maplestory. Which one(s) are(is) not hooked?
|
|
| Back to top |
|
 |
Heartless I post too much
Reputation: 0
Joined: 03 Dec 2006 Posts: 2436
|
Posted: Thu Mar 20, 2008 5:20 pm Post subject: |
|
|
None.
_________________
What dosen't kill you, usually does the second time. |
|
| Back to top |
|
 |
Snootae Grandmaster Cheater
Reputation: 0
Joined: 16 Dec 2006 Posts: 969 Location: --->
|
Posted: Thu Mar 20, 2008 9:09 pm Post subject: |
|
|
i believe there are is only one memory writing api, why would they have two, and if there was too, gg would block em both
_________________
|
|
| Back to top |
|
 |
Ksbunker Advanced Cheater
Reputation: 0
Joined: 18 Oct 2006 Posts: 88
|
Posted: Fri Mar 21, 2008 2:46 am Post subject: re: |
|
|
Just to clear up; There's 1 usermode and 1 kernelmode API use to write memory. Hooking kernel renders usermode useless too, whereas merely hooking usermode only renders usermode api calls useless.
As for what hooks GG installs... could open a program in olly whilst GG is operating, look at the functions you want in the kernel32.dll to see if the function entry point (typically);
push ebp
mov ebp, esp
or
mov edi, edi
push ebp
mov ebp, esp
Has been changed to a call, jump, ret or other...
|
|
| Back to top |
|
 |
Snootae Grandmaster Cheater
Reputation: 0
Joined: 16 Dec 2006 Posts: 969 Location: --->
|
Posted: Fri Mar 21, 2008 9:12 am Post subject: |
|
|
wow bunker, quite knowledgable, will try, though im certain kernelmode is blocked, hence the old 5 byte jump wont work for the usermode
and from what i hear kernelmode hooks can be a bitch to get past
300 posts, hehehe
_________________
|
|
| Back to top |
|
 |
dnsi0 I post too much
Reputation: 0
Joined: 04 Jan 2007 Posts: 2674
|
Posted: Fri Mar 21, 2008 1:08 pm Post subject: |
|
|
| or you use a user mode pysodo hook or something like that. Its the same as PostMessageA Bypass.
|
|
| Back to top |
|
 |
sponge I'm a spammer
Reputation: 1
Joined: 07 Nov 2006 Posts: 6009
|
Posted: Fri Mar 21, 2008 5:48 pm Post subject: |
|
|
| dnsi0 wrote: | | or you use a user mode pysodo hook or something like that. Its the same as PostMessageA Bypass. | no.
_________________
|
|
| Back to top |
|
 |
hcavolsdsadgadsg I'm a spammer
Reputation: 26
Joined: 11 Jun 2007 Posts: 5801
|
Posted: Fri Mar 21, 2008 8:26 pm Post subject: |
|
|
what the hell is a pysodo?
pseudo?
|
|
| Back to top |
|
 |
|