VirtualProtectEx

Find a Bug? Have a Problem? Like to Suggest a Feature? Do it Here

Moderators: g3nuin3, SpeedWing, WhiteHat, mezzo

VirtualProtectEx

Postby AlaXul » Sat Aug 19, 2006 10:01 am

Battlefield 2 uses VirtualProtectEx api to protect it's memory from modifications. Writing memory using WriteProcessMemory will not work. Applications such as MHS does not allow the area to be modified either. I have notice thought that Tsearch does work, and once Tsearch has modified it, then other applications can modify it as well. I assume it does something to defeat VirtualProtectEx, perhaps you could add this to MHS. Cheers!
User avatar
AlaXul
Sir Hacks-A-Lot
 
Posts: 34
Joined: Thu Jul 27, 2006 7:50 am

Postby L. Spiro » Sat Aug 19, 2006 8:19 pm

It is easy to fix, however I primarily worry about the speed loss caused by having to call VirtualProtectEx() for each WriteProcessMemory().

I can fix this without VirtualProtectEx() while using kernel-mode, however, using only two instructions, which would cause no slow-down at all.

Of course, this means the feature would be exclusive to kernel-mode functionality, however that should be fine if I get the kernel-mode driver working with 100% stability.


L. Spiro
User avatar
L. Spiro
L. Spiro
 
Posts: 3129
Joined: Mon Jul 17, 2006 10:14 pm
Location: Tokyo, Japan


Return to Bugs/Problems/Suggestions

Who is online

Users browsing this forum: No registered users and 0 guests