VirtualQuery hooking/mem block stealthing

[kynox]

Exactly. So how could they ban if you're using a private anti-anti-cheat usermode rootkit?

Answer: They can't. Silly noob, trix are for kids.

I never said they could, i was merely correcting you.

[Cypher]

Correcting what you silly noob? I pointed out that they'd have to be hashing in order to do the bans, and that particular method would be useless against private hooks.

GGIWIN. Fgt. Cerberus > You.

[kynox]

Correcting what you silly noob? I pointed out that they'd have to be hashing in order to do the bans, and that particular method would be useless against private hooks.

GGIWIN. Fgt. Cerberus > You.

Correcting "You are indeed correct. Warden doesn't even do IAT or EAT checks on APIs, let alone inline hook checks or the likes".

Warden does, the developers don't

[Cypher]

Now for something we can all agree on.

Krypton:


Arigity:


Drakefish:

[Cypher]

Correcting "You are indeed correct. Warden doesn't even do IAT or EAT checks on APIs, let alone inline hook checks or the likes".

Warden does, the developers don't

Whether the function is there or not is irrelevant. If it's not being called its not performing the action, therefore it's not "doing" the scan. Get a dictionary fgt.

[Nesox]

Haha, i was getting tired at work but no! not anymore almost fell off the chair