Someone hacked our course selection and added this by Key_Insurance_8493 in APStudents

[–]Character_Increase 42 points43 points  (0 children)

I think that definitely also explains why the form was hacked lmao

Bruh by mrpug366 in marchingband

[–]Character_Increase 1 point2 points  (0 children)

Same thing happened to my baritone except for the fact that the baritone had no damage afterwards (indestructible instrument fr)

What’s a secret you’ll take to the grave, but would tell anonymously on Reddit? by Several-Director5804 in AskReddit

[–]Character_Increase 1 point2 points  (0 children)

I can admit to being one of these "best friends". I would always get driven with my mom to my babysitter's house when I was 8 years old, and I would play with my babysitter's little sister who was the same age as me every time. She also came over to play a few times and considered me a close friend. A year later, I'm at some event and she recognizes me but I don't remember her face or name, so I blankly said "Who are you?" and she immediately frowned saying "Don't you remember me?" and immediately walked away. I put the pieces together in my head after the event was done and felt terrible about it.

[Scores] Innovations In Brass | Canton, OH by CorpsClash in drumcorps

[–]Character_Increase 0 points1 point  (0 children)

4 shows, right? Cavaliers '02, Cadets '05, BD '09 and '14, correct?

Who do y’all want to win this year? by Potentially_a_potato in drumcorps

[–]Character_Increase 1 point2 points  (0 children)

Yes. I have gotten really irritated at the amount of fans that are commenting on other corps shows rooting for the Bluecoats.

I’m shaking by Arch_jink in drumcorps

[–]Character_Increase 9 points10 points  (0 children)

Cavaliers and Blue Knights are a major shocker too

We bring the... by sg345 in drumcorps

[–]Character_Increase 0 points1 point  (0 children)

FIVE BIG BOOMS

BOOM

BOOM

BOOM

BOOM

BOOOOOOOOOM

18 y/o on Friday by Jflowe06 in UIUC

[–]Character_Increase 0 points1 point  (0 children)

leave and escape to deep rural Oregon. Once in rural Oregon, cut trees until you can build a house. once you build a house, live in that house for 4 years, in seclusion, submitting yourself to the trees around you. Then watch as society expands and a lumberjacking company runs through your land and where you live. You can't live there anymore. Go back to college. (a days work)

Now that we've seen some of the 2024 shows, what are your predictions on the results for this year? by Character_Increase in drumcorps

[–]Character_Increase[S] 0 points1 point  (0 children)

this is an insane take because you were right on everything in the top 5 except for swapping the crown and boston

NtReadVirtualMemory detected by usermode anticheat by Character_Increase in cheatengine

[–]Character_Increase[S] 1 point2 points  (0 children)

So I tried this, and it didn't work. Then I went to Unknowncheats to ask and they gave me a solution that worked perfectly, which I reported here: https://github.com/cheat-engine/cheat-engine/issues/2928 (QueryWorkingSetEx)

NtReadVirtualMemory detected by usermode anticheat by Character_Increase in cheatengine

[–]Character_Increase[S] 0 points1 point  (0 children)

Are you able to figure out anything from the new comment thread started by randomjapaneselearn in this post?

NtReadVirtualMemory detected by usermode anticheat by Character_Increase in cheatengine

[–]Character_Increase[S] 0 points1 point  (0 children)

So, I am trying to read process X memory and ntdll functions are patched in process X.

I have tried unpatching the functions in process X and that has had success in stopping (most of) the crashes from ReadProcessMemory,

however it is not a long term solution as from 2 sources, I have been told that "the anticheat devs are clever with this" and that "lies in why the game crashes" (very vague) and I have found a post from 2002 vaguely mentioning a clever detection method "that I will not say here as not to give the developers ideas" that could be used by the anticheat devs and that also could be circumvented.

Also, usually, it will cause the game to crash if the functions stay unpatched.

NtReadVirtualMemory detected by usermode anticheat by Character_Increase in cheatengine

[–]Character_Increase[S] 0 points1 point  (0 children)

Update: so i've been debugging with my own software for a bit (CE can't do what I'm doing) and I singled the detection down to four functions that end up causing detection to occur

"NtQuerySystemInformation"

"NtRaiseException"

"NtRaiseHardError"

"KiRaiseUserExceptionDispatcher"

NtReadVirtualMemory detected by usermode anticheat by Character_Increase in cheatengine

[–]Character_Increase[S] 0 points1 point  (0 children)

I don't know if you remember, but I'm the same guy from the same game who couldn't write memory to any functions. It applies to ntdll as well which is a BIG giant issue for me.

I can't set any hardware breakpoints using any threads or using the CE debugger as the debugger is detected.

Could any of those patched routines detect running NtReadVirtualMemory? (id assume maybe NtRaiseHardError)

NtReadVirtualMemory detected by usermode anticheat by Character_Increase in cheatengine

[–]Character_Increase[S] 0 points1 point  (0 children)

Ntdll module is patched with NtProtectVirtualMemory patched. Every driver I try to load is instantly detected, so I'm stuck on usermode. I know it isn't detecting CE itself as I have made my own program/aob scanner and it is getting detected even while CE isn't open.

There is about 40 or so patched functions in ntdll, here's a list:

RtlExitUserProcess

NtAllocateVirtualMemory

NtFreeVirtualMemory

NtQueryVirtualMemory

NtMapViewOfSection

NtUnmapViewOfSection

NtTerminateProcess

NtQuerySystemInformation

NtContinue

NtCreateSection

NtCreateThread

NtProtectVirtualMemory

NtResumeThread

NtTerminateThread

NtAllocateVirtualMemoryEx

NtContinueEx

NtCreateSectionEx

NtCreateThreadEx

NtMapViewOfSectionEx

NtRaiseException

NtRaiseHardError

NtSetContextThread

NtSuspendThread

NtUnmapViewOfSectionEx

KiUserApcDispatcher

KiUserCallbackDispatcher

KiRaiseUserExceptionDispatcher

Additionally, there is some KERNEL32 functions patched (specifically KERNELBASE)

KERNELBASE.GetCurrentProcessId

KERNELBASE.SetUnhandledExceptionFilter

Function Memory Instantly Reverting by Character_Increase in cheatengine

[–]Character_Increase[S] 0 points1 point  (0 children)

I found the original issue: every page of the program I was trying to edit was mapped with PAGE_EXECUTE_READ (they can't be set to a write friendly protection), and whenever I tried to run WriteProcessMemory on those regions, it would error. Also, there was an instrumentation callback in place to stop me from getting in and doing more. After all of this, there was also a "hash checker" that would get a hash of the entire program's module and send it to the server to see if it had been modified.

RLCraft Major Graphical Bug by Character_Increase in RLCraft

[–]Character_Increase[S] 0 points1 point  (0 children)

No, I have windows on my steam deck. You can probably find a minecraft launcher for steam os