Ultimap1 - Revision history

Dark Byte: Reverted edits by This content is not available (Talk) to last revision by Csimbi

2019-03-18T19:10:31Z

Reverted edits by This content is not available (Talk) to last revision by Csimbi

This content is not available: Replaced content with 'Sorry! Content not available.'

2019-03-16T16:28:16Z

Replaced content with '<span style="font-size:25px;color:red">Sorry! Content not available.</span>'

Csimbi at 13:19, 22 November 2018

2018-11-22T13:19:36Z

Csimbi: Added a work of of caution on BSOD

2018-11-22T13:12:17Z

Added a work of of caution on BSOD

Csimbi: fixed typo

2018-11-22T13:10:58Z

fixed typo

Csimbi: fixed typo

2018-11-22T12:47:42Z

fixed typo

Csimbi: First draft

2018-11-22T12:47:12Z

First draft

New page

Owners of older Intel Gen5 and earlier CPUs and owners of Intel Gen6 CPU with early implementation of IPT can try using Ultimap1, as long as you can successfully enable [[DBVM]]. Note: CE saying DBMVM is supported is not enough; you actually have to enable it.

Ultimap1 is available through the [[Memory Viewer]] dialog. You can either click on the 'Tools' menu and select it from there, or hit the CTRL+ALT+U hotkey. Either way, you will end up with this dialog:
[[File:Ultimap1.png]]

From here, you will want to click the 'Start' button first. At that point, you can go back to the application and force execution of the code you are looking for and click 'Code has been executed' after you came back to CE. You can also eliminate a lot of the false positives using any of the other buttons. In the end, once you have an acceptable number of results, you can click the 'Show matching routines' button on the bottom. Congrats, you found the code you need, without having to go through the hassle of finding the value first and then tracking it all the way back to the code.

Do yourself a favour and read the tip on the bottom of the dialog. These hotkeys are a tremendous help to using Ultimap successfully.

← Older revision		Revision as of 19:10, 18 March 2019
Line 1:		Line 1:
−	~~<span style="font-size~~:~~25px~~;~~color~~:~~red">Sorry! Content not~~ available.~~</span>~~	+	Owners of older Intel Gen5 and earlier CPUs and owners of Intel Gen6 CPU with early implementation of IPT can try using Ultimap1, as long as they can successfully enable [[DBVM]]. Note: CE saying [[DBVM]] is supported is not enough; they actually have to enable it. A word of caution: expect [[BSOD]] while trying to enable [[DBVM]].
		+
		+	Ultimap1 is available through the [[Memory Viewer]] dialog. One can either click on the 'Tools' menu and select it from there, or hit the CTRL+ALT+U hotkey. Either way CE presents the following dialog:
		+	[[File:Ultimap1.png]]
		+
		+	From here, users will want to click the 'Start' button first. At that point, users can go back to the application and force execution of the code they are looking for, and, click 'Code has been executed' after they ALT+TABed back into CE. Users can also eliminate a lot of the false positives using any of the other buttons. In the end, once they have an acceptable number of results, users would click the 'Show matching routines' button on the bottom. Congrats on finding the code without having to go through the hassle of finding the value first and then tracking it all the way back to the code.
		+
		+	Do yourself a favour and read the tip on the bottom of the dialog. These hotkeys are a tremendous help to using Ultimap successfully.

← Older revision		Revision as of 16:28, 16 March 2019
Line 1:		Line 1:
−	~~Owners of older Intel Gen5 and earlier CPUs and owners of Intel Gen6 CPU with early implementation of IPT can try using Ultimap1, as long as they can successfully enable [[DBVM]]. Note~~: ~~CE saying [[DBVM]] is supported is not enough~~; ~~they actually have to enable it. A word of caution~~: ~~expect [[BSOD]] while trying to enable [[DBVM]].~~	+	<span style="font-size:25px;color:red">Sorry! Content not available.</span>
−
−	~~Ultimap1 is~~ available ~~through the [[Memory Viewer]] dialog. One can either click on the 'Tools' menu and select it from there, or hit the CTRL+ALT+U hotkey. Either way CE presents the following dialog:~~
−	~~[[File:Ultimap1.png]]~~
−
−	From here, users will want to click the 'Start' button first. At that point, users can go back to the application and force execution of the code they are looking for, and, click 'Code has been executed' after they ALT+TABed back into CE. Users can also eliminate a lot of the false positives using any of the other buttons. In the end, once they have an acceptable number of results, users would click the 'Show matching routines' button on the bottom. Congrats on finding the code without having to go through the hassle of finding the value first and then tracking it all the way back to the code.
−
−	~~Do yourself a favour and read the tip on the bottom of the dialog. These hotkeys are a tremendous help to using Ultimap successfully~~.

@@ Line 4: / Line 4: @@
 [[File:Ultimap1.png]]
-From here, users will want to click the 'Start' button first. At that point, users can go back to the application and force execution of the code they are looking for, and, click 'Code has been executed' after they came ALT+TABed back into CE. Users can also eliminate a lot of the false positives using any of the other buttons. In the end, once they have an acceptable number of results, users would click the 'Show matching routines' button on the bottom. Congrats on finding the code without having to go through the hassle of finding the value first and then tracking it all the way back to the code.
+From here, users will want to click the 'Start' button first. At that point, users can go back to the application and force execution of the code they are looking for, and, click 'Code has been executed' after they ALT+TABed back into CE. Users can also eliminate a lot of the false positives using any of the other buttons. In the end, once they have an acceptable number of results, users would click the 'Show matching routines' button on the bottom. Congrats on finding the code without having to go through the hassle of finding the value first and then tracking it all the way back to the code.
 Do yourself a favour and read the tip on the bottom of the dialog. These hotkeys are a tremendous help to using Ultimap successfully.

← Older revision		Revision as of 13:12, 22 November 2018
Line 1:		Line 1:
−	Owners of older Intel Gen5 and earlier CPUs and owners of Intel Gen6 CPU with early implementation of IPT can try using Ultimap1, as long as they can successfully enable [[DBVM]]. Note: CE saying [[DBVM]] is supported is not enough; they actually have to enable it.	+	Owners of older Intel Gen5 and earlier CPUs and owners of Intel Gen6 CPU with early implementation of IPT can try using Ultimap1, as long as they can successfully enable [[DBVM]]. Note: CE saying [[DBVM]] is supported is not enough; they actually have to enable it. A word of caution: expect [[BSOD]] while trying to enable [[DBVM]].

	Ultimap1 is available through the [[Memory Viewer]] dialog. One can either click on the 'Tools' menu and select it from there, or hit the CTRL+ALT+U hotkey. Either way CE presents the following dialog:		Ultimap1 is available through the [[Memory Viewer]] dialog. One can either click on the 'Tools' menu and select it from there, or hit the CTRL+ALT+U hotkey. Either way CE presents the following dialog:

@@ Line 1: / Line 1: @@
-Owners of older Intel Gen5 and earlier CPUs and owners of Intel Gen6 CPU with early implementation of IPT can try using Ultimap1, as long as you can successfully enable [[DBVM]]. Note: CE saying [[DBVM]] is supported is not enough; you actually have to enable it.
+Owners of older Intel Gen5 and earlier CPUs and owners of Intel Gen6 CPU with early implementation of IPT can try using Ultimap1, as long as they can successfully enable [[DBVM]]. Note: CE saying [[DBVM]] is supported is not enough; they actually have to enable it.
-Ultimap1 is available through the [[Memory Viewer]] dialog. You can either click on the 'Tools' menu and select it from there, or hit the CTRL+ALT+U hotkey. Either way, you will end up with this dialog:
+Ultimap1 is available through the [[Memory Viewer]] dialog. One can either click on the 'Tools' menu and select it from there, or hit the CTRL+ALT+U hotkey. Either way CE presents the following dialog:
 [[File:Ultimap1.png]]
-From here, you will want to click the 'Start' button first. At that point, you can go back to the application and force execution of the code you are looking for and click 'Code has been executed' after you came back to CE. You can also eliminate a lot of the false positives using any of the other buttons. In the end, once you have an acceptable number of results, you can click the 'Show matching routines' button on the bottom. Congrats, you found the code you need, without having to go through the hassle of finding the value first and then tracking it all the way back to the code.
+From here, users will want to click the 'Start' button first. At that point, users can go back to the application and force execution of the code they are looking for, and, click 'Code has been executed' after they came ALT+TABed back into CE. Users can also eliminate a lot of the false positives using any of the other buttons. In the end, once they have an acceptable number of results, users would click the 'Show matching routines' button on the bottom. Congrats on finding the code without having to go through the hassle of finding the value first and then tracking it all the way back to the code.
 Do yourself a favour and read the tip on the bottom of the dialog. These hotkeys are a tremendous help to using Ultimap successfully.

← Older revision		Revision as of 12:47, 22 November 2018
Line 1:		Line 1:
−	Owners of older Intel Gen5 and earlier CPUs and owners of Intel Gen6 CPU with early implementation of IPT can try using Ultimap1, as long as you can successfully enable [[DBVM]]. Note: CE saying ~~DBMVM~~ is supported is not enough; you actually have to enable it.	+	Owners of older Intel Gen5 and earlier CPUs and owners of Intel Gen6 CPU with early implementation of IPT can try using Ultimap1, as long as you can successfully enable [[DBVM]]. Note: CE saying [[DBVM]] is supported is not enough; you actually have to enable it.

	Ultimap1 is available through the [[Memory Viewer]] dialog. You can either click on the 'Tools' menu and select it from there, or hit the CTRL+ALT+U hotkey. Either way, you will end up with this dialog:		Ultimap1 is available through the [[Memory Viewer]] dialog. You can either click on the 'Tools' menu and select it from there, or hit the CTRL+ALT+U hotkey. Either way, you will end up with this dialog: