--- Running a SafeDisc EXE -------

Me setting a BPM, NTICE in action

00000566	3.91877124	Alert: MOV DR3, ESI ADDR: B666917B	
00000567	3.91878856	00405273	
00000568	3.91879750	DRX Updated

00000569	3.91881063	Alert: MOV DR7, EBX ADDR: B666917E	
00000570	3.91882655	100004C0	
00000571	3.91883522	DRX Updated

---

some memory doing checks, turns out to be SECDRV safediscs driver
drx requests are faked.

00000932	9.08994774	Alert: MOV EAX, DR1 ADDR: B707593A	
00000933	9.08998239	00000000	
00000934	9.08999216	[o] Faked MOV REG, DRX	

00000935	9.09002122	Alert: MOV EAX, DR7 ADDR: B7075950	
00000936	9.09003658	00000400	
00000937	9.09004608	[o] Faked MOV REG, DRX	

00001154	9.60005839	Alert: MOV EAX, DR7 ADDR: B70759DA	
00001155	9.60010811	00000400	
00001156	9.60011817	[o] Faked MOV REG, DRX	

00001157	9.60336942	Alert: MOV EAX, DR7 ADDR: B70759DA	
00001158	9.60341161	00000400	
00001159	9.60342138	[o] Faked MOV REG, DRX	

00001160	9.61938878	Alert: MOV EAX, DR7 ADDR: B70759DA	
00001161	9.61943180	00000400	
00001162	9.61944716	[o] Faked MOV REG, DRX	

00001163	9.62103089	Alert: MOV EAX, DR7 ADDR: B70759DA	
00001164	9.62106245	00000400	
00001165	9.62107279	[o] Faked MOV REG, DRX	

--

and for interest heres ntice operating my bc* request

00000575	8.94788583	Alert: MOV ECX, DR7 ADDR: B66691C4	
00000576	8.94790343	100004C0	
00000577	8.94791321	[o] Emulated MOV REG, DRX	

00000578	8.94792914	Alert: MOV DR7, ECX ADDR: B66691C9	
00000579	8.94794478	10000400	
00000580	8.94795344	DRX Updated

