Activity Stream

Filter
Sort By Time Show
Recent Recent Popular Popular Anytime Anytime Last 24 Hours Last 24 Hours Last 7 Days Last 7 Days Last 30 Days Last 30 Days All All Photos Photos Forum Forums Articles Articles Blog Blogs
  • WaxfordSqueers's Avatar
    January 25th, 2020, 13:47
    WaxfordSqueers replied to a thread DISM in General Reversing
    Thanks, Blabbs...that's far more than I expected. Invaluable. I played with it last night and got to the INT 3 at 7c90120e followed by a ret @...
    12 replies | 161 view(s)
  • blabberer's Avatar
    January 25th, 2020, 09:13
    blabberer replied to a thread DISM in General Reversing
    open windbg.exe click file->open Executable Navigate to folder containing dism.exe in the arguments editbox type in the command line you wish (i...
    12 replies | 161 view(s)
  • WaxfordSqueers's Avatar
    January 24th, 2020, 23:51
    WaxfordSqueers replied to a thread DISM in General Reversing
    Thinking about what I'd like to do and would appreciate some input/advice. I am thinking of using windbg rather than cdb because wdbg can be set with...
    12 replies | 161 view(s)
  • WaxfordSqueers's Avatar
    January 23rd, 2020, 22:08
    WaxfordSqueers replied to a thread DISM in General Reversing
    I have decided to trace into dism to see what's happening. I'll need to re-familiarize myself with windbg and cdb. XP does not have a wim file...
    12 replies | 161 view(s)
  • WaxfordSqueers's Avatar
    January 22nd, 2020, 21:40
    WaxfordSqueers replied to a thread DISM in General Reversing
    The fog lifts a little more. When a straight Dism /online scan is used, Windows checks the current setup online against files in the Windows Update...
    12 replies | 161 view(s)
  • WaxfordSqueers's Avatar
    January 22nd, 2020, 17:43
    WaxfordSqueers replied to a thread DISM in General Reversing
    Discovered part of the problem. XP does not use the wim image format in the install disk. You have to use dism or something called imagex to create a...
    12 replies | 161 view(s)
  • WaxfordSqueers's Avatar
    January 22nd, 2020, 16:25
    WaxfordSqueers replied to a thread DISM in General Reversing
    Number 1 source is ryanvm at link below. That's where I got my unofficial XP SP4 update. They specialize in matters that Microsoft et al claim you...
    12 replies | 161 view(s)
  • blabberer's Avatar
    January 22nd, 2020, 01:06
    blabberer replied to a thread DISM in General Reversing
    awk is available for windows from gnuwin32 utilities (for x64 awk iirc is available in msys\mingw ) i am not sure where you get all this info...
    12 replies | 161 view(s)
  • WaxfordSqueers's Avatar
    January 21st, 2020, 18:08
    WaxfordSqueers replied to a thread DISM in General Reversing
    Blabbs...I was trying to replicate your command line for cdb but it did not like the awk commands at the end. How did you manage to incorporate an...
    12 replies | 161 view(s)
  • blabberer's Avatar
    January 21st, 2020, 03:01
    blabberer replied to a thread DISM in General Reversing
    a complete write sequence for one command deleting log file :\>del c:\Windows\Logs\DISM\dism.log Could Not Find c:\Windows\Logs\DISM\dism.log ...
    12 replies | 161 view(s)
  • WaxfordSqueers's Avatar
    January 21st, 2020, 01:53
    Just an aside. After all the years I have spent on XP, I never knew that permissions for files in XP Home directories can be changed in Safe Mode. If...
    43 replies | 2295 view(s)
  • WaxfordSqueers's Avatar
    January 21st, 2020, 01:50
    WaxfordSqueers replied to a thread DISM in General Reversing
    Thanks Blabbs...it's very late and I have managed to throw out both my lower back and mid-back, between shoulder blades. An old war wound from work....
    12 replies | 161 view(s)
  • blabberer's Avatar
    January 21st, 2020, 00:31
    blabberer replied to a thread DISM in General Reversing
    Not Sure What You Want to debug dism takes an argument to windir /WINDIR:myfancydirectorylocatedinclouds@55 it there is a meesagebox/dialog...
    12 replies | 161 view(s)
  • WaxfordSqueers's Avatar
    January 20th, 2020, 18:03
    I believe you, I cut off a txt file at 50 megs. :devil: with a ^C.
    18 replies | 292 view(s)
  • WaxfordSqueers's Avatar
    January 20th, 2020, 15:58
    WaxfordSqueers started a thread DISM in General Reversing
    Thought I'd do a quick query re DISM and the possibility of tracing through its code. Came across an article on the Net showing how to setup DISM on...
    12 replies | 161 view(s)
  • blabberer's Avatar
    January 19th, 2020, 19:04
    strings.exe reads each file in sizes of 8192,16384,...65536 max over Fastio/IRP_MJ_READ read until ENDIFFILE. FINDSTR.exe KEEPS ON writing to...
    18 replies | 292 view(s)
  • WaxfordSqueers's Avatar
    January 19th, 2020, 16:05
    kayaker...if I'm getting your drift, the problem seems to be in sending the output to a file in the same directory. So, I pointed the output to a...
    18 replies | 292 view(s)
  • Kayaker's Avatar
    January 19th, 2020, 12:07
    Well this is pretty amazing, I started looking into the details of findstr, for those who might be interested there is a very detailed sequence of...
    18 replies | 292 view(s)
  • Kayaker's Avatar
    January 18th, 2020, 19:24
    Also a good point, we've got strings.exe controlling findstr which is likely tied to cmd.exe behaviour as well. FINDSTR cannot search for null...
    18 replies | 292 view(s)
  • WaxfordSqueers's Avatar
    January 18th, 2020, 18:23
    kayaker...Good point. If you watch that video at the link I posted, he is using findstr piped through findstr. He had not used strings.exe at that...
    18 replies | 292 view(s)
  • Kayaker's Avatar
    January 18th, 2020, 17:53
    Nope, same effect with the first command example from c:\ or d:\ on Win10. My ponderings to explain the reason for the recursion was this - that...
    18 replies | 292 view(s)
  • WaxfordSqueers's Avatar
    January 18th, 2020, 12:18
    Blabbs....can you try your good test from a directory inside c:\users in W7? My directory was c:\users\username\downloads because that's where I...
    18 replies | 292 view(s)
  • blabberer's Avatar
    January 18th, 2020, 08:44
    yeah it borks the third time on this old x86 E:\SYSINT\strtest>strings.exe * | findstr /i "the" >> out2.txt E:\SYSINT\strtest>ls -lg total...
    18 replies | 292 view(s)
  • Kayaker's Avatar
    January 18th, 2020, 08:24
    That was just to test a simple situation which would lead to a quick search result. How about this, again from the main strings folder do a...
    18 replies | 292 view(s)
  • blabberer's Avatar
    January 18th, 2020, 07:30
    i checked the recursive thingy and it seems to be working allright the the thingy too seemed to work correctly in x86 maybe some bug in latest...
    18 replies | 292 view(s)
  • WaxfordSqueers's Avatar
    January 17th, 2020, 22:29
    Blabbs...thanks for clarification.
    48 replies | 998 view(s)
  • blabberer's Avatar
    January 17th, 2020, 21:52
    the | is in key name which is a windows registry limitation it is not broken it is by design A keyname can contain any printable charecter...
    48 replies | 998 view(s)
  • WaxfordSqueers's Avatar
    January 17th, 2020, 19:24
    Are those actually broken paths, meaning they cannot be read? Should I edit them all and change them back to c:\...? Seems that the one using the...
    48 replies | 998 view(s)
  • WaxfordSqueers's Avatar
    January 17th, 2020, 17:23
    Looked it up and c:\users seems to be a regular directory. However, c:\Documents and Settings is linked to it to provide older OS's like XP a means...
    18 replies | 292 view(s)
  • WaxfordSqueers's Avatar
    January 17th, 2020, 17:06
    That's seems a bit confusing since both strings.exe and strings64.exe are loaded with non-printable characters yet those files are not skipped when...
    18 replies | 292 view(s)
More Activity