Results 1 to 3 of 3

Thread: Phantom of XP Ring0 Tracer

  1. #1
    Musician member evaluator's Avatar
    Join Date
    Sep 2001
    Posts
    1,524
    Blog Entries
    1

    Phantom of XP Ring0 Tracer

    yah, i want remember our old days. fighting for finding OEP, praying on magic tracing tools, Ring0 tracer.. i am lazy, but hope, i will force meself to write memos about it.. here i will try start draft :) video in attachment
    Attached Files Attached Files

  2. #2
    Musician member evaluator's Avatar
    Join Date
    Sep 2001
    Posts
    1,524
    Blog Entries
    1
    forming memo topics:
    1. helping tsehp with RVtracer, installing this xp system..
    2. fight with SYSENTER magic. but we can back to INT2E instead..
    3. tsehp leaves scene.. 'amd jumps -20h'
    4. discovering m$ SYSENTER trick
    5 thus, INTEL not documented capability of DF?
    6. writing tracer code inside BEEP.SYS with HIEW about half year. how work with tracer without program?! myKernel32 :)
    7. cmon, lets start learn some masm using
    8. tracer traces all, SYSENTER friendly smiles, as it should. why m$ did that?
    9. after death breath from terminated process..
    10. unexpected exception from debug regiters..
    Last edited by evaluator; April 15th, 2020 at 09:27.

  3. #3
    Teach, Not Flame Kayaker's Avatar
    Join Date
    Oct 2000
    Posts
    4,154
    Blog Entries
    5
    That raises questions. You were single step tracing in kernel mode? Why in beep.sys? How did you accomplish that? Logging trace?

    Memo topics.
    Softice Backtrace Buffer was good for tracing, buffer dumper better.
    Remember beta-testing Revirgin Win95/98, 2001...led to deluge of asprotect dumping threads past the point of ad nauseam.
    Kernel mode programming with Masm32, disappearing down a rabbit hole.
    Bowing to Windbg.

Similar Threads

  1. DotNET Tracer
    By Kurapica in forum Tools of Our Trade (TOT) Messageboard
    Replies: 13
    Last Post: February 2nd, 2012, 18:05
  2. dotNET Tracer 0.6
    By Kurapica in forum Tools of Our Trade (TOT) Messageboard
    Replies: 3
    Last Post: June 17th, 2009, 05:20
  3. dotNET Tracer 0.5
    By Kurapica in forum Tools of Our Trade (TOT) Messageboard
    Replies: 0
    Last Post: June 14th, 2009, 15:37
  4. FPU Tracer v0.0.1 released
    By OpenRCE_j00ru in forum Blogs Forum
    Replies: 0
    Last Post: January 28th, 2008, 22:11
  5. RV Tracer (not for the apis...)
    By Manko in forum Tools of Our Trade (TOT) Messageboard
    Replies: 4
    Last Post: December 4th, 2002, 02:27

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •