Page 5 of 8 FirstFirst 12345678 LastLast
Results 61 to 75 of 114

Thread: u talk about me :)

  1. #61
    Musician member evaluator's Avatar
    Join Date
    Sep 2001
    Posts
    1,479
    Blog Entries
    1
    Shaolin
    In this case I wrote not about resolving import
    but about tracing app. from start to OEP.
    This is another tracer.
    And finally, why you are unregistered?

  2. #62
    tsehp
    Guest
    Originally posted by Shaolin
    oh, were did I see that RV is supported on Win95?
    Well, a quote from your "Documentation":

    added an auto kernel patcher, so revirgin should work on every win9x past and future versions.
    When someone says Win9x I also think at Win95 anyway.
    yes, you're right.
    But I actually have 3 partitions : win me , win2k server and win xp.
    It's pretty time consuming to make a support on win98 + win2k as long as win98 will disappear. So I wont be supporting for win95, you should better upgrade at least to win98se or win2k pro.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  3. #63
    ^DAEMON^
    Guest
    hi tsehp,

    hmmm maybe u allow me a personal qwestion,
    how old are u ??? (me is just interested)

    (iam 21)

    ^DAEMON^
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  4. #64
    tsehp
    Guest
    I'm older than arthaxerxes which is 14 , and younger than splaj, which is 65
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  5. #65
    tsehp
    Guest
    me too !

    Ok, I'm 33 . Remember my past comment : I'm too old for this ;-)

    Daemon, your dp-teunlock just kills my tracer after 0x10000000 instructions traced...

    I think I'm not gonna sleep tonite...

    Seems like an exception that dp self generates, I'll take a look.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  6. #66
    my new hair style :) +SplAj's Avatar
    Join Date
    Feb 2001
    Location
    Afghanistan, Cuba, Iran, Iraq, Libya, North Korea, Sudan and Syria
    Posts
    373
    I did not know I was this young.
    Carve my name into your arm :)

  7. #67
    ^DAEMON^
    Guest
    hiho some nice news, maybe ur interested

    hmmmm perhaps u figured out that i've implemented an oldschool trick to prevent /protect on..... just disabling the screen for a short amount of time.... so now yesterday i found a way while playing around to stop icedump popping up on accesses to idt u'll get the example soon!

    ^DAEMON^
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  8. #68
    Musician member evaluator's Avatar
    Join Date
    Sep 2001
    Posts
    1,479
    Blog Entries
    1
    Tsehp!
    dp-teunlock.exe very often crashes under debuger. I think,
    here can be some BUG, because DP-Borg2.exe not crashes!
    So forget it and wait for new DP version.
    How about PELOCKnt? Did you solve problem?
    If you want, I will upload here problematic files (35kb zip).

  9. #69
    tsehp
    Guest
    Originally posted by ^DAEMON^
    hiho some nice news, maybe ur interested

    hmmmm perhaps u figured out that i've implemented an oldschool trick to prevent /protect on..... just disabling the screen for a short amount of time.... so now yesterday i found a way while playing around to stop icedump popping up on accesses to idt u'll get the example soon!

    ^DAEMON^
    I already notified theOwl about your /protect on trick, that actually works against 6.024 icedump. he will surely make the necessary changes. I'm still on your #$*&&$ of dp-teunlock
    grrrr ;-)

    pretty good work, instead.

    regards,

    tsehp
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  10. #70
    tsehp
    Guest
    Originally posted by evaluator
    Tsehp!
    dp-teunlock.exe very often crashes under debuger. I think,
    here can be some BUG, because DP-Borg2.exe not crashes!
    So forget it and wait for new DP version.
    How about PELOCKnt? Did you solve problem?
    If you want, I will upload here problematic files (35kb zip).
    thanks but I can't stand the following thing :
    icedump manages to trace anyway, and not rv, and I'm about to locate the guilty instr around 0xf06900 0xf069ff...

    Let me fix my bug and then I'll look at pelock, one thing at a time
    ;-)
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  11. #71
    ^DAEMON^
    Guest
    hehehe sleepless nights ???

    hmmm i already thought that someone will tell the owl about the detection.... on the other hand i don't know if he is able to protect against that! so maybe iam in the next whatsnew.txt *grins*

    there is no need any longer to disable the screen... icedump just doesn't catch sidt instruction! new tricks....
    /me tries to be l33t, hehehe (@ least i try)


    ^DAEMON^

    8 years now of reversing....
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  12. #72
    exit_2
    Guest

    anti-icedump trick

    Hello Daemon,
    EliCZ's DumpXDT accesses GDT (and goes ring 0) and icedump doesn't detect it.
    I think it is maybe one year old prog and I think The_Owl know it.

    Btw: I think it is not good solution switch prog from ring3 to ring0 with methods like IDT, LDT, DIV0 (lame c-dilla's trick) and etc. I think better way is use Kernel32!ord0001 calls (VxD calls) or VxD.

    Exit
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  13. #73
    Musician member evaluator's Avatar
    Join Date
    Sep 2001
    Posts
    1,479
    Blog Entries
    1
    Daemon!
    I simple don't use "/PROTECT" option...

  14. #74
    ^DAEMON^
    Guest
    hi exit!

    haven't seen u a long time ähm i don't switch to r0!
    it's just for detecting sice and icedump.... i don't manipulate therefore somethin....

    (okay but only for anti-bpx)

    ^DAEMON^
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  15. #75
    Musician member evaluator's Avatar
    Join Date
    Sep 2001
    Posts
    1,479
    Blog Entries
    1
    Splaj's revirgined file crashes under
    my win98se. Here I submit more "virgin" one.
    Attached Files Attached Files

Similar Threads

  1. How to directly talk to USB device?
    By cEnginEEr in forum Advanced Reversing and Programming
    Replies: 7
    Last Post: June 3rd, 2009, 09:44

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •