PDA

View Full Version : IsDebuggerPresent plugin


Anonymous
June 12th, 2003, 01:10
Hi
I have done this little MASM plugin.
I hope it will be useful

http://membres.lycos.fr/svtc/Progs/IsDebuggerPresent.rar
("http://membres.lycos.fr/svtc/Progs/IsDebuggerPresent.rar
")

SV

TBD
June 12th, 2003, 01:40
very nice work SV. two things:
* use for user information texts the OD provided function Addtolist (not critical messages) or Message(for critical) instead of MessageBox
* use HTML/PNG instead of RTF to decrease the size

and then i will put the plugin on OD Stuph page

1bitshort
June 12th, 2003, 02:06
That URL doesnt work - file not found?

TBD
June 12th, 2003, 02:11
use http://membres.lycos.fr/svtc/ ("http://membres.lycos.fr/svtc/") instead the direct link

1bitshort
June 12th, 2003, 02:22
Ok, it does work, you just have to be patient and wait for the error page to clear

sv
June 12th, 2003, 02:46
Flash & Error are used now (exept About stuff).
HTLM/PNG too

SV

TBD
June 12th, 2003, 02:57
excellent SV. i will update the OD page in about 1 hour.
till then here it is a mirror - SV_IsDebug11.zip ("http://ollydbg.win32asmcommunity.net/stuph/SV_IsDebug11.zip")

ps. i hope you dont mind that i changed to zip

also added a simple test program

tulipfan
June 15th, 2003, 18:47
gr8 work!

sv
June 16th, 2003, 00:46
Hi
Thanks tulipfan.
TBD : could you update with 1.3 ?
Thanks all for testing and finding all theses bugs !!
I'm admiring all freeware author like Oleh or Ketilo with his RadAsm (it's a big work).

TBD
June 23rd, 2003, 00:45
sv: sorry for the delay on updating to 1.3
btw, what are the changes ? do you have a history ?

thanks

Anonymous
June 23rd, 2003, 18:49
Crashes when i hit hide on 98se 1.09c

module ISDEBUG.DLL 01b7:1000127d

EAX=00000000 CS=01b7 EIP=1000127d EFLGS=00210202
EBX=00000000 SS=01bf ESP=0077ee58 EBP=0077ee60
ECX=0000e0c0 DS=01bf ESI=000001b9 FS=370f
EDX=00000000 ES=01bf EDI=0077f574 GS=2b2f

Byte CS:EIP:
ff b0 ac 03 00 00 5b 83 c3 30 6a 01 6a 04 53 68

Stackdump:
00000000 10001172 0077ee7c 0049230e 00000000 00000000 00000000 000085e4 0000e0c0 0077f56c 0043239f 00000000 0000e0c0 00000000 0077f574 000085e4

Anonymous
June 23rd, 2003, 23:09
if(windows98 has crash many times )
{use WindowsXP;

}

sv
June 24th, 2003, 00:31
Hi

It seems that you haven't loaded a process before hiding.
I haven't 98 here, i'll check.

sv
June 24th, 2003, 00:40
Hi TBD

Thanks for your update.
No history for the moment.
I have just added Option and fixed bugs and bugs and .....!!!!!!!

sv
June 27th, 2003, 08:52
V1.4
! crash when nothing loaded fixed
+ new loading detection. Now, if exe isn't fully loaded, it sleep again.
You can use it with small sleep time value (500 ms).
http://membres.lycos.fr/svtc/ ("http://membres.lycos.fr/svtc/")

Tacman
June 28th, 2003, 23:59
Thanks. Very nice work.