View Full Version : IsDebuggerPresent plugin
Anonymous
June 12th, 2003, 01:10
Hi
I have done this little MASM plugin.
I hope it will be useful
http://membres.lycos.fr/svtc/Progs/IsDebuggerPresent.rar
("http://membres.lycos.fr/svtc/Progs/IsDebuggerPresent.rar
")
SV
TBD
June 12th, 2003, 01:40
very nice work SV. two things:
* use for user information texts the OD provided function Addtolist (not critical messages) or Message(for critical) instead of MessageBox
* use HTML/PNG instead of RTF to decrease the size
and then i will put the plugin on OD Stuph page

1bitshort
June 12th, 2003, 02:06
That URL doesnt work - file not found?
TBD
June 12th, 2003, 02:11
use http://membres.lycos.fr/svtc/ ("http://membres.lycos.fr/svtc/") instead the direct link
1bitshort
June 12th, 2003, 02:22
Ok, it does work, you just have to be patient and wait for the error page to clear

Flash & Error are used now (exept About stuff).
HTLM/PNG too
SV
TBD
June 12th, 2003, 02:57
excellent SV. i will update the OD page in about 1 hour.
till then here it is a mirror - SV_IsDebug11.zip ("http://ollydbg.win32asmcommunity.net/stuph/SV_IsDebug11.zip")
ps. i hope you dont mind that i changed to zip
also added a simple test program
tulipfan
June 15th, 2003, 18:47
gr8 work!
Hi
Thanks tulipfan.
TBD : could you update with 1.3 ?
Thanks all for testing and finding all theses bugs !!
I'm admiring all freeware author like Oleh or Ketilo with his RadAsm (it's a big work).
TBD
June 23rd, 2003, 00:45
sv: sorry for the delay on updating to 1.3

btw, what are the changes ? do you have a history ?
thanks
Anonymous
June 23rd, 2003, 18:49
Crashes when i hit hide on 98se 1.09c
module ISDEBUG.DLL 01b7:1000127d
EAX=00000000 CS=01b7 EIP=1000127d EFLGS=00210202
EBX=00000000 SS=01bf ESP=0077ee58 EBP=0077ee60
ECX=0000e0c0 DS=01bf ESI=000001b9 FS=370f
EDX=00000000 ES=01bf EDI=0077f574 GS=2b2f
Byte CS:EIP:
ff b0 ac 03 00 00 5b 83 c3 30 6a 01 6a 04 53 68
Stackdump:
00000000 10001172 0077ee7c 0049230e 00000000 00000000 00000000 000085e4 0000e0c0 0077f56c 0043239f 00000000 0000e0c0 00000000 0077f574 000085e4
Anonymous
June 23rd, 2003, 23:09
if(windows98 has crash many times )
{use WindowsXP;
}
Hi
It seems that you haven't loaded a process before hiding.
I haven't 98 here, i'll check.
Hi TBD
Thanks for your update.
No history for the moment.
I have just added Option and fixed bugs and bugs and .....!!!!!!!

V1.4
! crash when nothing loaded fixed
+ new loading detection. Now, if exe isn't fully loaded, it sleep again.
You can use it with small sleep time value (500 ms).
http://membres.lycos.fr/svtc/ ("http://membres.lycos.fr/svtc/")
Tacman
June 28th, 2003, 23:59
Thanks. Very nice work.
Powered by vBulletin® Version 4.2.2 Copyright © 2019 vBulletin Solutions, Inc. All rights reserved.