Content Type
Profiles
Forums
Events
Everything posted by ABCDEFG
-
I thought we talk about Windows. If I'd care about DOS i would install DOS. Usually i don't need more then one dos box, maybe two or trhee sometimes and that's perfectly stable. Anyway, i will test it, later.
- 65 replies
-
- 512MB
- NO PATCHING
-
(and 3 more)
Tagged with:
-
Nothing was modified, everything is stable. For the Second and Third Machine 1022MB is usable The Third Machine have VIA RAID driver...
- 65 replies
-
- 512MB
- NO PATCHING
-
(and 3 more)
Tagged with:
-
Yes, i have that. First Machine: CPU: Intel Pentium III 450MHz Mobo:Abit BH6 v1.1 RAM:768MB SDRAM GPU: Hercules 3D Prophet 9700 PRO Sound: SB AWE64 Gold HDD: Samsung 20GB Second Machine: CPU: AMD Sempron 2400 Mobo: Matsonic MS8167C v7.0 RAM: 1GB DDR400 @333 GPU: GeForce 6800GT 256MB AGP Sound: CMI8738SX 4-ch HDD: Maxtor 120GB Third Machine: CPU: Intel Core2duo E6400 Mobo: ASRock 4CoreDual-VSTA RAM: 1GB DDR400 (2x512 - Dual Channel) GPU: GeForce 7800GT 256MB PCIE Sound: Sound Blaster Live! SB 100 HDD: WD 640GB SATA
- 65 replies
-
- 512MB
- NO PATCHING
-
(and 3 more)
Tagged with:
-
Windows 9X/ME - USB 2.0 Webcams and Webcam software
ABCDEFG replied to 98SE's topic in Windows 9x/ME
I have Microsoft LifeCam VX-500 it don't need any drivers or additional software, it's Plug&Play works in win98/98se/me/2k/xp... -
^ 1. It depends on which Kex version is in use, i use v4.5.2015.9 and i check this manually. 2. Dependency Walker shows all missing functions but some of them are "implemented" in Kex, but Dependency Walker don't "know" that because these "implemented" functions are "delivered" by API Hooking.
-
Misssing functions: IPHLPAPI.DLL CancelIPChangeNotify GetAdaptersAddresses KERNEL32.DLL CreateTimerQueueTimer DeleteTimerQueueTimer GetGeoInfoW GetUserGeoID SetProcessDEPPolicy SECUR32.DLL InitSecurityInterfaceW LsaEnumerateLogonSessions LsaFreeReturnBuffer LsaGetLogonSessionData
-
Win95 do not tolerate the bad code, so don't search for errors on system's side. I noticed that when i move mouse over toolbar it causes that application redraw everything, it's a sign that there is some bad code in.
-
Yo getting this BSOD because app is not properly modified. Here is what you should do: 1. Redirect GetLongPathNameA To GetShortPathNameA and save changes. 2. Redirect TrackMouseEvent (USER32.DLL) To _TrackMouseEvent (COMCTL32.DLL) and save changes. 3. Now open the app in HEX editor and rename GetLongPathNameA to LocalCompact. 4. rename TrackMouseEvent to PaintDesktop and save changes.
-
Probably because 1. Did you use new DLL? http://www.msfn.org/board/applications/core/interface/file/attachment.php?id=41719 2. When you add dll to app did you rebuild Import Table?
-
Ok. Download the DLL again. 1.Import it to app. 2.Open app in OllyDbg. 3.Search for: All referenced text strings. 4. Find text: "Software\Foxit Software\Foxit Reader\DockState_PRO". 5. Double click on first line (to follow in disassembler). 6. Look around and you will see this "MOV EDI,DWORD PTR DS:[<&ADVAPI32.RegQueryValueExA]". 7. Redirect it to MyRegQueryValueExA. 8. Search for: All referenced text strings. 9. Find text: "Software\Foxit Software\Foxit Reader\DockState_PRO". 10. Double click on second line (to follow in disassembler). 11. Look around and you will see this "CALL DWORD PTR DS:[<&ADVAPI32.RegSetValueExA>]". 12. Redirect it to MyRegSetValueExA. 13. Save all changes. Start the app. Enjoy!
-
Use CFF Explorer to import the DLL. Use fileinsPEctor only to find addresses...
-
Try this MyAdvapi.7z
-
In fact, it's very easy to solve this problem, these are some basic things. Just need to intercept these functions: RegSetValueEx And RegQueryValueEx Write your replacement fuctions for which it will check the function arguments IF (lpValueName is NULL or Empty String) AND dwType is REG_BINARY Then specify some name for lpValueName e.g "MyBinaryData" and call the RegSetValueEx/RegQueryValueEx with your arguments. ELSE Call the RegSetValueEx/RegQueryValueEx with application defined arguments. Put these replacement functions into DLL, import the DLL in your application and redirect aplication calls to RegSetValueEx/RegQueryValueEx to you new replacement functions as i show in my video -> and problem is solved.
-
MSDN -> RegSetValueEx:
-
I just cheked it about 1hour ago and i saw that it does not use that function from user32.dll so, forward exported functions and additional dlls are not needed for foxit reader.
-
Of course i am sure! And i don't know why you need that dll1.dll for foxit reader? It does not use TrackMouseEvent from user32.dll it uses it from comctl32.dll
-
Probably because you change size of application. Overwrite name letter by letter! Do not use insert / copy&paste method! And it must be NULL terminated string 54 72 61 63 6B 4D 6F 75 73 65 45 76 65 6E 74 00 00 - TrackMouseEvent 50 61 69 6E 74 44 65 73 6B 74 6F 70 00 00 00 00 00 - PaintDesktop
-
That's because missing function is still in the imports list, you need to "open" your application into HEX editor and rename this missing function to name of some unused function from user32.dll for example "PaintDesktop" or some other unused function, and that will do the trick.
-
1. Yes, because my dllfile have no imports or exports it's just dll skeleton, so if you want to add forward exported fuctions to it you have to import target dll to it, otherwise it would not be able to redirect calls to target dll. 2. I think it's not necessary to do this forward exporting stuff, it wold be enough to just rename win98 user32.dll and then import it to your application and then just do for your missing functions this what i show in my video...
-
OK, @NoNameNeeded tried to force his Application not to call function from user32.dll but to call function from new imported dll. Now, in this video you can see how to do that - http://s000.tinyupload.com/index.php?file_id=95407984716895035602 Good luck!
-
@NoNameNeeded Of course it complains about a missing function because it have different address and procedure that call this fuctuion have to be patched. For example: Procedure from app call MesageBoxA and it is at 000ABCDEFG But function in your impoted module is at defferent address e.g. 000ABCDEFH So you need to change that address in procedure that calls it. And please be patient, i will make some videos as soon as i find some free time.
-
@NoNameNeeded 1. The tool is not my, but it is very useful and free. Other tool mentioned is commercial. 2. Of course it can not be empty file and i think you should read this: https://en.wikipedia.org/wiki/Portable_Executable and https://en.wikipedia.org/wiki/Dynamic-link_library 3. here is small dll file for you in attachment... dllfile.7z