View Full Version : i need help - NewKernelHandler.pas ( changing strings 46 )
maplenews
27th May 2006, 21:21
i have no clue what do to at this point i can't even find VQE and those other small words. and do i change the words with the T? ex. TStopDebugging do i change it into Tchangenumber? (number = the real number it is i forgot it) mines the newer one so have a look and see if u can help me on this one like tell me what to change and which not to change. and i got 50 strings instead of 46 so i left the 4 strings behide.
You're screwed mate. (ctrl + f is a good idea for finding things...) You don't change those words with a 'T'. There's a total of fifty strings that are in dbk32.dpr, but drkz's tut only has 46 of them. I think it'd be a good idea to change all fifty.
hard trying but
28th May 2006, 03:10
You're screwed mate. (ctrl + f is a good idea for finding things...) You don't change those words with a 'T'. There's a total of fifty strings that are in dbk32.dpr, but drkz's tut only has 46 of them. I think it'd be a good idea to change all fifty.
I dont get it,i also only have 46 strings,Ill post them to show you guys.
HERE------> IN DBK32
-so if i only got 46,the one from the tutorial,where do i have to find the others,PLZ HELP ME
exports VQE;//VirtualQueryEx;
exports OP;//OpenProcess;
exports OT;//OpenThread
exports NOP;//NtOpenProcess;
exports RPM;//ReadProcessMemory;
exports WPM;//WriteProcessMemory;
exports VAE; //VirtualAllocEx
exports CreateRemoteAPC;
exports ReadPhysicalMemory;
Exports WritePhysicalMemory;
exports GetPhysicalAddress;
exports GetPEProcess;
exports GetPEThread;
exports ProtectMe;
exports UnprotectMe;
exports IsValidHandle;
exports GetCR4;
exports GetCR3;
exports SetCR3;
exports GetSDT;
exports GetSDTShadow;
exports setAlternateDebugMethod;
exports getAlternateDebugMethod;
exports DebugProcess;
exports StopDebugging;
exports StopRegisterChange;
exports RetrieveDebugData;
exports GetThreadsProcessOffset;
exports GetThreadListEntryOffset;
exports GetDebugportOffset;
exports GetProcessnameOffset;
exports StartProcessWatch;
exports WaitForProcessListData;
exports GetProcessNameFromID;
exports GetProcessNameFromPEProcess;
exports GetIDTCurrentThread;
exports GetIDTs;
exports MakeWritable;
exports GetLoadedState;
exports ChangeRegOnBP;
exports DBKSuspendThread;
exports DBKResumeThread;
exports DBKSuspendProcess;
exports DBKResumeProcess;
exports test;
exports useIOCTL;
alecto
28th May 2006, 07:12
it is the old source you use if you only have 46 strings, go and download the latest
hard trying but
28th May 2006, 07:32
it is the old source you use if you only have 46 strings, go and download the latest
can u post the link to the latest plz,i cant seem to find it and my search dosent work somehow
vBulletin® v3.8.4, Copyright ©2000-2009, Jelsoft Enterprises Ltd.