XProfan

- Page 2 -

Habs straight once more Downloaded - by me is the EXE there. can the time anyone else again to check on?

03/23/07 ▲

Nico
Madysa

Aargh, I nehm everything back. I Have The EXE at In-a-Extra-Ordner-move overlooking, there the Explorer The EXE same eingeordnet has, sorry!

Nico Madysa

03/23/07 ▲

so, place now time following statement on:

1.) Speicherbereiche Pipe.pcu 2GB behaviour itself under Wiondows95/98/ME just as How NT-based system.
a) virtual Adressen in unterschiedlichen Prozessen verweisen on The equal real Speicheradressen.
b) The memory becomes in each Process likewise gemappt. becomes one Speicherbereich in a Process allocated, appear this too in all others Prozessen.

the means: becomes in DLL under windows95/98/ME of a Process in Speicherbereiche Pipe.pcu 2GB loaded, are its Exportfunktionen not only in the actually Process, separate too in all others ongoing Prozessen over Call aufrufbar, though there no lever on The DLL exists.
=>
under NT-based Systemen counts for Speicherbereiche Pipe.pcu 2GB:
any there implemented Schreibaktionen attend in virtual Adressbereich all others processes the Systems.

so correctly.?

03/29/07 ▲

Nico
Madysa

momentum, is the, if I main memory over 2 GB have, can I under designed terms a DLL Call, oghne tappt im dunkeln opened to have?

Nico Madysa

No the has nothing with the Size the physical available stehenden Rams To do.

Hello Nico...

time integrally simply:
windows verschafft each Process quasi a own Speicherbereich with of/ one Size of in the rule 4GB. The upper area this virtual Speichers becomes of Betriebsystem used (there go to that example driver loaded); the User has usually none grabbed hereon, so the Betriebsystem sure runs.
The downstairs area is the User zugänglich (Module loading, variables memory etc.) and can read and machine go.
under windows95/98/ME are 3GB the User zugänglich, NT based Systemen (NT/2000/XP/Vista) in the rule 2GB.

Läd now windows under windows95/98/ME one Module in this area of 1GB Size, the the User there More zusteht as NT, standing the loaded Module (DLL) too whom Prozessen available, The tappt im dunkeln none loaded having!

The Sachverhalt is extreme simply over ModHunter and TNT nachzuvollziehen - witty story

If I right have, might there also The most Fehlerquelle Windows95/98/ME lying.
.
writes one processes inadvertently in this area, would this then too under Umständen to that crash or hang the WindowsExplores and so the Betriebsystems lead

Nico
Madysa

OK, thanks for explanation.

P.s.: because of your inquire in the RGH-Forum: by me runs the code without Problems through, what your supposition zustätzlich sustain might.

Nico Madysa

04/02/07 ▲

time to that Abschluss here the proof, that the really so is. only windows95/98/ME!

code 1:
The in the Downlod enthaldene code Module loading.prf enthalt The of me something modified Include of Sebastian king MemoryModule.Inc . Modifiziert have I here The function LoadLibraryM and I there among other things whom undokumentierten Flag $8000000, whom it only under windows95/98/ME gives, eingefügt. this Flag bewirkt, the the virtual memory for the Module in the area between 2GB and 3GB provided becomes.

code 2:
The code the DLL, The of code 1 loaded go should (Testmodul.dll), finds one in the File Testmodul.prf . here becomes simply a variable circa 1 increased and the worth in the File C:TEST.INI stored, if The function _increase@0 called becomes..

code 3:
The code Increase_Variable.prf :
into Inputfeld must here The address the function _increase@0 association go. thereafter results simply one Call on these address.

Voila: Variable increased itself, though code 3 The DLL Testmodul.dll none läd!
... and the increased itself naturally too, if Increase_Variable.prf with this address called and is Module loading.prf not runs.

Fazit:
1.) The best Possibility, circa into windows9x/ME system a DLL To injizieren, is about one Memory-Module the in denSpeicherbereich between 2GB and 3GB loaded becomes.

2.) an in this area loaded DLL diving mitsammt their Datenbereich very so in each others Process on, is there but invisible, there no lever on these DLL exists.

3.) In Speicherbereiche of 2GB To 3GB go under windows9x/ME in the rule important Systemdlls and Systemstrukturen (well too The TEBs) loaded. writes one fehlerhaftes Program in these reaches, are schwere Systemabstürze vorprogrammiert!
under NT-based Systemen becomes this area complete of Treibern used - d.h. the User can't in these reaches write - what the system ingesammt stabiler power.

4.) The User can under windows9x/ME with VIrtualAlloc with Parameter 3 whom Flag $8000000 use, circa data Specifically in this shared Speicherbereich To loading.

HC.zip	652 kB

Kurzbeschreibung:	Testcodes

Hochgeladen:	05/06/07

Downloadcounter:
		Download

Frank
Abbing

everything interestingly, but unfortunately snow of yesterday. These Betriebssysteme smell already something severe...

- Page 3 -

Frank Abbing

everything interestingly, but unfortunately snow of yesterday. These Betriebssysteme smell already something severe...

whether the kalter Kaffe or not, depends to that a of it ex, with welchem Betriebsystem one operates - to that others but too of it, what do would like. I personally need the as basis for a thing under 2000/XP.

I wanted to these thing here only yet close and keep soetwas soon anyhow for me.

wants hoping, you not alzusehr so genervt to have.

Tschau.

Frank
Abbing

I wanted to these thing here only yet close and keep soetwas soon anyhow for me.

If you mean.

In others Threads are you not so begierig, tappt im dunkeln abzuschliessen. an PM wait already since Meet, bislang unregarded. but i'm the mittlererweile already alike. I have you often and long enough helped, during You me only always with seltsamen, nichtssagenden hints weitergeholfen have. but - How said - pfeiff on it...