Page 1 of 2

Redllar is coming back

Posted: Tue Nov 02, 2010 8:41 am
by crownixx
..and he is now continuing to develop JauntePE :D

https://sites.google.com/site/jauntepe/latestnews

There is also the latest release of 0.5.0 JauntePE runtime library
IMPORTANT NOTE:
The last change log bullet is VERY important if you wish to use any of these
dlls with any configs that make use of the [HookExclude], [HookInclude],
[HookInitExclude], or [HookInitInclude] sections.

- Quick Use Notes -
o these are the latest jauntePE runtime dll 0.5.0 development builds
o they each go into their same-named subdirectory in JauntePE\Runtime\jauntePE
o once you move them there, rename each to jauntePE.dll
o they should be usable as-is except as noted above

- Change Log -
o to fix some of the issues when running on Vista or newer platforms
o the open and create registry key api hooks now return system registry
handles to the caller, whenever an equivalent system registry key exists
o 6 ntdll.dll registry api function hooks were added, that convert JPE open
registry key handles to system registry handles, whenever one exists
o the above 2 changes fix the "cannot use the File->Open dialog box on Vista
or newer" issue, but does not fix any other known file system related issue
o the above 2 changes probably also fix any other non-known issues that are
caused by creating and opening registry keys via win32 calls followed by
use of those open key handles in calls directly to the native (ntdll.dll)
api registry functions - this coding approach was seen in the Vista system
shell and ole runtimes, but may also exist in other system runtimes as well
as within application specific executables, or anywhere else for that matter
o the underlying causes for the file system related issues have been located
within the Vista shell and ole system runtimes, but the changes made in them
are significant enough that no reasonable workaround has been found yet

o the technique used to store JPE open registry key handles was changed to
boost performance and to prepare for future multi-process use, at the cost of
slightly higher memory use and a very slight chance that the maximum supported
number of simultaneously open registry keys will be exceeded, causing any
further requests to fail until previously open registry keys are closed

o the latest (and possibly last 2.x version) 2.x version of MadCodeHook was
used for the builds - this version supposedly allows for proper injection of
the 32 bit JPE runtime into a 32 bit process while running on a 64 bit
platform, but no testing was done to verify that claim

o support was added for a new high-level registry key introduced with Vista,
HKEY_CURRENT_USER_LOCAL_SETTINGS

o the fake drive plugin was enhanced and several bugs were fixed, mainly in the
virtual drive functionality (virt drive contents are not backward compatible)

o a temporary workaround was put into place to fix a bug that creates one empty
and non-named section header in a portable registry that was used in-memory

o the basic log output now includes additional info regarding timing per hooked
api function call and # of calls redirected per hooked api function - there's
also info indicating the # of successfully hooked api functions versus the
# of requested api functions to be hooked - an unsuccessful hooks list is
also output as needed

o a bug was fixed that could cause the logging version's ms (millisecond) output
numbers to not be shown with their actual ms values, depending on the system's
performance counter frequency value

o _lopen, CreateFileA/W, and OpenFileA/W hooks now all process their requests
the same way

o the extra code specific to 9x platforms support was removed

o support for plugin-specific api hooked function names was added - current
supported prefixes are drv (for fake drive), prc (for process redirection),
reg (for registry redirection), and wfs (for file system redirection), e.g.,
drvCreateFileW, prcCreateProcessW, regRegCloseKey, and wfsCreateFileW - the
non-prefixed names are no longer supported so any affected configs will need
to be modified accordingly
Cheers

Re: Redllar is coming back

Posted: Tue Nov 02, 2010 8:54 am
by joby_toss
I don't believe it !!!!!!!!!!!!!!!!
Yupiiiiiiiiiiiiiiiiii !!!!!!!!!!!!!!!!
Best news in a loooooong time for me !!!!!!!!!!!!

Thank you Redllar!!!!!!!!!
Thank you Crownixx!!!!!!!!!

Re: Redllar is coming back

Posted: Tue Nov 02, 2010 12:07 pm
by Checker
Very good news :!:
Let's check my calendar ... no, it's not my birthday and it's not christmas ... but it feels like :D

Re: Redllar is coming back

Posted: Tue Nov 02, 2010 5:43 pm
by Andrew Lee
I am normally not into profanity, but this is f**king fabulous news!!! :D

Re: Redllar is coming back

Posted: Tue Nov 02, 2010 7:17 pm
by usdcs
Welcome back!

-- Dan

Re: Redllar is coming back

Posted: Tue Nov 02, 2010 11:13 pm
by Onesimus Prime
I've been inactive here for a while ("RL," as they say, interferes...), but just stopped by--and what a day to do so!

Wow!!!

Many thanks to Redllar for this amazing news! :D :D :D

And thanks also to crownixx, Napiophelios, et al who did so much work with JPE in the meantime! Perhaps it's people like you whose efforts helped restore Redllar's faith in the portable freeware community? Who knows. But I sure won't look a gift horse in the mouth! (admittedly a rather odd English idiom, but I think it fits the situation...)

Re: Redllar is coming back

Posted: Tue Nov 02, 2010 11:44 pm
by GeddichNixan
JauntePE is a great idea skilfully turned into a piece of software which even dummies (like me) can use getting great results even in the alpha stage of the software. It were sad if this project would have died.

I truly admire the programming skills and expert knowledge of Redllar and all those who kept JPE alive during Redllar's absence. Thank you all for keeping up the good work, expecially to crownixx and Napophelios for that great "unofficial" site and to Redllar for coming back!

Re: Redllar is coming back

Posted: Wed Nov 03, 2010 5:04 am
by -.-
Andrew Lee wrote:I am normally not into profanity, but this is f**king fabulous news!!! :D
i feel the same way :d

Re: Redllar is coming back

Posted: Wed Nov 03, 2010 7:55 am
by m^(2)
I lost personal interest in JauntePE (because it's not portable. I mean cross-platform portable), but nontheless it's a big news and I'll be gladly following developments. It was sad to see JPE dead, nice that it's resurrected. Wish it good luck.

Re: Redllar is coming back

Posted: Thu Nov 04, 2010 3:30 pm
by Firewrath
*steals a phone* ^-^
Awesome!

Re: Redllar is coming back

Posted: Thu Nov 04, 2010 5:51 pm
by crownixx
Thanks also to Andrew Lee for providing the JauntePE forum.

In redllar's email to me, he give a "roadmap" overview of JauntePE. For my point of view based from the "roadmap", there will be more great news to come. So stay tune...

But one is for sure is the upcoming version of 0.5.0. We wish JPE to be easy to use for new user but at the same time convenient to novice user too. So, redllar has a small request asking opinion for that. Currently, I'm preparing a new post for this. Hope everyone can participate and share your ideas.

Thank you guys for your support.

Re: Redllar is coming back

Posted: Tue Nov 09, 2010 4:22 pm
by fang-face
WHAT? WHAT? :shock:

Yippiiiiiiiiiiiiiiiiiiiiiiiiiieeeee!!!!!!!
Christmas, easter, birthday and new year's eve at the same day!!!
:D :D :D :D :D
Hoorayyyyyy!!

joby_toss wrote: Yupiiiiiiiiiiiiiiiiii !!!!!!!!!!!!!!!!
Best news in a loooooong time for me !!!!!!!!!!!!

Thank you Redllar!!!!!!!!!
Thank you Crownixx!!!!!!!!!
... and also to the others who contributed to keeping JPE alive.
Onesimus Prime wrote:Wow!!!

Many thanks to Redllar for this amazing news! :D :D :D

And thanks also to crownixx, Napiophelios, et al who did so much work with JPE in the meantime! Perhaps it's people like you whose efforts helped restore Redllar's faith in the portable freeware community? Who knows.
usdcs wrote:Welcome back!

Re: Redllar is coming back

Posted: Thu Nov 18, 2010 10:05 pm
by crownixx
Guys, more shocking news. :shock:

Any comment :?: :D

Re: Redllar is coming back

Posted: Thu Nov 18, 2010 10:36 pm
by joby_toss
redllar over at sourceforge wrote:As you can see, JPE is now an open source project. That means a move away from the previous versions use of the MadCodeHook hooking library, to new dll injection and api hooking methods that are now part of JPE proper.
This should be a very good thing!
I'll start posting at the project's support forums now, also. :)

Re: Redllar is coming back

Posted: Fri Nov 19, 2010 1:12 pm
by Andrew Lee
Is it Christmas already?! This is probably the best news one can wish for JauntePE! Long live JauntePE!