Jump to content

roytam1

Member
  • Posts

    3,601
  • Joined

  • Last visited

  • Days Won

    415
  • Donations

    0.00 USD 
  • Country

    Hong Kong

Everything posted by roytam1

  1. hal.dll hal.dll+8bc7 0x806e6000 0x80706d80 0x00020d80 0x47f3693d 2/4/2008 19:08:45 NDIS.sys NDIS.sys+19530 0xf6d82000 0xf6dae980 0x0002c980 0x48025d03 14/4/2008 03:20:35 ntoskrnl.exe ntoskrnl.exe+79d30 0x804d8000 0x806e6000 0x0020e000 0x51d4d90f 4/7/2013 10:08:15 I got a crash today. The offsets changed are as you posted before. I use /hal= and /kernel= switch for loading modified files.
  2. @blackwingcat, I found that my win2000 VM can't reboot/shutdown when your updates(extended kernel and/or extended core). windows stalls after the progress dialog disappears(mouse cursor can be moved)
  3. As you can see, my windows is localized, so the offsets are different. " - patch ntkrpamp.exe at offset 0x15DF1A from 75 1B to 90 90 " <- in my ntkrnlpa.exe 5.1.2600.6419 it is not 75 1B. There are some calls to ExVerifySuite(x): PAGE:0049CF88 loc_49CF88: ; CODE XREF: IoDeleteSymbolicLink(x)+4EjPAGE:0049CF88 call _ObIsLUIDDeviceMapsEnabled@0 ; ObIsLUIDDeviceMapsEnabled()PAGE:0049CF8D test eax, eaxPAGE:0049CF8F jnz short loc_49CFA2PAGE:0049CF91 push 4PAGE:0049CF93 call _ExVerifySuite@4 ; ExVerifySuite(x)PAGE:0049CF98 cmp al, 1PAGE:0049CF9A jnz short loc_49CFA2PAGE:0049CF9C push ebxPAGE:0049CF9D call _IopDeleteSessionSymLinks@4 ; IopDeleteSessionSymLinks(x)PAGELK:0057550D loc_57550D: ; CODE XREF: MmAddPhysicalMemoryEx(x,x,x)+BEjPAGELK:0057550D cmp ebx, ecxPAGELK:0057550F jnb short loc_5754ECPAGELK:00575511 push 7PAGELK:00575513 call _ExVerifySuite@4 ; ExVerifySuite(x)PAGELK:00575518 cmp al, 1PAGELK:0057551A jnz short loc_575523PAGELK:0057551C mov eax, 1000000hPAGELK:00575521 jmp short loc_575544PAGELK:00575523 ; ═════════════════════════════════════════════════════════════PAGELK:00575523PAGELK:00575523 loc_575523: ; CODE XREF: MmAddPhysicalMemoryEx(x,x,x)+D8jPAGELK:00575523 cmp _MmProductType, 690057hPAGELK:0057552D jz short loc_57553FPAGELK:0057552F push 1PAGELK:00575531 call _ExVerifySuite@4 ; ExVerifySuite(x)PAGELK:00575536 cmp al, 1PAGELK:00575538 mov eax, 800000hPAGELK:0057553D jz short loc_575544PAGELK:0057553FPAGELK:0057553F loc_57553F: ; CODE XREF: MmAddPhysicalMemoryEx(x,x,x)+EBjPAGELK:0057553F mov eax, 100000hPAGELK:00575544PAGELK:00575544 loc_575544: ; CODE XREF: MmAddPhysicalMemoryEx(x,x,x)+DFjPAGELK:00575544 ; MmAddPhysicalMemoryEx(x,x,x)+FBjPAGELK:00575544 mov ecx, _MmNumberOfPhysicalPagesPAGELK:0057554A lea edx, [ecx+esi]PAGELK:0057554D cmp edx, eaxPAGELK:0057554F jbe short loc_57555BPAGELK:00575551 sub eax, ecxPAGELK:00575553 mov esi, eaxPAGELK:00575555 lea eax, [esi+ebx]PAGELK:00575558 mov [ebp+arg_8], eaxPAGELK:0057A4E9 loc_57A4E9: ; CODE XREF: MmCreateMirror()+21jPAGELK:0057A4E9 push 7PAGELK:0057A4EB call _ExVerifySuite@4 ; ExVerifySuite(x)PAGELK:0057A4F0 cmp al, 1PAGELK:0057A4F2 jz short loc_57A515PAGELK:0057A4F4 cmp _MmProductType, 690057hPAGELK:0057A4FE jz short loc_57A50BPAGELK:0057A500 push 1PAGELK:0057A502 call _ExVerifySuite@4 ; ExVerifySuite(x)PAGELK:0057A507 cmp al, 1PAGELK:0057A509 jz short loc_57A515PAGELK:0057A50BPAGELK:0057A50B loc_57A50B: ; CODE XREF: MmCreateMirror()+42jPAGELK:0057A50B mov eax, 0C000026AhPAGELK:0057A510 jmp loc_57A93ASo which should be changed to NOPs?
  4. I used this method (manual patching my latest ntkrnlpa.exe) http://www.overclock.net/t/77229/windows-xp-ram-limit/20#post_21874216 EDIT: added screenshots:
  5. I wonder if we extending use of standalone Hyper-V server (even for daily desktop usage) any sugguestions?
  6. actually you can just treat VM as real machine: install proper network driver and protocol stacks(TCP/IP and/or NetBEUI, MS client network), access network shares, and run desired program over network share.
  7. I wonder if you can provide latest version CHT and CHS files of extended core and kernel? Please do so. I have some win2000 CHT workstations that need extended core and kernel for running newer Firefox.
  8. I wonder if you can provide latest version CHT and CHS files of extended core and kernel?
  9. When I remove the USB stick and boot directly from HD, I got hal.dll missing error. When I boot from USB stick, I got 0x0000007b (0xf789e528, 0xc0000034 BSoD. That's strange as 2nd GUI setup boots fine, but after that it don't boot.
  10. @win2000: Will you make KDW/fcwin for NT 4.0 in the future?
  11. Thanks! And LZMA SDK is 4.49 now. http://sourceforge.net/project/showfiles.p...lease_id=521029
  12. Can you please post a link to the SDK or other sample files? I'll look into it. SDK: http://sourceforge.net/project/showfiles.p...lease_id=422185 the lzma.exe is the program. sample file: http://www.maradns.org/download/1.3/1.3.05...1.3.05.tar.lzma
  13. will UniExtract support .lzma files in future? there's some softwares packed directly with lzma program in lzma sdk.
×
×
  • Create New...
OSZAR »