Jump to content


  • Posts

  • Joined

  • Donations


Everything posted by Dubby

  1. So hello Guys, Some of us might using windows XP as their main OS, and we know that windows XP lack of some cosmetics change that available in vista and later, which makes life more easier. So I created this pack to bring the cosmetics change to xp, those customization are fully functional and usable. And some more interesting customization. Many other customization will comes. Without further ado, here it is: My main galleries is available Here. Download Here Instruction how to install is available inside readme.txt make sure you read it. Really you should read it. If you like it, use it, and want to support the development, consider a Donation. Thanks a lot guys...
  2. CFF explorer->address converter these functions Buried inside kernel... by kernel I mean win32k.sys, if I recall correctly.. Sorry for not replying to your pm, I have been playing with knowndlls hooking for few weeks, (also got several health related issues), but then I dropped it altogether, because it's causing too much hassle... sometimes it got succeed sometimes it doesn't... it might be possible if I go through 'drivers path' (writing kernel module for hooking) I don't know, haven't got time yet.. @TuMaGoNx I have been wondering about the keyed_event variable inside wine, in wine it might be get filled with wine's Ntxxx function, but what about the real xp's Ntxxx function? is it Ok to leave it empty?
  3. #include <Windows.h> #include <winternl.h> #include <stdio.h> typedef struct _CLIENT_ID { PVOID UniqueProcess; PVOID UniqueThread; } CLIENT_ID, *PCLIENT_ID; typedef LONG KPRIORITY; typedef struct _THREAD_BASIC_INFORMATION { NTSTATUS ExitStatus; PVOID TebBaseAddress; CLIENT_ID ClientId; KAFFINITY AffinityMask; KPRIORITY Priority; KPRIORITY BasePriority; } THREAD_BASIC_INFORMATION, *PTHREAD_BASIC_INFORMATION; typedef NTSTATUS (NTAPI *NtQueryInformationThread_proc)( IN HANDLE ThreadHandle, IN THREADINFOCLASS ThreadInformationClass, OUT PVOID ThreadInformation, IN ULONG ThreadInformationLength, OUT PULONG ReturnLength OPTIONAL ); DWORD __stdcall GetThreadID(HANDLE hThread) { static NtQueryInformationThread_proc NtQueryInformationThreadPtr = (NtQueryInformationThread_proc)GetProcAddress(GetModuleHandleW(L"ntdll"), "NtQueryInformationThread"); THREAD_BASIC_INFORMATION threadInfo; threadInfo.ClientId.UniqueThread = 0; NtQueryInformationThreadPtr(hThread, (THREADINFOCLASS)0, &threadInfo, sizeof(threadInfo), 0); return (DWORD)threadInfo.ClientId.UniqueThread; } int main() { printf("%d\n", GetCurrentThreadId()); //uncomment this line on vista or later //printf("%d\n", GetThreadId(GetCurrentThread())); printf("%d\n", GetThreadID(GetCurrentThread())); } @Dibya I assume, you know C... Something like that should work on XP as a GetThreadId replacement... I take no credit to the code.. I found the it as a snippet somewhere a while ago (forgot, sorry..) and modified it a bit...
  4. Hmmm... I was able to boots just fine even with vmware shared folder enabled using kernel rewrite v.4 ... I'm also have full acces into it... It's a vanilla system with usp 5.1 if I'm not mistaken.. Sent from my GT-I8190 using Tapatalk
  5. @NorthAzimuth this may helps: http://support.microsoft.com/kb/318447
  6. I found Bug in your SearchPathA function.. please examine carefully at "result variable" at line 28898, kernel32.cpp, the "result" is initialized with zero thus causes the last param for RtlUnicodeToMultiByteN to zero... maybe you intended to put something else there?
  7. l'm really sorry, currently I'm away from my development PC, where I store the logs. I have also confirmed that the file is indeed corrupt. I managed to extract only a single file. here the log I managed to extract.. the log produced while I'm attaching olly into explorer processes.. hope this helps..
  8. I have tried your kernel... and I was unable to debug anything using ollydbg... so I pick another way... I'm attaching the olly to explorer process. here is the LOG file produced by olly.. there are two LOGs files.. the name of the file should be obvious... I have no idea whether this is useful or not... btw you have done such an impressive work... hope this helps... log.zip
  9. it;s already covered here: the last post..
  10. go to askvg.com. he has a detailed guide on using resource hacker and replacing system files. so sorry I really need to sleep right now...
  11. it's on the MUI files inside your locale folder (what is the correct term?) like EN-US for English US, the folder is reside in the same directory where you found the DLL files. You can open the MUI files with resource hacker and see the dialog there..
  12. I'm sorry but I'm curious, about the merging two files or maybe more. so the main goal is merging the inf(s) and collecting all the listed files into single updates, right? so the structure is exactly the same of each update? is there any "qfe" or "gdr" branch like the XP ones? is it different from service pack? so why we're not write a program/software to automate it..? err sorry just my personal thought..
  13. Just load it into Paint included with Windows (desktop) and save it as BMP. BMP images need alpha channels for transparency when PNG doesn't therefore doing that will remove the transparency. Oh well. Hopefully SiB will support PNG later. just use "alpha image convertor" for converting PNG -> BMP and vice versa for keeping the alpha channel.. google it with the exact phrase including the quotes. It should be somewhere in the internet...
  14. hello... Actually I have take a look on it.. but unfortunately I have no win2k system ATM (its still being repaired..),, and I have only vc2010 express MASM32 package.. so I just tried to recompile them.. the first is csrsrv... I got it succeed.. but when I tried to recompile basesrv... it complain that I'm missing for some import from csrsrv, I have copied the produced LIB from csrsrv... but still did not succeed.... because the basesrv need functions from csrsrv as Stdcall... because of curiosity I open up the csrsrv .lib with Hex editor then tried to search the missing export.. And I don't know is it right or not but adding extern "C" before exported function solve my problem... --> the produced lib contain correct export lists... since I have not programming in C/C++ for a long time, I almost forgot the languages.. (I'm still trying to starting over) well I don't know its help or not... anyway you have done such a great job...
  15. Dubby

    Release 7

    Hello again.. it's Already done and posted.. just search for 32-bit icon patch for regedit... in XPize subforum..
  16. Dubby

    Release 7

    Hi guys., it's easy to update the wordpad toolbar,, you just need to replace the bitmap with 32-BIT ones..
  17. Sorry for late answer... It's already described here
  18. As I Promised yesterday ,,, click here for detailed how to....
  19. Hello all.... Most of us knows that when we right click the drive and choose properties there will always a pie chart (except you've remove them...hehe..). I don't like the color of it... So I manage to change it... Searching it everywhere and I found this thread about 1,5 years ago... Still couldn't solve my problem though ... But yesterday... It inspiring me.. then I start searching through system file and WOW I Found It.....!!! here is my mod... Here is what to do.... open shell32.dll with any hex editor... (you better copy it somewhere else before open it...) and then... [Pie chart] Original 90 00 00 FF 00 FF 00 FF 00 00 00 80 00 80 00 80 00 Replace with 90 0F 63 FF 00 1B A9 1B 00 01 31 8C 00 01 57 01 00 [Free Space] Original 68 FF 00 FF 00 EB 09 Replace with 68 1B A9 1B 00 EB 09 [Used Space] Original 68 00 00 FF 00 FF 71 Replace with 68 0F 63 FF 00 FF 71 Note: search the original hex code and replace with reserved code... Replace Back to system32 folder... (use replacer for the easiest way... but it's better to make backup first...) Done.... that's it.... Enjoy.... B) Huge thanks to Mr. Peteski... for his hex color code and his color suggestion.... but the rest I did it myself..... PS: sorry for my (bad) english....
  20. Hello,, Firstly sorry for such a bump.. Actually the color of the pie chart can be altered.. But I don't know about how to change the antialiazing think.. And yes it paints itself using gdi.. The color code is not located in explorer.exe but in shell32,, I have change the color of my own pie chart.. Maybe tomorrow or the day after tomorrow, when I got my computer, I will show you how it can be done.., PS: Sorry for my bad English..

  • Create New...