
George King
MemberContent Type
Profiles
Forums
Events
Everything posted by George King
-
@D.Draker Don't use vLite on 7. Use NTLite.
-
SoundMAX HD Audio drivers not working on XPx64
George King replied to JukeBoxHero's topic in Windows XP 64 Bit Edition
Nice catch, you can submit your driver to SamLab for DriverPacks update -
Latest working AVG 18.8.4084.0 FREE for Windows XP SP3+ / Server 2003 x86 & x64 can be downloaded here. https://install.avcdn.net/avg/iavs9x-xp/avg_antivirus_free_setup_offline.exe It can receive updates automatically without any issues. However is better to archive offline updates time by time from here https://install.avcdn.net/avinitro/aviupd.exe
-
Windows 7 on the Intel Alder Lake/Z690 platform
George King replied to Carlos S. M.'s topic in Windows 7
PM me for testing image -
Root Certificates and Revoked Certificates for Windows XP
George King replied to heinoganda's topic in Windows XP
Link works here without any issues -
OK, so I have downloaded your repo + latest SSU + MR + Flash removal + latest .NET KBs. So this means I'm still missing all pre-EOL updates right? Any repository / update pack for this please? EDIT: Seem like for pre-EOL updates can be used WSUS 9.25 which have 6.2 x86 and x64 options available https://download.wsusoffline.net/wsusoffline925.zip
-
Hi, is there any latest update repository? Or update list to get Windows 8.0 fully updated untill 06-2022? Or should I download everything from mega that seems to be lastly updated in 2019? Then continue to latest Monthly Rollup + SSU and thats all? What about .NETs and Flash? https://mega.nz/folder/ExhDEbDA#pUhzXKVp5-hgzvylW_btfQ + https://support.microsoft.com/en-au/topic/kb5014027-servicing-stack-update-for-windows-server-2012-may-10-2022-0f6b508c-dd41-49aa-b69b-3202fcd3aada + https://support.microsoft.com/en-us/topic/june-14-2022-kb5014747-monthly-rollup-e6a24f00-91c9-4a18-9f91-4ce25ee4f22e
-
NTOSKRNL Emu_Extender for Windows XP/2003
George King replied to Mov AX, 0xDEAD's topic in Pinned Topics regarding Windows XP
@Mov AX, 0xDEAD I have created Pull request on GitHub with latest Vista / 7 kernel redirect changes. Plus I have added new missing function IoSynchronousCallDriver as it's needed to get Windows 8.0 build 8056 Generic MMC / SD work under XP in future. -
@Damnation @Dietmar Maybe you can try follow this to extend single dll with custom functions https://www.codeproject.com/Articles/17863/Using-Pragmas-to-Create-a-Proxy-DLL
-
There is nothing about move, only simple file copy from that location. This seems for me like corrupted flash drive? Are you sure that file is here after you unplug your USB stick? I just tried same on my side with preview5 ISO and everything that is placed in $OEM$ directory was properly copied to deployed system. Of course all files are still on USB.
-
@Damnation I have installed XP 32bit on Asus K53SV and Acer Aspire One, these machines have SD card reader, but not compatible with that Generic driver. I have also Dell Latitude 7440 and here I can't reinstall it and it run Windows 7 x64. I don't know when I can reinstall this machine (my wife's laptop)
-
Yeah I was thinking about that.
-
@Damnation Thanks, downloaded your updated repo, I have compared it to one I downloaded from GitHub and there are missing some parts in wrk2003.c on your side. Is this code missing by accident or there is a reason for that? Missing part void WRK2003_Init(void) { #if (NTDDI_VERSION < NTDDI_VISTA) && defined(_X86_) #if (NTDDI_VERSION >= NTDDI_WINXP) && (NTDDI_VERSION <= NTDDI_WINXPSP4) ////////////////////////////////////////////////////// // KeInvalidateAllCaches gTramp_KeInvalidateAllCaches = (PFN_BOOLEAN) ModuleHexSearch(MODULE_NTOSKRNL, KeInvalidateAllCaches_magic1, sizeof(KeInvalidateAllCaches_magic1), KeInvalidateAllCaches_magic1mask); if (!gTramp_KeInvalidateAllCaches) gTramp_KeInvalidateAllCaches = (PFN_BOOLEAN) ModuleHexSearch(MODULE_NTOSKRNL, KeInvalidateAllCaches_magic2, sizeof(KeInvalidateAllCaches_magic2), KeInvalidateAllCaches_magic2mask); if (!gTramp_KeInvalidateAllCaches) gTramp_KeInvalidateAllCaches = (PFN_BOOLEAN) ModuleHexSearch(MODULE_NTOSKRNL, KeInvalidateAllCaches_magic3, sizeof(KeInvalidateAllCaches_magic3), KeInvalidateAllCaches_magic3mask); if (!gTramp_KeInvalidateAllCaches) gTramp_KeInvalidateAllCaches = (PFN_BOOLEAN) ModuleHexSearch(MODULE_NTOSKRNL, KeInvalidateAllCaches_magic4, sizeof(KeInvalidateAllCaches_magic4), KeInvalidateAllCaches_magic4mask); if (!gTramp_KeInvalidateAllCaches) KeBugCheckEx(0xDEADBEEFL, 5, 0, 0, 2); ////////////////////////////////////////////////////// #endif // WinXP RTM <> SP4 ////////////////////////////////////////////////////// // KeAlertThread gTramp_KeAlertThread = (PFN_BOOLEAN_PKTHREAD_KPROCESSOR_MODE) ModuleHexSearch(MODULE_NTOSKRNL, KeAlertThread_magic1, sizeof(KeAlertThread_magic1), KeAlertThread_magic1mask); if (!gTramp_KeAlertThread) gTramp_KeAlertThread = (PFN_BOOLEAN_PKTHREAD_KPROCESSOR_MODE) ModuleHexSearch(MODULE_NTOSKRNL, KeAlertThread_magic2, sizeof(KeAlertThread_magic2), KeAlertThread_magic2mask); if (!gTramp_KeAlertThread) gTramp_KeAlertThread = (PFN_BOOLEAN_PKTHREAD_KPROCESSOR_MODE) ModuleHexSearch(MODULE_NTOSKRNL, KeAlertThread_magic1chk, sizeof(KeAlertThread_magic1chk), KeAlertThread_magic1chkmask); if (!gTramp_KeAlertThread) KeBugCheckEx(0xDEADBEEFL, 5, 0, 0, 3); ////////////////////////////////////////////////////// ////////////////////////////////////////////////////// // KeTestAlertThread gTramp_KeTestAlertThread = (PFN_BOOLEAN_KPROCESSOR_MODE) ModuleHexSearch(MODULE_NTOSKRNL, KeTestAlertThread_magic1, sizeof(KeTestAlertThread_magic1), KeTestAlertThread_magic1mask); if (!gTramp_KeTestAlertThread) gTramp_KeTestAlertThread = (PFN_BOOLEAN_KPROCESSOR_MODE) ModuleHexSearch(MODULE_NTOSKRNL, KeTestAlertThread_magic2, sizeof(KeTestAlertThread_magic2), KeTestAlertThread_magic2mask); if (!gTramp_KeTestAlertThread) gTramp_KeTestAlertThread = (PFN_BOOLEAN_KPROCESSOR_MODE) ModuleHexSearch(MODULE_NTOSKRNL, KeTestAlertThread_magic1chk, sizeof(KeTestAlertThread_magic1chk), KeTestAlertThread_magic1chkmask); if (!gTramp_KeTestAlertThread) KeBugCheckEx(0xDEADBEEFL, 5, 0, 0, 4); ////////////////////////////////////////////////////// ////////////////////////////////////////////////////// // LpcRequestWaitReplyPortEx gTramp_LpcRequestWaitReplyPortEx = (PFN_NTSTATUS_PVOID_PPORT_MESSAGE_PPORT_MESSAGE) ModuleHexSearch(MODULE_NTOSKRNL, LpcRequestWaitReplyPortEx_magic1, sizeof(LpcRequestWaitReplyPortEx_magic1), LpcRequestWaitReplyPortEx_magic1mask); if (!gTramp_LpcRequestWaitReplyPortEx) gTramp_LpcRequestWaitReplyPortEx = (PFN_NTSTATUS_PVOID_PPORT_MESSAGE_PPORT_MESSAGE) ModuleHexSearch(MODULE_NTOSKRNL, LpcRequestWaitReplyPortEx_magic2, sizeof(LpcRequestWaitReplyPortEx_magic2), LpcRequestWaitReplyPortEx_magic2mask); if (!gTramp_LpcRequestWaitReplyPortEx) KeBugCheckEx(0xDEADBEEFL, 5, 0, 0, 5); ////////////////////////////////////////////////////// #endif // < Vista && x32 } P.S. Installing 32bit XP on my testing machine right now to see how it goes. I see method how you created that function for x86 in ASM. I hope it will work, then we will only need x64 ones and rearange your new functions in Extender. For example many of functions you added into < Vista are needed for < 8 too. But polishing process can be done in future
-
NTOSKRNL Emu_Extender for Windows XP/2003
George King replied to Mov AX, 0xDEAD's topic in Pinned Topics regarding Windows XP
@Mov AX, 0xDEADAnd here is same check with Vista ntoskrnl.exe v6.0.6003.21442 (vistasp2_ldr_escrow.220307-1719) vs compiled ntoskrn8.sys x64 missing FsRtlInitializeExtraCreateParameter FsRtlInitializeExtraCreateParameterList FsRtlPrepareToReuseEcp FsRtlRegisterUncProviderEx2 IoRegisterFsRegistrationChangeMountAware KeConnectInterruptForHal KeFlushCurrentTbImmediately PsDereferenceKernelStack PsReferenceKernelStack RtlIsSandboxedToken x86 missing FsRtlInitializeExtraCreateParameter FsRtlInitializeExtraCreateParameterList FsRtlPrepareToReuseEcp FsRtlRegisterUncProviderEx2 IoRegisterFsRegistrationChangeMountAware KeConnectInterruptForHal KiMcaExceptionHandlerWrapper PsDereferenceKernelStack PsReferenceKernelStack RtlIsSandboxedToken Should I create merge request on GitHub project? -
@Damnation Fully working code will be better as this SD/MMC driver can work on XP - 7 in both architecture. Currently I would like to see it under 7 first. With actual state it can be installed, but "connected disk device" can't be installed / started, I think it's caused by my blank function.
-
NTOSKRNL Emu_Extender for Windows XP/2003
George King replied to Mov AX, 0xDEAD's topic in Pinned Topics regarding Windows XP
@Mov AX, 0xDEAD I have checked Windows 7 ntoskrnl.exe v6.1.7601.25920 (win7sp1_ldr_escrow.220316-1740) exports vs compiled ntoskrn8.sys This is full list of missing kernel functions that needs to be bypassed. x64 missing EtwSetInformation FsRtlPrepareToReuseEcp FsRtlRegisterUncProviderEx2 IoEnumerateRegisteredFiltersListEx IoRegisterFsRegistrationChangeMountAwareEx KeConnectInterruptForHal KeFlushCurrentTbImmediately PsDereferenceKernelStack PsReferenceKernelStack RtlIsSandboxedToken SeGetLogonSessionToken x86 missing EtwSetInformation FsRtlPrepareToReuseEcp FsRtlRegisterUncProviderEx2 IoEnumerateRegisteredFiltersListEx IoRegisterFsRegistrationChangeMountAwareEx KeConnectInterruptForHal KiMcaExceptionHandlerWrapper PsDereferenceKernelStack PsReferenceKernelStack RtlIsSandboxedToken SeGetLogonSessionToken Next I will check Vista kernel exports to see if there are some forgotten exports too. -
@Damnation Hmm, OK, I have no idea how to rewrite it. Can you try please? 1>c:\users\administrator\desktop\ntoskrnl_emu-master\ntoskrn8.c(2503) : error C2109: subscript requires array or pointer type 1>c:\users\administrator\desktop\ntoskrnl_emu-master\ntoskrn8.c(2504) : error C2109: subscript requires array or pointer type 1>c:\users\administrator\desktop\ntoskrnl_emu-master\ntoskrn8.c(2505) : error C2676: binary '+' : 'IRP' does not define this operator or a conversion to a type acceptable to the predefined operator 1>c:\users\administrator\desktop\ntoskrnl_emu-master\ntoskrn8.c(2506) : error C2676: binary '+' : 'IRP' does not define this operator or a conversion to a type acceptable to the predefined operator 1>c:\users\administrator\desktop\ntoskrnl_emu-master\ntoskrn8.c(2506) : error C2065: 'CmpCompleteFlushAndPurgeIrp' : undeclared identifier 1>c:\users\administrator\desktop\ntoskrnl_emu-master\ntoskrn8.c(2507) : error C2676: binary '+' : 'IRP' does not define this operator or a conversion to a type acceptable to the predefined operator 1>c:\users\administrator\desktop\ntoskrnl_emu-master\ntoskrn8.c(2510) : error C2664: 'KeWaitForSingleObject' : cannot convert parameter 2 from 'int' to 'KWAIT_REASON' 1>c:\users\administrator\desktop\ntoskrnl_emu-master\ntoskrn8.c(2511) : error C2440: '=' : cannot convert from 'IRP' to 'unsigned long'
-
@Damnation Can you please try to get pseudo code for IoSynchronousCallDriver from Windows 8.0 ntoskrnl.exe? I have already added it as "return success" so now I have no missings imports in Windows 8.0 sdtor.sys build 8056 and only this one function need to be finished to get Generic SD/MMC driver for Windows XP - 7. I have added IoSynchronousCallDriver from Windows 8.0 DDK wdm.h to ntoskrn8.c wdm.h code from Windows 8.0 DDK #if (NTDDI_VERSION >= NTDDI_WIN8) NTKERNELAPI NTSTATUS IoSynchronousCallDriver( _In_ PDEVICE_OBJECT DeviceObject, _In_ PIRP Irp ); #endif Code adaptaion for ntoskrn8.c NTSTATUS IoSynchronousCallDriver_k8 ( PDEVICE_OBJECT DeviceObject, PIRP Irp ) { return STATUS_SUCCESS; } In ntoskrn_redirects.h I have added to section < Win8 x32/x64 Extender this k8_win8( IoSynchronousCallDriver, 8) + I have added mising Windows 7 kernel export With this I can install that driver, but there is still one not installed HDD device that can't be installed on my laptop with Windows 7. Same issue will be on XP too (probably). I think it's related to this newly added import as it currently does nothing. I can't get pseude code in IDA to start working on rewriting that function to readable code. Can you please have a look on it? We are small step from another Generic driver for XP. When we can get this driver to work I can try to install XP in 32bit UEFI on Intel compute stick @Mov AX, 0xDEAD Maybe you have better idea to acheive it? Modded driver for XP is attached Generic Windows8.0 build 8056 SD+MCC driver for Windows XP x86.7z