schwups

Windows 9x Member Projects · May 12, 2023

Doesn't work either - Problem could be the knock-on effect of something else on my KEX-Kext system.

Windows 9x Member Projects · May 10, 2023

Avrt.dll win7

On 5/7/2023 at 6:00 AM, jumper said:

Change:

On 5/6/2023 at 8:39 PM, schwups said:

;-- C:\WINDOWS\SYSTEM\AVRT.DLL --;

Exports

[AVRT.DLL]

Then add "..\system\avrt.dll" to Contents=

I guess my configuration is still wrong or perhaps KernelEx simply doesn't work this way. I'm not sure.

I've Avrt.dll (renamed kexstubs dll file) and avrt.ini in the system folder. So no real avrt.dll (these are renamed).

Core.ini contents line: contents=DX10,Kstub825,std,Kexbasen,Kexbases,Falkon,..\system\avrt.dll,Uxth,Mypal,KexVista

I also tried the whole Path C:\windows\system\avrt.dll

ini file now:

;-- C:\WINDOWS\SYSTEM\AVRT.DLL --;

[AVRT.DLL]
AvQuerySystemResponsiveness=
AvRevertMmThreadCharacteristics=
AvRtCreateThreadOrderingGroup=
AvRtCreateThreadOrderingGroupExA=
AvRtCreateThreadOrderingGroupExW=
AvRtDeleteThreadOrderingGroup=
AvRtJoinThreadOrderingGroup=
AvRtLeaveThreadOrderingGroup=
AvRtWaitOnThreadOrderingGroup=
AvSetMmMaxThreadCharacteristicsA=
AvSetMmMaxThreadCharacteristicsW=
AvSetMmThreadCharacteristicsA=
AvSetMmThreadCharacteristicsW=
AvSetMmThreadPriority=

Windows 9x Member Projects · May 10, 2023

On 5/8/2023 at 6:29 PM, jumper said:

If the app is multiprocess, all processes must be terminated. Firefox54 and other browsers might be. Check with a process viewer and try logging out.

Does logging show the new definition, the old, or the wrong api entirely?

It isn't, there's only one Firefox process. I didn't see new defs.

Windows 9x Member Projects · May 10, 2023

Have you already worked on LCID functions - stubs or implementations into u26?

Windows 9x Member Projects · May 10, 2023

No, unfortunately, none of that eliminates the exception. I do not intend to experiment with ExKernel in the near future. Sure, this could be interesting as well.

NLSDL Win10 seems to load, but thats a bit strange:

NLSDL of XP or 7 has no module warnings or error images.

Windows 9x Member Projects · May 9, 2023

DW Profiling excerpt: If I had counted correctly the exception occurs 5 times after NLSDL.DLL.

DllMain(0x7FE80000, DLL_THREAD_ATTACH, 0x00000000) in "OLEAUT32.DLL" called by thread 0xE0B97701.
DllMain(0x7FE80000, DLL_THREAD_ATTACH, 0x00000000) in "OLEAUT32.DLL" returned 1 (0x1) by thread 0xE0B97701.
DllMain(0x00960000, DLL_THREAD_ATTACH, 0x00000000) in "AVRT.DLL" called by thread 0xE0B97701.
DllMain(0x00960000, DLL_THREAD_ATTACH, 0x00000000) in "AVRT.DLL" returned 1 (0x1) by thread 0xE0B97701.
DllMain(0x03130000, DLL_THREAD_ATTACH, 0x00000000) in "XUL.DLL" called by thread 0xE0B97701.
DllMain(0x03130000, DLL_THREAD_ATTACH, 0x00000000) in "XUL.DLL" returned 1 (0x1) by thread 0xE0B97701.
DllMain(0x7C340000, DLL_THREAD_ATTACH, 0x00000000) in "MSVCR71.DLL" called by thread 0xE0B97701.
DllMain(0x7C340000, DLL_THREAD_ATTACH, 0x00000000) in "MSVCR71.DLL" returned 1 (0x1) by thread 0xE0B97701.
DllMain(0x01FF0000, DLL_THREAD_ATTACH, 0x00000000) in "BLOCK.DLL" called by thread 0xE0B97701.
DllMain(0x01FF0000, DLL_THREAD_ATTACH, 0x00000000) in "BLOCK.DLL" returned 1 (0x1) by thread 0xE0B97701.
DllMain(0x7C140000, DLL_THREAD_ATTACH, 0x00000000) in "MFC71.DLL" called by thread 0xE0B97701.
DllMain(0x7C140000, DLL_THREAD_ATTACH, 0x00000000) in "MFC71.DLL" returned 1 (0x1) by thread 0xE0B97701.
DllMain(0x02000000, DLL_THREAD_ATTACH, 0x00000000) in "AVMUFC.DLL" called by thread 0xE0B97701.
DllMain(0x02000000, DLL_THREAD_ATTACH, 0x00000000) in "AVMUFC.DLL" returned 1 (0x1) by thread 0xE0B97701.
DllMain(0x009D0000, DLL_THREAD_ATTACH, 0x00000000) in "SARAH.DLL" called by thread 0xE0B97701.
DllMain(0x009D0000, DLL_THREAD_ATTACH, 0x00000000) in "SARAH.DLL" returned 1 (0x1) by thread 0xE0B97701.
DllMain(0x009F0000, DLL_THREAD_ATTACH, 0x00000000) in "NLSDL.DLL" called by thread 0xE0B97701.
DllMain(0x009F0000, DLL_THREAD_ATTACH, 0x00000000) in "NLSDL.DLL" returned 1 (0x1) by thread 0xE0B97701.
First chance exception 0x406D1388 (Thread was named) occurred in "XUL.DLL" at address 0x0378AF59 by thread 0xE0B97701 "JS Helper".

18 hours ago, Goodmaneuver said:

Your browsers will want to go back and forth with both LocaleNameToLCID and LCIDToLocaleName so just doing one API is not a good test. It is good you have a solution though.

Yes, the had tested both together. Only LocaleNameToLCID >NLSDL:DownlevelLocaleNameToLCID produces the problem. Apparently z2e is also not a solution to fix this exception, assuming that this is, where the error comes from. On FF 16th start, I see the window flash for a split second.

Basically the function LocaleNameToLCID=>NLSDL:DownlevelLocaleNameToLCID is very promising:

This function is used only by applications that run on pre-Windows Vista operating systems. Its use requires a download package. Applications that only run on Windows Vista and later should call LocaleNameToLCID to retrieve a locale identifier.

The two others GetParentLocaleLCID and GetParentLocaleName aren't called.

Multiprocessing and sandboxing is another trace. In the period of early 2017 was worked on the sandboxing feature: Electrolysis, Firefox's multi-process architecture, is the prerequisite for Firefox's sandboxing feature as it makes use of child processes to establish security boundaries. https://www.ghacks.net/2017/01/23/how-to-change-firefoxs-sandbox-security-level/. The message "couldn't load broker services" obviously refers to this. This message appears with Kex API logging and breaks FF54 start already shortly after loading XUL.

Environment variables like

SET MOZ_DISABLE_OOP_PLUGINS=1
SET MOZ_DISABLE_GMP_SANDBOX=1
SET MOZ_FORCE_DISABLE_E10S=1
SET MOZ_DISABLE_CONTENT_SANDBOX =1

don't seem to have an effect, because e10s is probably still blocked/disabled due to my insufficient system.

Generally, to be sure, I have some prefs already set, too.

user_pref("browser.tabs.remote.autostart.", false);
user_pref("browser.tabs.remote.autostart.2", false);
user_pref("dom.ipc.processCount", 1);

...

Windows 9x Member Projects · May 8, 2023

I just checked LocaleNameToLCID=>NLSDL:DownlevelLocaleNameToLCID with reboot. Unfortunately, I didn't even have the GUI of the browsers I use every day. So I'm back to z2e for now. Other than that, I didn't do any further testing today.

Windows 9x Member Projects · May 7, 2023

I think I am very close to run Firefox 54. Avrt.dll BWC used. Test version now Firefox nightly of 16th Feb crashes on start. DW profiling gives an exception:

First chance exception 0x406D1388 (Thread was named) occurred in "XUL.DLL" at address 0x0378AF59 by thread 0xFFCDF307 "JS Helper".

This happened by some threads. I found with Procwin in xul at the address 0x0378AF59 "RaiseException". (supported by Kernel32))

There's no second exception.

Firefox crashlog gives as reason "MozCrashReason=MOZ_CRASH(Attempt to construct a semaphore from an invalid handle!)"

Another App-killer can be a message "couldn't load broker services".

Windows 9x Member Projects · May 7, 2023

On 5/6/2023 at 9:13 AM, Goodmaneuver said:

[KERNEL32]
GetParentLocaleLCID=>NLSDL:DownlevelGetParentLocaleLCID
GetParentLocaleName=>NLSDL:DownlevelGetParentLocaleName
LCIDToLocaleName=>NLSDL:DownlevelLCIDToLocaleName
LocaleNameToLCID=>NLSDL:DownlevelLocaleNameToLCID

I tried LCIDToLocaleName=>NLSDL:DownlevelLCIDToLocaleName and LocaleNameToLCID=>NLSDL:DownlevelLocaleNameToLCID. The second produced an error in Kernel32 after browser close, that I could simply click away. So I'm back to z2e.

Windows 9x Member Projects · May 6, 2023

17 hours ago, jumper said:

Try cloning kstub825.dll. Use Kexports on Avrt.dll to get a list of exports to use for definitions. Put the new Avrt files in Windows\System so KernelEx will work on it.

I copied the two files (Avrunt.dll (kstub825.dll), Avrunt.DLL.ini) into the system folder and added Avrunt to core.ini [BASE]
contents. Renamed Avrunt.DLL.ini to Avrunt.ini. On restart KernelEx didn't work.

Avrt.dll.ini is a simple export list. Is there somthing to edit/define from my side or does KernelEx can handle it as it is?

;-- C:\WINDOWS\SYSTEM\AVRT.DLL --;

Exports
AvQuerySystemResponsiveness
AvRevertMmThreadCharacteristics
AvRtCreateThreadOrderingGroup
AvRtCreateThreadOrderingGroupExA
AvRtCreateThreadOrderingGroupExW
AvRtDeleteThreadOrderingGroup
AvRtJoinThreadOrderingGroup
AvRtLeaveThreadOrderingGroup
AvRtWaitOnThreadOrderingGroup
AvSetMmMaxThreadCharacteristicsA
AvSetMmMaxThreadCharacteristicsW
AvSetMmThreadCharacteristicsA
AvSetMmThreadCharacteristicsW
AvSetMmThreadPriority

Windows 9x Member Projects · May 6, 2023

6 hours ago, Goodmaneuver said:

The latest UNICOWS is not real friendly with WinME and is designed for other OS with the delay loaded Ldr functions. 4018 has all of the latest APIs without LdrUnloadDll and LdrLoadDll. So I use 4018 without any issues.

It sometimes takes a little time, I do have a faint memory now. These are stubbed in Kexbases. Now I want to get back to Firefox.

Windows 9x Member Projects · May 6, 2023

A bit OffTopic - I found LdrUnloadDll (cadaver?) with Hex Editor MX, but not LdrLoadDll.

Windows 9x Member Projects · May 6, 2023

2 hours ago, Goodmaneuver said:

3 hours ago, jumper said:

Kex25 not seen.

Yes that's right I am using 4.5.2 which will show when reading the DLLs as 4.5.12.

2 hours ago, Goodmaneuver said:

3 hours ago, jumper said:

Your configuration is a mess.

Maybe but I do not know how you have determined this. I have got the programs to run that stopped running with KEX25 and earlier.

2 hours ago, Goodmaneuver said:

3 hours ago, jumper said:

Do not mix-and-match from different KernelEx versions.

I did not mix 4.5.2 modules as seen but I did use your KernelEx.dll for convenience and so I can use your Kstubs.dll. Thankyou.

I have several ME machines, where I can do different things.

2 hours ago, Goodmaneuver said:

3 hours ago, jumper said:

Use all latest KernelEx and aux. files and the correct Unicows.

The UXTHEME from BWC is OK. The latest UNICOWS is not real friendly with WinME and is designed for other OS with the delay loaded Ldr functions. 4018 has all of the latest APIs without LdrUnloadDll and LdrLoadDll. So I use 4018 without any issues.

Trying out different versions and jump between them makes sense for troubleshooting. I'm not aware of unicows 4018. I had always used 1.1.3790.0. I don't see LdrUnloadDll and LdrLoadDll. Uxtheme of ROS 0.4 or 2k or XP loads on my main machine (Kex25/Kext), too.

2 hours ago, Goodmaneuver said:

3 hours ago, jumper said:

Do not use post-XP files. Do not use files from other extenders.

Why not as 3rd party apps require them and they are used here in this topic.

Yes, these will not always be avoidable.

Windows 9x Member Projects · May 6, 2023

9 hours ago, jumper said:

Can you load Avrt.dll in a dll loader such as Ktree or Procwin?

I can't load Avrt Win 7 (6.1.7600.16385) with Procwin! Message: Can not load library. With Kex comp. mode Win 7 on AVRT.dll the window opens and then Procwin hangs.

Nothing happens, if I try to load Avrt BWC. No message - no window. I see the same behaviour with other dlls and I conclude that means it loads. I think the missing window is a special error on my system, that also needs to be investigated.

KTree (Avrt BWC): Window Ok => C:\...\AVRT.DLL - but <Missing: get_api_table()>

??

KTree (Avrt Win7): Blank and it hangs.

Windows 9x Member Projects · May 6, 2023

First of all, thank you both very much. Indeed I'd BWC avrt.dll from KB935839-v30fM-x86 on my HDD here. First this
is the easiest test and it solves this hang, I get the GUI and have it running! :roll1: This version has only three exports, the two called and one more. But I already have a new problem with the version of 16th. This requires further investigation. I may have rather worsened my kstubs the last few days.

Windows 9x Member Projects · May 5, 2023

removed

Windows 9x Member Projects · May 5, 2023

DWModuleView: Dynamically loaded - no delay load module.

Windows 9x Member Projects · May 5, 2023

If I delete Multimedia Realtime Runtime (Avrt.dll), I get "couldn't load xpcom". My first attempts to hexedit xul.dll at avrt.dll also failed.

Windows 9x Member Projects · May 1, 2023

Avrt.dll Win 7 (6.1.7600.16385):
depentent modul NTDLL.DLL
not supported by Kexbasen 25/Kexbases 25:

[NTDLL.DLL]
AlpcGetMessageAttribute
AlpcInitializeMessageAttribute
NtAlpcConnectPort
NtAlpcSendWaitReceivePort
NtOpenPrivateNamespace
RtlAddSIDToBoundaryDescriptor
RtlCreateBoundaryDescriptor
RtlCreateServiceSid
RtlDecodePointer
RtlDeleteBoundaryDescriptor
RtlEncodePointer

(LdrDisableThreadCalloutsForDll removed)

Windows 9x Member Projects · May 1, 2023

10thModuleAfterProf

11th - Modules not loaded/missing:

AVM files FritzBox Router Software/Firewall

Falkon.dll not loaded (Falkon and Mypal.dll are kstubs)

RNR20 (Windows Socket2 NameSpace DLL)

WBEMPROX, WBEMSVC, WBEMCOMN (Windows Management Instrumentation)

NSS files (Firefox) - NSSDBM3, Softokn3, FREEBL3, NSSCKBI, ~~NSS3~~

ODBC32 (Microsoft Data Access - ODBC Driver Manager) -> 10th Delay-load module

URLMON (OLE32 Extensions for Win32) -> 10th Delay-load module

Following DW profiling log of 10th after hang the next module to load is Falkon (Kstub) and then DNSAPI. So, I could also conclude that my Falkon.dll is too sparse or not?

Windows 9x Member Projects · May 1, 2023

KexAPIlog 11th

DWModuleList

Windows 9x Member Projects · May 1, 2023

13 hours ago, schwups said:

Avrt.dll Win 7:

I had following API's disabled, because I haven't found suitable return values (documented?).

[NTDLL.DLL]
AlpcGetMessageAttribute=
AlpcInitializeMessageAttribute=
NtAlpcConnectPort=
NtAlpcSendWaitReceivePort=

After I gave them (NTSTATUS)STATUS_NOT_IMPLEMENTED, I'm able to swap to Avrt.dll of Win 7. The Profiling of 11th still hangs at "DllMain(0x75400000, DLL_PROCESS_ATTACH, 0x00000000) in "AVRT.DLL" called by thread 0xFFCB6B63.".

Windows 9x Member Projects · April 30, 2023

Yes Avrt.dll - probably the best track for now.
I haven't made any progress by renaming and omit avrt so far (The result is "couldn't load xpcom").

Avrt.dll 6.0.5112.0
depentent modul NTDLL.DLL

I've following suspicious API's in my Kstub825 and I'll check these:
[NTDLL.Dll]
LdrDisableThreadCalloutsForDll=
RtlDecodePointer=
RtlEncodePointer=

Avrt.dll Win 7:

I had following API's disabled, because I haven't found suitable return values (documented?).

[NTDLL.DLL]
AlpcGetMessageAttribute=
AlpcInitializeMessageAttribute=
NtAlpcConnectPort=
NtAlpcSendWaitReceivePort=

Kexstub logs 10th Feb and 11th Feb:

11th

[Kstub825]
= KERNEL32.DLL:LCMapStringEx=z9e
= KERNEL32.DLL:LCMapStringEx=z9e
= KERNEL32.DLL:LCMapStringEx=z9e
= KERNEL32.DLL:LCMapStringEx=z9e

10th (normal start, no DW profiling, without crash or exit)
shortened by ...

[Kstub825]
= ntdll.dll:RtlStringFromGUID=n2
= ntdll.dll:RtlStringFromGUID=n2
= KERNEL32.DLL:LCMapStringEx=z9e
= KERNEL32.DLL:LCMapStringEx=z9e
= KERNEL32.DLL:LCMapStringEx=z9e
= KERNEL32.DLL:LCMapStringEx=z9e
= KERNEL32.DLL:LCIDToLocaleName=z4e
= KERNEL32.DLL:LCIDToLocaleName=z4e
= KERNEL32.DLL:LCMapStringEx=z9e
= KERNEL32.DLL:GetLocaleInfoEx=z4e
.
.
.
= KERNEL32.DLL:GetLocaleInfoEx=z4e
= KERNEL32.DLL:LocaleNameToLCID=z2e
= KERNEL32.DLL:LocaleNameToLCID=z2e
= KERNEL32.DLL:LocaleNameToLCID=z2e
= KERNEL32.DLL:LocaleNameToLCID=z2e
= KERNEL32.DLL:LCIDToLocaleName=z4e
= KERNEL32.DLL:LCIDToLocaleName=z4e
= KERNEL32.DLL:LocaleNameToLCID=z2e
.
.
.
= KERNEL32.DLL:LocaleNameToLCID=z2e
= KERNEL32.DLL:K32GetProcessMemoryInfo=>Psapi:GetProcessMemoryInfo =
.
.
.
= KERNEL32.DLL:K32GetProcessMemoryInfo=>Psapi:GetProcessMemoryInfo =
= KERNEL32.DLL:LocaleNameToLCID=z2e
= KERNEL32.DLL:K32GetProcessMemoryInfo=>Psapi:GetProcessMemoryInfo =
= KERNEL32.DLL:K32GetProcessMemoryInfo=>Psapi:GetProcessMemoryInfo =
= KERNEL32.DLL:K32GetProcessMemoryInfo=>Psapi:GetProcessMemoryInfo =
= KERNEL32.DLL:K32GetProcessMemoryInfo=>Psapi:GetProcessMemoryInfo =
= KERNEL32.DLL:LocaleNameToLCID=z2e
= KERNEL32.DLL:K32GetProcessMemoryInfo=>Psapi:GetProcessMemoryInfo =
.
.
.
= KERNEL32.DLL:K32GetProcessMemoryInfo=>Psapi:GetProcessMemoryInfo =
= KERNEL32.DLL:LocaleNameToLCID=z2e
= KERNEL32.DLL:K32GetProcessMemoryInfo=>Psapi:GetProcessMemoryInfo =
.
.
.
= KERNEL32.DLL:K32GetProcessMemoryInfo=>Psapi:GetProcessMemoryInfo =

Windows 9x Member Projects · April 29, 2023

DW log files 54a1 of 24 Jan, 10 Feb and 11 Feb

Note: Firefox of 24th and 10th don't start by DW profiling.

Differences I saw with WinMerge:

11th

New - AVRT.dll loaded

DWMAPI.dll loaded earlier (after uxtheme)

used file versions: avrt 6.0.5112.0 and dwmapi 6.0.5270.9

These files (6.1) of Win 7 don't load yet. Probably I've to add some new API's to Kext.

Windows 9x Member Projects · April 29, 2023

The current (Firefox Quantum) state is, that I can run Firefox 54 - 59, even Thunderbird 68 or Mypal68 in the background with no errors unfortunately still without (G)UI. The initialisation of the GUI is somehow skipped/bypassed. I can assume, that the InitOnce functions, ConditionVariables functions, SRWLock functions play a role here, but that isn't knowledge and I can be completely wrong. I'm not a programmer/coder. Formerly we've seen such "no UI" behaviour with Opera Presto 12.10+, too. In the case of Mypal68, one thought was maybe Win ME/98/KernelEx can't handle the XP compatible "unused chromish code" Feodor2 uses for multiprocess handling https://github.com/Feodor2/Mypal68/issues/71 . Upon request Feodor2 advised me to search for changes between 54a1 nightly builds of 11 February and 10 February 2017. This "no UI" problem occurs for the first time with the build of 11 February. However, this is difficult for me, when I basically have no real approach. There are a lot of displacements and changes. Currently I'm stuck and can't get any further.

Sign In

schwups

Posts

Joined

Last visited

Days Won

Donations

Country

Content Type

Profiles

Forums

Events

Posts posted by schwups

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Firefox 24 - 52 for ME and 98

Activity

Browse