loblo

I've got a number of dlls in the system dir that require KernelEx to be enabled. Those are all VC 90, 100, 110 and 120 runtimes, some directshow files, some video codecs and whatnot. I am afraid this "fix" will break so much stuff I run regularly that I am wary of trying it. With this and all that's broken already for me with a partial v11 (some UPX compressed files not loading with v10 already), I am wondering where the new KernelEx is going and whether there is a point installing it over good old one + KexStub as I can't see any benefit at all doing this for now. No one reports program x or y running when it wouldn't in the old configuration. nor is there any indication it's going in this direction. Problems and potentially problematic workarounds are plenty however.

The latest VC redist for XP with the new universal c runtime (ucrt.dll) includes a certainly more compatible full set of ms-api dlls. They don't load either however but they give off an error message saying they don't load at the correct address and aren't relocatable. perhaps it would be possible to fix this but I certainly would not know what to do. Anything dynamically linked compiled by VC 2015 won't run as they will need those. I've run a few command line tools staticly compiled by VS 2015 and they ran fine so there might be some hope something can be done by those who know much more than I do.

I think you need to delete entire lines (starting with MENUITEM), not only blanking a string in order to get rid of menu entries. That's how I did it in earlier versions of Windows in shell32.dll (no mui files there and different menu entries of course) if I recall correctly.

Running kernelex.dll v11, kexbases.dll v11 and original xeno kebasen.dll I have the following broken: Apps/plugins I use relying on the Windows Imaging Component crash in windowscodecs.dll Date 01/05/2016 Time 12:19MINICAP caused an invalid page fault inmodule WINDOWSCODECS.DLL at 0177:530012d5.Registers:EAX=530ac18e CS=0177 EIP=530012d5 EFLGS=00210296EBX=00000020 SS=017f ESP=00a7f568 EBP=00a7f594ECX=5306b3cc DS=017f ESI=530ac1b0 FS=67ffEDX=00000000 ES=017f EDI=530ac1b8 GS=0000Bytes at CS:EIP:02 0a 53 00 00 00 00 00 00 00 00 23 f5 09 53 58 Stack dump:00000002 00a80000 530a0234 7c001ee2 530ac1e8 5309f60d 530012a8 530012d8 00000000 00000000 833d20f8 00a7f5f4 5309f788 53000000 00000000 00000000 CoreAudioToolbox..dll fails to initialize as per error message in console window when trying to use QAAC to transcode audio to aac/m4a. Reverted to kernelex.dll v10, kexbases.dll v10 and original xeno kexbasen.dll.

DumpPE 2.32 can be found in the current MASM32 package. http://www.masm32.com/download.htm I have disabled KernelEx on all first level dependencies of kexbasen.dll v11 and I get the exact same crashes on reboot.

Upon reboot in faultlog.txt.

It's ME so most dlls are different but here goes anyway with kexbasen.dll v10 (which is not fully useable due to issues reported previously): [Process Pane]|Process| |% CPU| |LT % CPU| |Time| |Sw/s| |InMem KB| |Total KB| |Th||Pri| |Ver| |State| |Path| + Idle 98.95% 98.64% 1:36 48 0 0 1 Very Idle 4.0 Idle+ KERNEL32.DLL 0.03% 18 32 44 3 High 4.90 32 C:\WINDOWS\SYSTEM\KERNEL32.DLL+ MSGSRV32.EXE 0.04% 0.02% 0:36 1 752 3,364 1 Norm 4.0 16 Sys C:\WINDOWS\SYSTEM\MSGSRV32.EXE+ mmtask.tsk 0 684 3,268 1 Norm 4.0 16 Sys C:\WINDOWS\SYSTEM\mmtask.tsk+ MPREXE.EXE 0:02 0 1,200 4,044 2 Norm 4.0 32 Sys C:\WINDOWS\SYSTEM\MPREXE.EXE+ NVSVC.EXE 0:02 5 1,192 4,988 2 Norm 4.0 32 Sys C:\WINDOWS\SYSTEM\NVSVC.EXE+ STIMON.EXE 0:01 10 2,688 12,708 6 Norm 4.0 32 Sys C:\WINDOWS\SYSTEM\STIMON.EXE+ EXPLORER.EXE 0.17% 0.36% 0:03 10 4,968 12,584 5 Norm 4.0 32 C:\WINDOWS\EXPLORER.EXE+ JULAPAN.EXE 0.02% 19 2,204 7,124 2 Norm 4.0 32 C:\WINDOWS\SYSTEM\JULAPAN.EXE+ INTERNAT.EXE 0:01 0 856 3,620 1 Norm 4.0 32 C:\WINDOWS\SYSTEM\INTERNAT.EXE+ POPUPICONS.EXE 0.04% 0.02% 3 1,756 5,488 1 Norm 4.0 32 C:\AUSER\SOFTWARE\WINDOWS ADD-ONS\POPUPICONSEX\POPUPICONS.EXE+ SMILEY.EXE 0 912 3,820 1 Norm 4.0 32 C:\AUSER\SOFTWARE\WINDOWS ADD-ONS\SMILEY\SMILEY.EXE+ STROKEIT.EXE 0 964 3,856 1 High 4.0 32 C:\AUSER\SOFTWARE\WINDOWS ADD-ONS\STROKE IT\STROKEIT.EXE+ CMOUSE96.EXE 0 820 3,640 1 Norm 4.0 32 C:\AUSER\SOFTWARE\MOUSE TOOLS\COOL MOUSE 96\CMOUSE96.EXE+ WINROLL.EXE 0 824 3,564 1 Norm 4.0 32 C:\AUSER\SOFTWARE\WINDOWS ADD-ONS\WINROLL\WINROLL.EXE+ FILEBX.EXE 0 7,380 15,228 4 Norm 4.0 32 C:\AUSER\SOFTWARE\WINDOWS ADD-ONS\FILEBX\FILEBX.EXE+ TBHIDE.EXE 0.04% 0.04% 10 1,584 5,584 1 Norm 4.0 32 C:\AUSER\SOFTWARE\WINDOWS ADD-ONS\TASKBARHIDE\TBHIDE.EXE+ NETWORX.EXE 0.22% 0.19% 0:04 21 15,116 26,072 5 Norm 5.0 32 C:\AUSER\SOFTWARE\INTERNET\UTILS\NETWORX\NETWORX.EXE+ DDHELP.EXE 0 936 3,636 2 Real 4.0 32 Sys C:\WINDOWS\SYSTEM\DDHELP.EXE+ TASKINFO.EXE 0.36% 0.50% 0:01 12 2,392 7,012 1 High 4.0 32 D:\DESKTOP\TASKINFO2000 3.0\TASKINFO.EXE+ VxD VDHCP 0 0 0 1 Norm 4.3 VxD VDHCP + VxD NTKERN 0.13% 0.07% 0:01 17 0 0 7 Norm 4.3 VxD NTKERN [Current Process Pane]|Name| |Base| |Size| |Version| |Description| |Company| ADVAPI32.DLL BFE60000 65,536 4.90.3000 Win32 ADVAPI32 core component Microsoft Corporation COMCTL32.DLL BFB70000 557,056 5.81 Common Controls Library Microsoft Corporation COMCTLV8.DLL BF9E0000 65,536 FILEBXH.DLL 020D0000 106,496 1, 91, 2, 0 FileBox eXtender Hyperionics Technology LLC GDI32.DLL BFF20000 172,032 4.90.3001 Win32 GDI core component Microsoft Corporation IMM32.DLL BFE00000 16,384 4.90.3000 Win32 IMM32 core component Microsoft Corporation K452STUB.DLL 00410000 65,536 KERNEL32.DLL BFF60000 536,576 4.90.3000 Win32 Kernel core component Microsoft Corporation KERNELEX.DLL BFA00000 233,472 4.5.2015.11 KernelEx Core with ApiHook Xeno86 KEXBASEN.DLL 7D000000 122,880 4.5.2015.10 KernelEx Base Non-shared Api Library Xeno86 KEXBASES.DLL BFA40000 274,432 4.5.2015.11 KernelEx Base Shared Api Library Xeno86 KSTUB822.DLL 19980000 65,536 MPR.DLL 7F160000 57,344 4.90.3000 WIN32 Network Interface DLL Microsoft Corporation MPREXE.EXE 00500000 28,672 4.90.3000 WIN32 Network Interface Service Process Microsoft Corporation MPRSERV.DLL 7FA00000 155,648 4.90.3000 Multinet Router Microsoft Corporation MSNET32.DLL 7FA30000 77,824 4.90.3000 Microsoft 32-bit Network API Library Microsoft Corporation MSNP32.DLL 7FA50000 86,016 4.90.3000 Network provider for Microsoft networks Microsoft Corporation MSPWL32.DLL 7FA70000 40,960 4.90.3000 Password list management library Microsoft Corporation MSVCRT.DLL 7C000000 344,064 7.00.9981.0 Microsoft® C Runtime Library Microsoft Corporation NTDLL.DLL BFE70000 20,480 4.90.3000 Win32 NTDLL core component Microsoft Corporation POPUPICONS.DLL 10000000 24,576 SHELL32.DLL 7FBD0000 2,285,568 5.50.4134.100 Windows Shell Common Dll Microsoft Corporation SHLWAPI.DLL 70A70000 417,792 6.00.2800.1907 (xpsp2.070219-1040) Shell Light-weight Utility Library Microsoft Corporation UBERSKIN.DLL BF9C0000 94,208 USER32.DLL BFC00000 69,632 4.90.3001 Win32 USER32 core component Microsoft Corporation VERSION.DLL BFE50000 24,576 4.90.3000 Win32 VERSION core component Microsoft Corporation WINMM.DLL BFDD0000 65,536 4.90.3000 System APIs for Multimedia Microsoft Corporation WINROLL.DLL 02480000 28,672 Filebxh.dll, popupucons.dll and winroll.dll are hooks from background processes running from startup folder and hence can be ruled out as a cause. Comctlv8.dll and uberskin.dll are Revolutions Pack files which start from same MPRServices key as KernelEx.

In ME, bff641a2is in the function: BFF64198 fn_BFF64198: ; Xref BFF627E2 BFF628C0 BFF6296D BFF62A6BSearching for BFF627E2 I find the function QT_Thunk Searching for BFF6296D I find the function FT_ Thunk Searching to the two other Xref leads to nothing meaninful for me. In any case here is a dump of ME's kernel32.dll: http://filebin.net/6qz65jd0qb Full faultlog for ME btw: RUNONCE caused an invalid page fault inmodule KERNEL32.DLL at 0177:bff641a2.Registers:EAX=d43b9290 CS=0177 EIP=bff641a2 EFLGS=00010202EBX=83359ba8 SS=017f ESP=0063faf8 EBP=0063fb24ECX=7d00b90d DS=017f ESI=00008bb8 FS=3cefEDX=00000000 ES=017f EDI=00000094 GS=0000Bytes at CS:EIP:ff 4a 10 75 08 89 42 08 ff 42 04 90 c3 39 42 08 Stack dump:7d00b90d 00000094 00008bb8 83359ba8 7c039760 ffffffff 7c00249e 7c002465 00000000 00000fa0 833599d8 0063fbcc 7c002e15 7c002cb5 00000094 00000004 **********************************************************************EXPLORER caused an invalid page fault inmodule KERNEL32.DLL at 0177:bff641a2.Registers:EAX=d43b8320 CS=0177 EIP=bff641a2 EFLGS=00010202EBX=83359adc SS=017f ESP=005afaf8 EBP=005afb24ECX=7d00b90d DS=017f ESI=00008bb8 FS=3cefEDX=00000000 ES=017f EDI=00000094 GS=0000Bytes at CS:EIP:ff 4a 10 75 08 89 42 08 ff 42 04 90 c3 39 42 08 Stack dump:7d00b90d 00000094 00008bb8 83359adc 7c039760 ffffffff 7c00249e 7c002465 00000000 00000fa0 83357cf4 005afbcc 7c002e15 7c002cb5 00000094 00000004 **********************************************************************RUNDLL32 caused an invalid page fault inmodule KERNEL32.DLL at 0177:bff641a2.Registers:EAX=d43b9290 CS=0177 EIP=bff641a2 EFLGS=00010202EBX=8335dde4 SS=017f ESP=0063faf8 EBP=0063fb24ECX=7d00b90d DS=017f ESI=00008bb8 FS=3ce7EDX=00000000 ES=017f EDI=00000094 GS=0000Bytes at CS:EIP:ff 4a 10 75 08 89 42 08 ff 42 04 90 c3 39 42 08 Stack dump:7d00b90d 00000094 00008bb8 8335dde4 7c039760 ffffffff 7c00249e 7c002465 00000000 00000fa0 833594bc 0063fbcc 7c002e15 7c002cb5 00000094 00000004

Me too, same crashes.

DVD Decrypter + Vidomi or FlaskMpeg should do nicely. XviD codec highly recommended. http://www.dvddecrypter.org.uk/ http://www.videohelp.com/software/Vidomi http://www.videohelp.com/software/FlaskMPEG http://www.videohelp.com/software/XviD-Codec

Hawkwind - Master of the Universe (Live at the 1865, Southampton, UK, 19/12/2015) I was there, great gig!

You must probably be confusing Lemmy (of later Motorhead fame) with Bob Calvert here. Lemmy leaves after the fifth studio album and Bob Calvert joins for the next four ones. Sorry but you do not pass your degree in hawkwindology... Yeah I do like them a lot, my collection of Hawkwind and solo/spin-off recordings counts in the hundreds of pieces... (I must be mad ) Sorry for drifting off topic that much guys...

I use ZDoom mostly, sometimes GZDoom or Zandronum for level sets that specifically require either of them. I know nothing about running Doom95 on either 98 or ME, there is no point to it IMO with all the modern engines that are out there. Speaking of avatars, I am assuming you must be into Hawkwind music quite a bit....

Riched20.dll is not an ActiveX/COM server. It can't be registered/unregistered with regsvr32.exe. It can be registered/unregistered as a type library however and this must be done with regtlib.exe. Registration of riched20.dll as a type library does not appear to be necessary to use it without issues in most cases as far as I can see.

All issues I reported are gone. I found two new problems related to kexbasen.dll however: Gimp plugins crash on execution. I have constant crashes in git.exe when executing console programs in the wonderful Mintty terminal emulator executed from within Git. This is just annoying as Mintty remains otherwise fully functional as far as I can see. **********************************************************************Date 12/03/2015 Time 02:15GIT caused an invalid page fault inmodule GIT.EXE at 0177:0046d874.Registers:EAX=00000000 CS=0177 EIP=0046d874 EFLGS=00010246EBX=00000008 SS=017f ESP=008cfd30 EBP=008cfd88ECX=00000000 DS=017f ESI=00000020 FS=7157EDX=8383003d ES=017f EDI=0000001c GS=0000Bytes at CS:EIP:8b 00 85 c0 0f 84 0f 02 00 00 31 ff 31 db eb 12 Stack dump:009e051c 008cfd64 008cfd68 00000000 008cfd60 00000004 bff6bb26 8339e9ec 00000080 7c001f5e 7c049638 008cfda4 00000000 009e0400 00000000 00000008 **********************************************************************Date 12/03/2015 Time 02:16GMIC_GIMP caused an invalid page fault inmodule MSVCRT.DLL at 0177:7c00ef24.Registers:EAX=00000000 CS=0177 EIP=7c00ef24 EFLGS=00210212EBX=0000000b SS=017f ESP=0138f974 EBP=0138f9a4ECX=015026b0 DS=017f ESI=00000000 FS=3cefEDX=8383003d ES=017f EDI=0000000b GS=0000Bytes at CS:EIP:8b 06 85 c0 75 d4 8b c6 2b 05 c0 95 04 7c 5e c1 Stack dump:00000000 7c00f06e 01502250 01502250 00000000 01502190 7c003773 0000000b ffffffff 00000000 00000000 00000000 0138f9f8 7c02624f 01502250 00000001 **********************************************************************Date 12/03/2015 Time 02:18GIMPRESSIONIST caused an invalid page fault inmodule MSVCRT.DLL at 0177:7c00ef24.Registers:EAX=00000000 CS=0177 EIP=7c00ef24 EFLGS=00010212EBX=0000000b SS=017f ESP=0075fac4 EBP=0075faf4ECX=0107ad30 DS=017f ESI=00000000 FS=52d7EDX=8383003d ES=017f EDI=0000000b GS=0000Bytes at CS:EIP:8b 06 85 c0 75 d4 8b c6 2b 05 c0 95 04 7c 5e c1 Stack dump:00000000 7c00f06e 0107ac50 0107ac50 00000000 0107a880 7c003773 0000000b ffffffff 00000000 00000000 00000000 0075fb48 7c02624f 0107ac50 00000001 Both problems go away when reverting to original xeno kexbasen.dll and keeping kernelex.dll v11 and kexbases.dll v10. Gimp 2.8.16 and Git 1.9.5 (including Mintty) uploaded here: http://filebin.net/ztjlv6bw04

@jumper >> the problem with kexbasen.dll on windows ME seems to be gone >Kexstubs definitions are also now implicit-only (0x54 prefix)...or perhaps related to the seven forwards to phantom Msvcrt functions I removed? As I had experienced in the past crashes of kernelex at windows startup after having added definitions for msvcrt in kexstub, I suspect it could well be the latter. >> Many upx-compressed programs...[o]nce decompressed...run fine however. >Good verification. I plan to add some new property sheet options for better control of the stub resolving logic. Reading your other post I think I understand the rationale for this new loader: It's to avoid situations where programs/dlls break because of new definitions/stubs such as the actctx issues with the 80 and 90 msvc runtimes for example. If by adding a new property sheet to control the stub you mean offering a choice between the old and new loader, then this is great because as it is now it is a nightmare for me. I use zillions of upxed programs to save disk space and I am afraid I have not enough free disk space to unupx them all so they can run with v10. I just mention that often upx reduces executable size to 30% of the original which for just the current FFMpeg static binaries represents a saving of 70MB disk usage. I am also thinking about potential load issues with programs coming from author compressed with other packers such as MPress, Petite, etc... which are very difficult to unpack at best. Not sure if any of them obfuscate some imports as UPX does however. >> Programs built with QT5.... >such as? (a small one please!) Bad news, there are no really small QT5 apps. XnConvert now uses QT5, it's 60MB once unarchived: http://download.xnview.com/XnConvert-win.zip I can't use XnConvert on v9 either because of the crashes using menus but at least it loads (using v9 with original kexbasen.dll). >Flash 19 needs some Kexstubs definitions to load. These are implicit-only with v10 which is fine. However Flash 19 may also be invoking other Kexstubs definitions explicitly. That is no longer fine in v10. Check your Kexstubs log file to see which are being invoked. Try clearing the log file and then trigger the screensaver and/or loading a page that uses flash in an already-running browser. Flash 19 Screensaver: [Kstub822] = Kernel32.dll:GetSystemWow64DirectoryW=z2e120 = = Kernel32.dll:WerRegisterMemoryBlock=f2 = = NTDLL.DLL:RtlInitUnicodeString=>Kstub822:IAS = = Kernel32.dll:GetSystemWow64DirectoryW=z2e120 = Flash 19 plugin in Opera: [Kstub822] = Kernel32.dll:GetSystemWow64DirectoryW=z2e120 = = NTDLL.DLL:RtlInitUnicodeString=>Kstub822:IAS = Looks like NTDLL.DLL:RtlInitUnicodeString might be the problem as it's common to both and doesn't show in Dependency Walker.

I use flash 19.0.0.245 (current/latest) and it's not upxed. Why is there an implicit-only stub loading method in v.10 now?

Flash seems broken as Opera crashes on going to any page that's got flash content and screensavers using flash activex also crash. Both OK with previous KernelEx version which I am going to revert to now.

Ok, just installed this and the problem with kexbasen.dll on windows ME seems to be gone, no need to revert to original one. There are issues however: * Many upx-compressed programs don't start anymore. Once decompressed (including their dependencies) they run fine however. (Example: Networx, QAAC, Lux Render and probably many others) * Programs built with QT5 all have a fatal crt crash on startup. With previous version they run and only crash on attempting to use any type of menu which made some of them still useable.

Drag & drop from the 7-Zip file manager is broken for me in all 15.xx releases so I have only been updating 7z.dll, 7zg.exe and 7z.exe (I don't try updating the shell extension out of lazyness). Doing this I have no broken functionality and unless I am wrong it appears to support newly supported formats and all OK (zipx, rar5 and whatnot).

Current Flash player (19.0.0.245) works for me in Opera 12.02. I have an SSE3 CPU, a 7950GT 256MB GPU and a bit more than 2GB of RAM enabled. What is your hardware? Can you play the test animation on the Adobe Flash help page: https://helpx.adobe.com/flash-player.html Reading through and trying things from the Flash admin guide might be helpfull: http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/devnet/flashplayer/pdfs/flash_player_19_0_admin_guide.pdf

It's for the kernelex dlls, not for exe/dlls kernelex allows to run.

I don't think Microsoft is in peril and its customers won't going anywhere else no matter what cos they've got nowhere else to go. Adoption of 10 might just get slower than they want but in the end they'll get most PC users to their new platform/business model/whatnot as usual. And then I don't think Bill Gates is a good guy that could "save" the company. He is the world's richest individual and prominent member of an hyper-wealthy elite that gathers every year at Davos to decide/discuss/plan what the future will be for us plebs and that surely (IMHO) include the orwellian direction Microsoft has now obviously taken...

http://www.oz9hmn.dk/Siderne/Download.htm

I could install it by fiddling with the keyboard and it works fine for me including as browser plugin. The portable version works fine for me too.