Damnation
MemberContent Type
Profiles
Forums
Events
Everything posted by Damnation
-
I've noticed that this part mov eax, 0x14 seems to increment upwords for each ZwAlpc function - I wonder why?
-
@Mov AX, 0xDEAD for functions like ZwAlpcCancelMessage and others NTSYSCALLAPI NTSTATUS NTAPI ZwAlpcCancelMessage(_In_ HANDLE PortHandle, _In_ ULONG Flags, _In_ PALPC_CONTEXT_ATTR MessageContext ); void __stdcall _ZwAlpcCancelMessage@12( int p1, int p2, int p3 ) { __asm.pushfd(); _KiSystemService(); } in asm void __stdcall _ZwAlpcCancelMessage@12( int p1, int p2, int p3 ) { mov eax, 0x14 lea edx, [p1] pushfd push 0x8 call _KiSystemService; void __cdecl( void ) ret 0xC } how should we implement this? should we take KiSystemService from trap.asm?
-
some more~ added the HashTable functions with psuedocode.
-
@LanXing 7B BSOD is inaccessible storage device. you can get this BSOD from both an AHCI controller and USB3. I recommend using the XP Integral Edition's Optional Patch Integrator Script using options 1,3,4,5,7 and doing a fresh XP install. Once you have XP installed and running we can start debugging from there.
-
I made a start on ndis6 code in ntoskrn8.c
-
@Mov AX, 0xDEAD If you're feeling motivated, can we start working on NDIS6 support for XP? missing imports - ndis - NtTraceControl KeRegisterProcessorChangeCallback RtlNumberOfSetBitsUlongPtr KeTestSpinLock IoGetDeviceNumaNode NtQuerySystemInformationEx netio - MmAllocatePagesForMdlEx KeFreeCalloutStack KeAllocateCalloutStack SeCaptureSubjectContextEx KeTestSpinLock SeAccessCheckFromState RtlCreateHashTable RtlDeleteHashTable RtlGetNextEntryHashTable RtlLookupEntryHashTable RtlRemoveEntryHashTable RtlInsertEntryHashTable RtlEndEnumerationHashTable RtlEnumerateEntryHashTable RtlInitEnumerationHashTable RtlContractHashTable RtlExpandHashTable msrpc - IoSetIoCompletionEx ZwAlpcCancelMessage ZwAlpcCreatePortSection ZwAlpcCreateResourceReserve ZwAlpcCreateSectionView ZwAlpcCreateSecurityContext ZwAlpcDeletePortSection ZwAlpcDeleteSectionView ZwAlpcDeleteSecurityContext ZwAlpcDisconnectPort ZwAlpcQueryInformation ZwAlpcSetInformation ZwCreateIoCompletion ZwImpersonateAnonymousToken ZwRemoveIoCompletionEx
-
If anyone else wants to have a go and try to make this work then just ask and I'll send you the source code.
-
@sonyu I know the windows 8.0 acpi sys you're referring to, that acpi.sys just has a skip DDB error hack, the error I was having has been solved through debugging and @Mov AX, 0xDEAD's genius. Seriously dude the whole XP enthusiast community can't thank you enough for all your hard work, without which none of this would be possible! Sincerely, thanks a lot! @Mov AX, 0xDEAD much appreciation!