Content Type
Profiles
Forums
Events
Everything posted by Mov AX, 0xDEAD
-
structs_acpi.txt - compiled structs (KTHREAD already reverted) structs_kernel.txt - structs from real ntkrnlmp.exe 5.2.3790.3959 most important kernel things match(TEB/PEB//ETHREAD/KTHREAD), but need to look at all structs_acpi.txt structs_kernel.txt p.s. many kernels structs missed at structs_kernel.txt(.pdb is not full), so this is not 100% way to find mismatches
-
This mean this acpi.sys x64 can be used only with kernel, compiled from W2003 RTM or WRK. It run with XP SP2 too, but it may read/write wrong values of kernel structs - process/thread/peb/teb/... Real x64 SP2 decompiled header, struct _KTHREAD, what KeGetCurrentThread() returns: w2003 rtm: w2003 WRK:
-
Hi All I found serious issue with compiled ACPI.SYS for x64 platform - mismatched kernel headers, e.g. ke.h We have two version of .h files: 1) Leaked W2003 source tree 2) W2003 Windows Research Kernel(WRK) None of these two options match official XP/W2003 x64 SP2 kernels. Issue in the fact is that acpi.sys reads incorrect fields of windows threads. For fixing this issue need to review kernel headers and change it to match MS official x64 kernels
-
@Dietmar I think this is multiple threads race condition problem If you filter acpic034mehrtext.txt and keep only c00034 lines, then compare with short bsod log, i will see difference in order it matches at begin, but later difference is random vs This mean apci is most async, it call other driver and kernel with callbacks, get answer "postponed", after some time event triggered and callback called, so every boot order of execution is not same
-
let's try with improved debug logging: 1) back to lite debug mode ed Kd_ACPI_Mask 0xFFFFFFFF 2) patch amliapi.c to partialy enable full debug lines: to: Now you must get many "AMLI: xxxxx: AsyncEvalObject(\_SB.PC00.MC._ADR)" in lite debuglog, probably it will point to exact dsdt place before BSOD, as i understand we look for definition with bugged/missed _UID
-
I stuck with kernel debugging XP/W2003 x64 on VirtualBox, WinDBG hangs on virtual com1 port connection. VirtualKD connection also useless because it doesnt work with VBoxHardenedLoader required for custom dsdt/ssdt tables. QEMU also bad, it doesnt have good documentation for win32 platform, i dont know how to enable virtual com port, there is a lot of options and nothing to works Last hope is VMWare and VirtualPC...