Jump to content

PE Tool for creating patches


WildBill
 Share

Recommended Posts


I might have found something. Apparently, at the 80% mark, the kernel decides that it wants to make certain of its memory sections pageable, including the one I'm using to hold the larger scroll buffer. That's fatal to the bootskin code because the buffer must not be pageable. I renamed the section in question from .edata to .xdata to keep the kernel from doing it. Cross your fingers...

Windows2000-KB2393802-v1-early-c5c8-x86-ENU.exe

Link to comment
Share on other sites

That was it probably. It works now :thumbup

Do you have any idea why this issue was present here and not anywhere else? Could it be hardware specific?

I think so. It looks like it only turns paging on if the memory address is not within a certain area. Maybe your hardware combo is resulting in the kernel being loaded into a different address.

Link to comment
Share on other sites

Okay, here's the acid test. This has all of the bootskin code enabled and has the scroll buffer renamed to .xdata to protect it. If this works, then over the next few days I'll make the same changes to the other three files and release a V4.

Windows2000-KB2393802-v1-early-c5p-x86-ENU.exe

For what it's worth, v4 also adds a few more routines:

_vsnwprintf

_aulldvrm

RtlGetVersion

KeFlushQueuedDpcs

Edited by WildBill
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.


×
×
  • Create New...