Dave-H Posted February 20, 2015 Share Posted February 20, 2015 (edited) I tried substituting the win32k.sys file from KB3037639 (5.2.3790.5534) onto my system into the System32 and DLLCache folders, and was rewarded with a BSOD when the desktop was due to load. Stop 21A (Fatal System Error)."The session manager initialisation system process terminated unexpectedly with a status of 0xc0000263." It looks like a no go sadly, but I wasn't really expecting to be able to just replace a 5.1 file with a 5.2 file. I hope MS do roll out a fix for 5.1 systems, as surely the font corruption must be a serious issue even on POS systems. Edited February 20, 2015 by Dave-H Link to comment Share on other sites More sharing options...
dencorso Posted February 20, 2015 Share Posted February 20, 2015 The only 5.2 files known to work OK on XP are some of the 2k3 USB drivers modules. A fixed update for the KB3013455 is out but not for the Windows Embedded (NT 5.1) editions. KB3037639 Now, since all updates released by MS for XP, from sometime before EoL are solely from the QFE branch, Outbreaker's finding is actually pretty good news: QFE updates are cumulative and include all previous fixes... so that whenever another win32k.sys eventually is released for POS Ready 2009, it'll actualy also contain the fix from KB3037639, so it's just a question of waiting for it. Link to comment Share on other sites More sharing options...
glnz Posted February 20, 2015 Author Share Posted February 20, 2015 (edited) Dave-H - Thanks for experiment. Hope your test machine didn't blow up and shoot sales receipts all over the place. But why am I seeing TWO slightly earlier versions of win32k.sys in my machine (XP Pro SP3 32-bit) and not just one? I have win32k.sys version 5.1.2600.6648 in both C:\WINDOWS\system32 and C:\WINDOWS\system32\dllcache. In both cases, its Date Modified is 10/6/2014. So that seems to be my installed version. However, there is a later win32k.sys version 5.1.2600.6712 in C:\WINDOWS\SoftwareDistribution\Download\b801db22d4bc2b24f8383b87c3ddecaf\sp3qfe, and its Date Modified is 1/9/2015.I wonder why that later downloaded version did not actually install into my machine. Any thoughts? Edited February 20, 2015 by glnz Link to comment Share on other sites More sharing options...
dencorso Posted February 20, 2015 Share Posted February 20, 2015 Build 6712 is the problematic one. It clearly did no install. Build 6648 is the one I have on my machines (remember I blocked KB3013455). Link to comment Share on other sites More sharing options...
Dave-H Posted February 20, 2015 Share Posted February 20, 2015 Strange that the KB article offers two files for download, KB3013455 and KB3037639, and it says to install both of them, and that it doesn't matter what order you install them in."There is no installation order requirement for the two updates that are discussed in this article (KB3013455 and KB3037639)." As they both replace the same single system file, I find that rather odd! Link to comment Share on other sites More sharing options...
Guest Posted February 20, 2015 Share Posted February 20, 2015 (edited) Microsoft is often wrong in their KB articles. Doesn't surprise me that they got it wrong on a download page. You only need KB3037639. As often as Microsoft updates win32k.sys for security fixes, it won't take long to get a new version. Seems to be updated every 1-2 months as it is. Whether the next new version will fix the text corruption is anybody's guess. Edited February 20, 2015 by 5eraph Link to comment Share on other sites More sharing options...
submix8c Posted February 20, 2015 Share Posted February 20, 2015 (edited) Not the same file. One is "broken" the newer one is not. Windows will detect the newer as the "latest". They're just covering their a$$.http://www.techworm.net/2015/02/microsoft-bungles-again-this-time-with-kb-3013455-and-kb-3037639.htmlIgnore the "bad" one as Dencorso said.Also it was found that the patch does not affect the Windows 7 and 8.1 versions."We don't really care about anything but Win7/Win8, so we got lazy". Edited February 20, 2015 by submix8c Link to comment Share on other sites More sharing options...
Dave-H Posted February 20, 2015 Share Posted February 20, 2015 Sorry, I didn't mean that they were exactly the same file, just different versions of the same file, which is what I should have said of course! I'm sure you're right about why they're offering both.If you do the later version first, the earlier one presumably won't do anything, and if you do the earlier version first the other version will update it of course. Link to comment Share on other sites More sharing options...
Guest Posted February 20, 2015 Share Posted February 20, 2015 Most likely it's just MS being incredibly stupid as usual when they don't replace one update with a superseded one but to be absolutely sure this is in fact the case, you need to compare the inf files that sometimes add stuff to the registry besides the standard stuff that is added whenever any update is added. Extract the updates and run both the inf through a comparision program. In the area that is called addreg or something see if one has some extra stuff and also at the very bottom of the inf file they have stuck stuff before. Link to comment Share on other sites More sharing options...
harkaz Posted February 21, 2015 Share Posted February 21, 2015 @Outbreaker Instead of trying to replace the file, reverse engineer the latest patch and determine what necessary changes are required (if simple patching is possible). I wish I had more free time to delve into this. (I had started reading some classic books in reversing but I'm busy with many things...) Link to comment Share on other sites More sharing options...
Atari800XL Posted February 21, 2015 Share Posted February 21, 2015 determine what necessary changes are required (if simple patching is possible). I have to say this crossed my mind as well, and I was thinking of harkaz' great patching work of the POS updates as well. Too bad you haven't got the time harkaz, of course we all understand.Still, patching the botched update might be our only hope...(So close, yet so far away... ) Link to comment Share on other sites More sharing options...
submix8c Posted February 21, 2015 Share Posted February 21, 2015 FWIW, KB3013455 -https://support.microsoft.com/kb/3013455saysAfter you install security update 3013455, you may notice some decrease in text quality in certain scenarios. The problem occurs only on systems that are running one of the following operating systems:Windows Vista SP2Windows Server 2008 SP2Windows Server 2003 SP2Why it didn't install (using the registry "trick"), however, is beyond me. (note - I haven't been installing POSReady, so...) The above MS notation seems to go against both what is posted here and also in this link.http://www.dslreports.com/forum/r29852995-KB3013455-breaks-font-rendering-on-XP-FLP-WEPOS-POS2009AFAICT, the only way to confirm it is to install and test (Catalog is still giving error 8DDD0010 for me trying to get this file - then again I'm still at IE6.) Link to comment Share on other sites More sharing options...
dencorso Posted February 21, 2015 Share Posted February 21, 2015 @Outbreaker Instead of trying to replace the file, reverse engineer the latest patch and determine what necessary changes are required (if simple patching is possible). I wish I had more free time to delve into this. (I had started reading some classic books in reversing but I'm busy with many things...) The only person that comes to my mind who's capable of doing that fast enough is WildBill, supposing he finds time for it.Otherwise, it's better to wait for the next win32k.sys in some new fix further on, because it'll sure incorporate the fonts fix, since they're now always from the QFE branch. Link to comment Share on other sites More sharing options...
harkaz Posted February 22, 2015 Share Posted February 22, 2015 (edited) I think I have found a difference: The order of command execution is reversed. Edited February 22, 2015 by harkaz Link to comment Share on other sites More sharing options...
Outbreaker Posted February 22, 2015 Share Posted February 22, 2015 (edited) I could run a test if you upload your modified "win32k.sys" file. Did you compare the Windows Server 2003 x86 Update KB3037639 (win32k.sys 5.2.3790.5534) with the previous Update KB3013455 (win32k.sys 5.2.3790.5513)? Edited February 22, 2015 by Outbreaker Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now