WildBill

PE Tool for creating patches

695 posts in this topic

A-ha! Now we're getting somewhere. Will look at it tonight.

0

Share this post


Link to post
Share on other sites

Yeah, I think so :yes:

It looks exactly the same as before with c5h and others up to c5o.

0

Share this post


Link to post
Share on other sites

Actually, that's good news: now I have something to focus on. :)

0

Share this post


Link to post
Share on other sites

I might have found something. Apparently, at the 80% mark, the kernel decides that it wants to make certain of its memory sections pageable, including the one I'm using to hold the larger scroll buffer. That's fatal to the bootskin code because the buffer must not be pageable. I renamed the section in question from .edata to .xdata to keep the kernel from doing it. Cross your fingers...

Windows2000-KB2393802-v1-early-c5c8-x86-ENU.exe

0

Share this post


Link to post
Share on other sites

That was it probably. It works now :thumbup

Do you have any idea why this issue was present here and not anywhere else? Could it be hardware specific?

Edited by tomasz86
0

Share this post


Link to post
Share on other sites

That was it probably. It works now :thumbup

Do you have any idea why this issue was present here and not anywhere else? Could it be hardware specific?

I think so. It looks like it only turns paging on if the memory address is not within a certain area. Maybe your hardware combo is resulting in the kernel being loaded into a different address.

0

Share this post


Link to post
Share on other sites

Congratulations, to the two of you! :thumbup

That sure was a bug hard to swat! :D

Persistence and method wins the day.

You both rock!

0

Share this post


Link to post
Share on other sites

Okay, here's the acid test. This has all of the bootskin code enabled and has the scroll buffer renamed to .xdata to protect it. If this works, then over the next few days I'll make the same changes to the other three files and release a V4.

Windows2000-KB2393802-v1-early-c5p-x86-ENU.exe

For what it's worth, v4 also adds a few more routines:

_vsnwprintf

_aulldvrm

RtlGetVersion

KeFlushQueuedDpcs

Edited by WildBill
0

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.