/g/ - Technology » Thread #78500072

[317 / 44 / 45]

210KiB, 1024x768, wxp.jpg

/wxp/ - Friendly Windows XP/2003 Leak Thread

Anonymous Mon 02 Nov 2020 01:01:29 No.78500072 View View Reply Original Report

Quoted By: >>78500632 >>78507071 >>78508575 >>78520903 >>78527813 >>78528284 >>78537771

Old thread: >>78467264
Guide and FAQ: https://rentry.co/build-win2k3
Hidden git: https://wopen3qf3trpihet.onion
To-do list: >>78318824

List of previous threads: https://rentry.co/centralizer-threads
Some info: https://rentry.co/centralizer-info

repost

repost Mon 02 Nov 2020 01:02:43 No.78500093 Report

Quoted By: >>78500266

>>78494490
Could you check if i386 version with the new pack & InitShutdown_v1_0_s_ifspec change still lets you get to login screen?
I get the feeling maybe that pack is breaking something, I dunno if you only tried it on amd64 or not though

Anonymous

View Same Google ImgOps iqdb SauceNAO O2PIAPq.jpg, 64KiB, 604x516

Anonymous Mon 02 Nov 2020 01:03:40 No.78500109 Report

Quoted By: >>78500171 >>78500334

Is it possible to build an ISO of XP Pro 64-bit from the source yet?

Anonymous

Anonymous Mon 02 Nov 2020 01:05:09 No.78500125 Report

Quoted By:

block commented out the source depot open files check in scorch.pl and now i'm going to try to do a binless build.

Anonymous

Anonymous Mon 02 Nov 2020 01:06:24 No.78500138 Report

Quoted By: >>78500161 >>78500406

>>78500105
Ah right, also forgot you mentioned amd64 was still in setup too.

Since i386 crashes after logging in, I wonder if the issue with amd64 is that it's technically trying to go to some "logged-in" state for setup or something, and hits the same crash that i386 does.

Anonymous

Anonymous Mon 02 Nov 2020 01:08:33 No.78500161 Report

Quoted By:

>>78500138
If windbg-anon from a few threads back is able to trace the crash after logging in that'd be pretty useful... otherwise I guess I'll get windbg setup tomorrow, had a chk vm setup with it before but that's long deleted now.

Anonymous

Anonymous Mon 02 Nov 2020 01:09:36 No.78500171 Report

Quoted By: >>78503915

>>78500109
One anon is close but we don't have any amd64 winlogon that's compatible atm

Anonymous

View Same Google ImgOps iqdb SauceNAO winlogon10.png, 162KiB, 1897x1089

Anonymous Mon 02 Nov 2020 01:17:06 No.78500266 Report

Quoted By:

>>78500093
>>78494490

I do notice that there are several imports missing from our built i386 winlogon vs the retail srv03 rtm one that we were binplacing when we didn't have any winlogon code.

Anonymous

Anonymous Mon 02 Nov 2020 01:17:50 No.78500279 Report

Quoted By: >>78500288 >>78500760

magnet:?xt=urn:btih:1a4e5b67060ff2bc8fe2de36a6c265c77f392a0c&dn=NOTREPACKED

Anonymous

Anonymous Mon 02 Nov 2020 01:18:36 No.78500288 Report

Quoted By:

>>78500279
based

Anonymous

Anonymous Mon 02 Nov 2020 01:19:00 No.78500292 Report

Quoted By: >>78500417

How close are we to getting a working implementation of winlogon? Is it being ported from 2000 or React?

Anonymous

Anonymous Mon 02 Nov 2020 01:22:04 No.78500334 Report

Quoted By: >>78500364 >>78500406 >>78502048

>>78500109
Somewhat - I managed to get the kernel to build but with the systime / exinit changes and then i had to extract and add lots of files from a retail win2k3 64 bit iso and then edit layout.inf, dosnet.inf and txtsetup.sif to remove others that we don't have and can't find anywhere and the driver.cab gets really screwy. but after all that I built an iso and managed to get it to make it through text mode setup only to boot the kernel successfully and bsod because of winlogon.exe right before gui mode setup starts.

Anonymous

Anonymous Mon 02 Nov 2020 01:24:54 No.78500364 Report

Quoted By: >>78500406

>>78500334
Are you sure bsod is because of winlogon?
you've tried other amd64 winlogons, and even amd64 version of winlogon that we know boots fine under i386, and all of them cause bsod - how do we know it's not something else in the amd64 version causing it? is there a log or something you can check?

Anonymous

Anonymous Mon 02 Nov 2020 01:28:18 No.78500406 Report

Quoted By:

>>78500364
>>78500334
Maybe it could be worth replacing winlogon.exe of gui setup i386 with our built one and see if bsod still occurs there, that would point it toward >>78500138

Anonymous

Anonymous Mon 02 Nov 2020 01:29:13 No.78500417 Report

Quoted By: >>78500537 >>78502830 >>78503089

>>78500292
pre-existing winlogon.exe's from available retail builds of windows server 2003 x64 and xp x64 BSOD on our built amd64 iso before gui mode setup can begin. Our built winlogon does the same.

On i386, winlogons below 2600 and above longhorn 4005 bsod before the logon dialog can display, 3718, 4001, 4005 from longhorn work. Our built winlogon works to get through the logon dialog and actually begins the logon in the system event logs but then it bsod's before the wallpaper / desktop load.

the bsod is happening because winlogon.exe is supposed to execute at boot and load the logon screen and remain resident permanently until shutdown - if anything happens to crash that process out or if it exits for any non-graceful pre-planned reason you get a BSOD since SMSS shuts down the OS.

Anonymous

View Same Google ImgOps iqdb SauceNAO file.png, 19KiB, 713x283

Anonymous Mon 02 Nov 2020 01:39:39 No.78500537 Report

Quoted By: >>78500589

If anyone wants to look into the problem with winlogon, another anon found that it's logging in as guest instead of admin:
https://archive.rebeccablacktech.com/g/thread/78093279/#78112383

AFAIK that's why we need the group-policy edit to login, normally admins skip that group-policy check (pic related), but since it's logging in as guest it requires it

In that thread he found that it tries guest login after admin login fails for some reason? So I guess somehow winlogon isn't handling the credentials properly

>>78500417
Still it could be worth testing if i386 setup has the same result, so we can be sure that it's winlogon related

Anonymous

Anonymous Mon 02 Nov 2020 01:43:52 No.78500589 Report

Quoted By: >>78500686

>>78500537
After I edited the local security policy for blank passwords in console logons (to remove the account restriction dialog) I tried many variations of accounts (administrator, guest and admin level and limited level accounts with and without passwords.) per the system event logs the logon seems to occur correctly but something causes winlogon to crash or exit resulting in the bsod.

Trying the same in safe mode also fails with the bsod after the logon dialog closes and before the wallpaper / desktop loads (i386) on the built amd64 winlogon we can't get past the initial logon needed for gui mode setup to begin.

Anonymous

Anonymous Mon 02 Nov 2020 01:47:44 No.78500632 Report

Quoted By:

>>78500072
just bumping
Let me know when you're done.

Anonymous

Anonymous Mon 02 Nov 2020 01:52:29 No.78500686 Report

Quoted By:

>>78500589
Would be interesting to see if admin + password can login without the blank password group-policy change, if it is trying to login as guest like the other anon said it should still bring up a blank password/restricted error afaik

Anonymous

Anonymous Mon 02 Nov 2020 01:59:40 No.78500760 Report

Quoted By:

>>78500279
based perma seeder

Anonymous

Anonymous Mon 02 Nov 2020 02:09:48 No.78500877 Report

Quoted By: >>78501094

Anyone know of a working Activation patch we can use with our self built Server ISOs?

Anonymous

Anonymous Mon 02 Nov 2020 02:30:42 No.78501094 Report

Quoted By:

>>78500877
antiwpa used to host activation patches iirc

Anonymous

Anonymous Mon 02 Nov 2020 02:51:33 No.78501314 Report

Quoted By:

Anyone know if chk can build/boot fine? Last time I tried it just BSOD'd at setup

Anonymous

View Same Google ImgOps iqdb SauceNAO file.png, 10KiB, 447x212

Anonymous Mon 02 Nov 2020 02:56:22 No.78501353 Report

Quoted By: >>78501404 >>78501504

Problem with winlogon seems to be that it uses WlxNetworkProviderLoad to get login details from gina, but inside gina code...

Anonymous

Anonymous Mon 02 Nov 2020 03:00:54 No.78501404 Report

Quoted By: >>78501504

>>78501353
Oh damn nvm, logonattempt seems to use WlxLoggedOutSAS already.
Maybe the network provider code that calls WlxNetworkProviderLoad & attempts a login from that is interfering tho?

Anonymous

View Same Google ImgOps iqdb SauceNAO file.png, 34KiB, 1308x283

Anonymous Mon 02 Nov 2020 03:11:51 No.78501504 Report

Quoted By: >>78501511

>>78501353
>>78501404
Hmm, one thing to note, the TimeoutDialogBoxParam func which seems to be used to push login details from MprLogonNotify is slightly different between 2000/2003, 2000 on left and 2003 on right

Fusion_DialogBoxParam seems to wrap the normal DialogBoxParam call with some activation context related crap, something to do with SXS DLLs? could this be why it seems login details aren't being provided properly?

Anonymous

View Same Google ImgOps iqdb SauceNAO file.png, 22KiB, 807x222

Anonymous Mon 02 Nov 2020 03:12:53 No.78501511 Report

Quoted By: >>78502139

>>78501504
Here's the fusion wrapper.
Unfortunately I don't know if our 2000 DLL has any of this fusion stuff inside it, really hope it's not required.

Anonymous

Anonymous Mon 02 Nov 2020 04:04:34 No.78502048 Report

Quoted By:

>>78500334
any chance you can post the files you edited to get thru amd64 setup?

Anonymous

Anonymous Mon 02 Nov 2020 04:13:29 No.78502139 Report

Quoted By: >>78502292

>>78501511
Seems fusion stuff is used to load some bindings from WindowsLogon.manifest, any chance anyone with an XP install can upload that somewhere? should be in system32 afaik

Anonymous

View Same Google ImgOps iqdb SauceNAO file.png, 17KiB, 814x221

Anonymous Mon 02 Nov 2020 04:28:39 No.78502292 Report

Quoted By:

>>78502139
Huh nice, we actually have some of the fusion activation context stuff inside bamsrv

Anonymous

Anonymous Mon 02 Nov 2020 05:16:36 No.78502663 Report

Quoted By:

Bump

Anonymous

Anonymous Mon 02 Nov 2020 05:42:31 No.78502830 Report

Quoted By:

>>78500417
can someone try this with one of the beta winxpx64 builds specifically 5.2.3790.1069.srv03_spbeta.030905-1850 from late 2k3?

Anonymous

View Same Google ImgOps iqdb SauceNAO file.png, 62KiB, 962x869

Anonymous Mon 02 Nov 2020 06:18:19 No.78503089 Report

Quoted By: >>78503687 >>78503946

>>78500417
winlogin2000 seems to have a different code path for win64, just spawns a cmd window and waits for it to close, then finishes, this would probably need to be fixed for win64 support.

The fact that this gives same BSOD result as the other amd64 winlogons makes me think it might not be winlogon causing it, since this winlogon is hardly doing anything (or doing something completely different to the real amd64 winlogons from SP1 etc), that they both get the same crash doesn't add up

Anonymous

Anonymous Mon 02 Nov 2020 07:44:24 No.78503667 Report

Quoted By:

bump for windows 1.0 source code

Anonymous

Anonymous Mon 02 Nov 2020 07:46:02 No.78503687 Report

Quoted By:

>>78503089
>that they both get the same crash doesn't add up
oh actually if the cmd.exe launch fails then that could make the same bsod as winlogin exits
not sure why cmd.exe launch would fail though

Anonymous

Anonymous Mon 02 Nov 2020 08:15:32 No.78503915 Report

Quoted By: >>78503946

>>78500171
Can't someone write a replacement winlogon that does nothing?

Anonymous

Anonymous Mon 02 Nov 2020 08:18:48 No.78503946 Report

Quoted By: >>78504320

>>78503915
Maybe, seems like that's what the win64 version is meant to do anyway, just opens cmd.exe and does nothing: >>78503089
That it's crashing is weird, maybe cmd.exe isn't available yet during gui setup

Anonymous

Anonymous Mon 02 Nov 2020 08:59:06 No.78504320 Report

Quoted By:

>>78503946

You can get a cmd console in gui setup with SHIFT+F10.

has anyone tried running a checked build with a debug console to see what it says about winlogon.exe?

Anonymous

Anonymous Mon 02 Nov 2020 09:27:10 No.78504557 Report

Quoted By:

bump for longhorn source

Anonymous

View Same Google ImgOps iqdb SauceNAO file.png, 74KiB, 1278x991

Anonymous Mon 02 Nov 2020 09:54:59 No.78504785 Report

Quoted By: >>78504800 >>78504942

Sweet, added code to launch cmd.exe to our winlogin src and it works

Anonymous

View Same Google ImgOps iqdb SauceNAO file.png, 121KiB, 1280x960

Anonymous Mon 02 Nov 2020 09:56:18 No.78504800 Report

Quoted By: >>78504823 >>78504942

>>78504785
hackerman

Anonymous

View Same Google ImgOps iqdb SauceNAO file.png, 138KiB, 1280x960

Anonymous Mon 02 Nov 2020 09:58:59 No.78504823 Report

Quoted By: >>78504881 >>78504942 >>78505636

>>78504800
better pic that shows the error we're having with logging in.
strange bit is the error doesn't seem to be winlogin related, msgina is handling checking the login info etc itself. but it must be winlogin related because it works fine with the RTM winlogon...
I guess some part of the login process msgina uses must call back into winlogon maybe? Or winlogon needs to set something up that the process later relys on?
Hopefully bindiff against winlogon RTM (and beta without protection) and slowly fixing functions to match will get us somewhere...

Anonymous

Anonymous Mon 02 Nov 2020 10:05:07 No.78504881 Report

Quoted By: >>78504942 >>78506218 >>78511118

>>78504823
Changes I've done to winlogon2000 so far:
>built in shutinit.idl so the _c/_s files are created during winlogon build, should work under amd64 too I think but only tested x86
>fixed dispatch table to 1_4, made the 2 new functions we don't have code for point to dummy ones that'll print to debug log if called
>added Fusion_* functions and updated code to use them, requires WindowsLogon.manifest which doesn't seem to be in server2003 tho?
>added OpenCommandPrompt/CloseCommandPrompt & updated code to run them
>changed code to statically import winsta.dll instead of dynamically as it did before, since 2003 winlogon does it this way instead
>updated winlogon.h to include "msginaexports.h", linked winlogon against msgina.lib, and updated a few parts of the code to call the gina shell functions
>various tweaks to make some functions closer to the 2003 versions
despite this there's still a lot of differences though, and logging in still doesn't work unfortunately.
some of the differences are just functions randomly choosing to add/remove the security_cookie shit, no idea how to replicate it properly in our version.

Anonymous

Anonymous Mon 02 Nov 2020 10:13:50 No.78504942 Report

Quoted By:

>>78504785
>>78504800
>>78504823
>>78504881
Holy shit. Nice!

Anonymous

Anonymous Mon 02 Nov 2020 10:15:14 No.78504963 Report

Quoted By: >>78505002

Is there anything hugely essential that we need other than winlogon?

Anonymous

Anonymous Mon 02 Nov 2020 10:21:15 No.78505002 Report

Quoted By: >>78506477

>>78504963
Hmm I'm not sure, there's a ton of prebuilt stuff we don't have source for inside missing.7z which we need to extract for a working build atm, but that might just be to get around setup errors when it can't find the files, OS itself might work fine without needing them (afaik a lot of that is just drivers and shit which aren't really that important)

Hope the amd64 anon posts his updated layout.inf/txtsetup/etc files soon, since those should fix setup and make it require less files.

Anonymous

Anonymous Mon 02 Nov 2020 10:57:13 No.78505309 Report

Quoted By: >>78505325

Does anyone know how to turn .exe into .ex_? (in other words, what's the opposite of the 'expand' command?)

Anonymous

Anonymous Mon 02 Nov 2020 10:59:22 No.78505325 Report

Quoted By:

>>78505309
Ah nvm, seems you use "compress", but that isn't included in windows by default, leak includes it tho

Anonymous

Anonymous Mon 02 Nov 2020 11:35:18 No.78505636 Report

Quoted By:

>>78504823
Good work!

Anonymous

Anonymous Mon 02 Nov 2020 11:36:04 No.78505646 Report

Quoted By:

Bump

Anonymous

Anonymous Mon 02 Nov 2020 12:32:13 No.78506218 Report

Quoted By: >>78506302 >>78507105

>>78504881
Can I grab a copy of your latest winlogon source tree so I can add this to a 'missing files' .7z in order to let others dig in on amd64? (I'm the .inf guy) trying to let others in on the action here.

Anonymous

Anonymous Mon 02 Nov 2020 12:34:05 No.78506245 Report

Quoted By:

bump

Anonymous

Anonymous Mon 02 Nov 2020 12:40:26 No.78506302 Report

Quoted By:

>>78506218
>>78506218
I would wait until it is working.... Make no sense to provide broken stuff...

Anonymous

Anonymous Mon 02 Nov 2020 12:59:04 No.78506477 Report

Quoted By: >>78506538

>>78505002

Here is an initial copy of the missing binaries.amd64fre files that are needed to get postbuild with the pro sku more complete

The archive also has the amd64 kernel fixes (using the other anon's systime.c and exinit.c).

It also contains the modified layout.inf, dosnet.inf and txtsetup.sif for the pro sku.

There are still many issues with driver.cab

Basically you want to copy the kernel part over into your amd64 tree, complete a build for amd64 then before starting postbuild place the contents of the binaries.amd64fre directory from the archive in there then run postbuild on the pro sku. - you'll still have driver.cab issues but you should then be able to run oscdimg on the pro sku and get the iso which will allow you to make it through text mode setup, reboot, boot the amd64 kernel then winlogon will bsod before gui mode setup can start.

https://gofile.io/d/VKnMN9

Anonymous

Anonymous Mon 02 Nov 2020 13:05:33 No.78506538 Report

Quoted By:

>>78506477
I should add a word of caution about these files, they are pulled from AB1PXFRE_EN and are version 5.2.3790.1069 - the winlogon from here will not work properly on our RTM source tree so there may or may not be further future issues with these files (dll's and exe's especially) once we get past the winlogon stuff and actually start to get a system installed from these through gui mode setup.

Anonymous

Anonymous Mon 02 Nov 2020 13:45:54 No.78507071 Report

Quoted By:

>>78500072
Cucumber bumps!

Anonymous

View Same Google ImgOps iqdb SauceNAO file.png, 643KiB, 1280x960

Anonymous Mon 02 Nov 2020 13:47:56 No.78507105 Report

Quoted By: >>78507132 >>78507146 >>78507238 >>78507287

Themes work on the winlogin prompt now, just needed SXS manifest shit added in. After adding that I noticed the shutdown menu now started working too (previously pressing shutdown button after running explorer.exe wouldn't do anything), interesting.

Weird thing is winlogon seems to use two SXS manifests, the build tools are only setup to use 1 though so I had to hack the other one into the res.rc file.
Unfortunately this means if you switch to/from amd64 you need to update windowslogon_default.manifest with the right architecture you're building tho... no idea how to get around this properly.

>>78506218
Eh I wasn't sure since it's not actually working yet, but I guess cmd at least lets people experiment with it now.
Maybe there's a chance people here will work on improving it too... who am I kidding, seems everyone interested in fixing winlogon left weeks ago ;_;

Anyway here you go: https://gofile.io/d/gDrpSr

I also removed the win64-specific code that would try spawning cmd.exe & then exiting from this, so it should act more like the x86 version now, maybe it'd allow amd64 setup to progress? no idea

You might need to delete the older shutinit stuff from the other packs before using this, since they could interfere

Anonymous

Anonymous Mon 02 Nov 2020 13:49:28 No.78507132 Report

Quoted By: >>78507177 >>78507238

>>78507105
Thank you - I will test this puppy out!

Anonymous

Anonymous Mon 02 Nov 2020 13:50:53 No.78507146 Report

Quoted By:

>>78507105
I believe more people are lurking than we realize. Maybe a good chance some other folks will chime in. - here's hoping! :^

Anonymous

Anonymous Mon 02 Nov 2020 13:54:45 No.78507177 Report

Quoted By:

>>78507132
I didn't get around to testing with group-policy edits btw, only things I tried so far are cmd window stuff + checking if I could now login as admin.
Maybe one of the things I changed fixed the crash after using gpedit change to login, no idea, kinda doubt it but would be sweet if it did

Anonymous

Anonymous Mon 02 Nov 2020 14:01:37 No.78507238 Report

Quoted By: >>78507247 >>78507295

>>78507105
>>78507132
Oh crap I should have mentioned, cmd will only show if you have debug flags enabled inside win.ini

[WinlogonDebug]
LogFile=C:\Winlogon.txt
DebugFlags=Error,Warning,Trace,Init,Timeout,Sas,State,MPR,CoolSwitch,Profile,DebugLsa,DebugSpm,DebugMpr,DebugGo,Migrate,DebugServices,Setup,SC,Notify,Job

[MSGina]
LogFile=C:\Gina.txt
DebugFlags=Error,Warning,Trace,Domain,Cache

Should enable them all for both winlogon & msgina
Debug flag stuff might only be used in chk builds tho... you might have an easier time by editing OpenCommandPrompt inside wlx.c and removing the WinlogonInfoLevel check

Anonymous

Anonymous Mon 02 Nov 2020 14:02:39 No.78507247 Report

Quoted By:

>>78507238
>win.ini
C:\Windows\win.ini to be exact

Anonymous

View Same Google ImgOps iqdb SauceNAO winlogon11.png, 42KiB, 768x689

Anonymous Mon 02 Nov 2020 14:07:12 No.78507287 Report

Quoted By: >>78507308

>>78507105
Here's what my build log looks like now with the latest winlogon dir dropped in. (old winlogon dir renamed to winlogonXXX) any ideas?

Anonymous

Anonymous Mon 02 Nov 2020 14:07:23 No.78507295 Report

Quoted By:

>>78507238
>might only be used in chk builds tho
Should also note I've been using a chk build of winlogon fine with a fre server2003 iso.
Not sure if KD can connect when it's using a fre kernel though...

Anonymous

Anonymous Mon 02 Nov 2020 14:08:39 No.78507308 Report

Quoted By: >>78507375

>>78507287
Ah maybe those two don't exist in amd64/fre, I've only been building under i386/chk. If you comment out the lines they mention that should be fine

Anonymous

View Same Google ImgOps iqdb SauceNAO winlogon12.png, 61KiB, 1319x791

Anonymous Mon 02 Nov 2020 14:14:20 No.78507375 Report

Quoted By: >>78507406

>>78507308
Perhaps I will have to build under chk instead of fre - I get this when the added logevent and the winlogoninfolevel are commented.

Anonymous

Anonymous Mon 02 Nov 2020 14:17:02 No.78507406 Report

Quoted By: >>78507439

>>78507375
Hmm that's weird, those functions should be inside the contextactivation.cpp, hope it's not an amd64 problem

Anonymous

Anonymous Mon 02 Nov 2020 14:19:27 No.78507439 Report

Quoted By: >>78507555

>>78507406
Yep - there is an x86 ifdef in there!

Anonymous

Anonymous Mon 02 Nov 2020 14:27:58 No.78507555 Report

Quoted By: >>78507629

>>78507439
oooh yeah lol, good catch
that's from the file I copied the activation context crap from, was meant to remove it but completely slipped my mind lel

Anonymous

Anonymous Mon 02 Nov 2020 14:33:17 No.78507629 Report

Quoted By: >>78507669

>>78507555
once removed you land here on amd64fre

1>contextactivation.cpp(78) : error C2664: 'ActivateActCtx' : cannot convert parameter 2 from 'ULONG *' to 'ULONG_PTR *'
BUILD: Compile errors: not linking d:\srv03rtm\ds\security\gina\winlogon\daytona directory

Anonymous

Anonymous Mon 02 Nov 2020 14:36:01 No.78507669 Report

Quoted By: >>78507703

>>78507629
hm, editing contextactivation.h and changing ULONG ulCookie; to ULONG_PTR ulCookie might fix that

Anonymous

Anonymous Mon 02 Nov 2020 14:38:46 No.78507703 Report

Quoted By:

>>78507669
sure did lol I was trying to convert it in the .c file kek

Anonymous

Anonymous Mon 02 Nov 2020 14:41:58 No.78507737 Report

Quoted By: >>78507776 >>78507853

same before gui mode setup crash under the amd64 fre vm with quarter-installed system with the latest build of winlogon.

Anonymous

Anonymous Mon 02 Nov 2020 14:43:58 No.78507776 Report

Quoted By: >>78507841

>>78507737
Ah damn, guess we're gonna need to find a way to attach KD during setup
must be possible because how else would they debug their setup?

probably not much info about that on the net tho...

Anonymous

View Same Google ImgOps iqdb SauceNAO file.png, 11KiB, 654x156

Anonymous Mon 02 Nov 2020 14:50:11 No.78507841 Report

Quoted By: >>78507916 >>78508412

>>78507776
Ah interesting, ntsetup textmode has this code
Seems we need to build with PRERELEASE define for chk kernels to be able to kernel-debug during setup.
(I'm not actually sure if we can build a working chk kernel tho.. last time I tried it BSOD'd immediately, but that was i386 with all non-chk missing.7z crap, maybe amd64 would have better luck)

Anonymous

Anonymous Mon 02 Nov 2020 14:50:57 No.78507853 Report

Quoted By: >>78507873 >>78507916

>>78507737
On another retail installed x64 vm I swapped in this winlogon with and without the WinlogonInfoLevel check commented (with and without the return;) and all that happens is the system boots and the mouse pointer displays on a black background (winlogon is not exiting) but cmd.exe is also not starting.

Anonymous

Anonymous Mon 02 Nov 2020 14:52:38 No.78507873 Report

Quoted By: >>78507916

>>78507853
after some time apparently the logon dialog displays whut?!? (on a retail installed x64 vm)

Anonymous

Anonymous Mon 02 Nov 2020 14:55:38 No.78507916 Report

Quoted By: >>78507942

>>78507841
Actually I'm not sure if we actually need chk to kernel debug, it seems like we can probably do it under fre fine, I'll try out that PRERELEASE flag later with windbg if nobody else gets to it

>>78507853
>>78507873
Huh, not sure why it'd take so long to display, did cmd.exe show? you'd probably need the one with WinlogonInfoLevel commented out unless you edited win.ini too

Anonymous

View Same Google ImgOps iqdb SauceNAO winlogon13.png, 252KiB, 1024x768

Anonymous Mon 02 Nov 2020 14:57:58 No.78507942 Report

Quoted By: >>78508052

>>78507916
Nah I did not edit win.ini
Yeah it is with that commented - after powering down, swapping back in the retail winlogon and rebooting this is what i saw sitting in the event log

Anonymous

Anonymous Mon 02 Nov 2020 15:07:44 No.78508052 Report

Quoted By:

>>78507942
It takes 3 minutes exactly for the RPC calls to time out and the logon dialog to display - when trying to login now nothing happens except the dialog re-draws. (noticed as a flicker) Trying the guest account gives me a dialog about not having the log on through terminal services right - I think this is because I never correctly enabled the guest account on here - rebooting and testing that.

Anonymous

Anonymous Mon 02 Nov 2020 15:21:33 No.78508225 Report

Quoted By:

big noob here, i was scrolling in the the list of updates for server 2003 and x64

" https://support.microsoft.com/en-gb/help/914962/list-of-updates-in-windows-server-2003-service-pack-2 "

And i found this

" You may experience a system memory leak of private bytes in the Winlogon.exe process on a computer that is running Windows XP or Windows Server 2003
Article ID: 912354

M$ page for this hotfix is down but BA hes a copy :

betaarchive.com/wiki/index.php/Microsoft_KB_Archive/912354

SYMPTOMS
You may experience a system memory leak of private bytes in the Winlogon.exe process on a computer that is running Microsoft Windows XP or Microsoft Windows Server 2003. When this occurs, the operating system becomes unresponsive and must be restarted.

Note In some cases, the Windows Product Activation window may pop up and prompt you to activate the system even after you have completed the activation.

CAUSE
If you do not log on the computer, a system memory leak may occur. Over time, the operating system may leak memory in the Winlogon.exe process at a rate of approximately 1 to 2 megabytes (MB) an hour.

mabye this has nothing to due with the winlogon problems we have but thought i still mention it here :)

Anonymous

View Same Google ImgOps iqdb SauceNAO winlogon14.png, 175KiB, 1024x768

Anonymous Mon 02 Nov 2020 15:31:33 No.78508336 Report

Quoted By: >>78508575 >>78509510

finally was able to get this on the retail copy of x64 after the 3 minute timeout and after removing the return from the winlogoinfolevel didn't initally comment it for testing purposes. So this holds up on both x86 srckit fre and amd64 retail fre - on amd64 retail fre the RPC calls fail and you can't actually login - dialog just redraws - on amd64 srckit fre We can't get into gui mode setup. - Have not tested on x86 srckit yet.

There is also a MS bulletin about a race condition in winlogon

Anonymous

Anonymous Mon 02 Nov 2020 15:37:34 No.78508412 Report

Quoted By:

>>78507841
I build and use checked for a long time now. No problem for me. But I see that the it did noit besod If I use little ram like 1gb

Anonymous

Anonymous Mon 02 Nov 2020 15:51:30 No.78508575 Report

Quoted By: >>78508602

>>78508336
n1 anon
>>78500072
Also bump for general kernel optimization

Anonymous

Anonymous Mon 02 Nov 2020 15:54:04 No.78508602 Report

Quoted By:

>>78508575
Again it is not easy it's not like change from 02 to 03.... And again the kernel is already well optimized. And what you mean by optimized? Have you some number to say that is not?

Anonymous

Anonymous Mon 02 Nov 2020 16:05:11 No.78508769 Report

Quoted By: >>78508786 >>78508876

is there just no exinit.c?

Anonymous

Anonymous Mon 02 Nov 2020 16:06:20 No.78508786 Report

Quoted By:

>>78508769
(i'm saying this because i updated scorch.pl to remove all build artifacts from the repo, and there seems to be no exinit, were we working on an obj?)

Anonymous

Anonymous Mon 02 Nov 2020 16:12:37 No.78508876 Report

Quoted By:

>>78508769
Nope only WRK & NT4 has it, there's a remake from the .objs that seems to work pretty well tho

Anonymous

Anonymous Mon 02 Nov 2020 16:33:58 No.78509163 Report

Quoted By:

bump

Anonymous

Anonymous Mon 02 Nov 2020 16:58:06 No.78509445 Report

Quoted By:

Bump

Anonymous

Anonymous Mon 02 Nov 2020 17:02:54 No.78509510 Report

Quoted By: >>78509701

>>78508336
x86fre build of winlogon just sits indefinately at the black screen with build number and mouse pointer. Going to see if i can do a chk build.

Anonymous

Anonymous Mon 02 Nov 2020 17:13:31 No.78509652 Report

Quoted By:

I would be greatful if someone make mirrors of threads/sites through https://web.archive.org/save

Anonymous

Anonymous Mon 02 Nov 2020 17:16:48 No.78509701 Report

Quoted By: >>78510026

>>78509510
Hm, just checked and x86fre works fine for me, maybe something up with how you fixed LogEvent stuff?
Here's newest code, should build fine under fre/chk without changes needed, hopefully amd64 too
If this fixes x86 for you maybe it's worth checking amd64 again to see if rpc stuff was fixed

>winlogon200X_v1a.zip
https://gofile.io/d/aB6p3m

Anonymous

View Same Google ImgOps iqdb SauceNAO winlogon15.png, 481KiB, 2483x759

Anonymous Mon 02 Nov 2020 17:43:47 No.78510026 Report

Quoted By: >>78510065 >>78510100

>>78509701
After Testing the latest v1a build, the result is that:
amd64fre 1/4 installed VM == BSOD before GUI mode setup.

amd64 retail fre vm == sitting with desktop background and no mouse pointer for some long period (at least 3 minutes) then the cmd prompt and logon dialog load (RPC error suspected).

x86 srckit fre vm == sitting with black background, mouse pointer and build number and eventual bsod and reboot.

Anonymous

Anonymous Mon 02 Nov 2020 17:46:28 No.78510065 Report

Quoted By: >>78510098

>>78510026
looks like on the amd64 retail vm we are getting a successful logon in the event logs then an immediate logoff event (when the logon dialog redraws / flashes)

Anonymous

Anonymous Mon 02 Nov 2020 17:48:27 No.78510098 Report

Quoted By:

>>78510065
the logon id is also changing between that logon and logoff event in the system event logs as well as the "The LoadUserProfile call failed with the following error: The RPC server is unavailable. " error being logged after boot.

Anonymous

View Same Google ImgOps iqdb SauceNAO vmware_2020_11_02-17_45.png, 80KiB, 879x712

Anonymous Mon 02 Nov 2020 17:48:37 No.78510100 Report

Quoted By: >>78510119

>>78510026
>x86 srckit fre vm == sitting with black background, mouse pointer and build number and eventual bsod and reboot.
Weird, that works fine here for me.

I think I did have the same symptom before after my VM crashed a few times though, FS probably fried itself after all that, maybe something similar happened with yours too?
Maybe check if the original RTM winlogon works in that VM or not

Anonymous

Anonymous Mon 02 Nov 2020 17:49:50 No.78510119 Report

Quoted By: >>78510240

>>78510100
>works in that VM or not
still works I mean, after all the testing that's happened to it

Anonymous

Anonymous Mon 02 Nov 2020 18:00:05 No.78510240 Report

Quoted By: >>78510284

>>78510119
The original winlogon still works but stalled with the wallpaper loading before explorer popped up - figured out that was happening because I had the 5.1.2542.0 msgina.dll in here from some testing I did the other day. Will restore this to the srckit msgina.dll and I am sure the x86 vm will have the same results you have.

Update:
the msgina.dll is what was interfering with the stock winlogon. now trying your latest x86 winlogon.

Update:
yours works as expected now with the flashing/redrawn logon dialog after a login attempt, the immediate logon and logoff events getting stored in the event log as well as the "The LoadUserProfile call failed with the following error: The RPC server is unavailable. " happening on both the x86 srckit vm and the amd64 retail vm's - the retail vm still has the 3 minute wait thing going on for some reason - xa6 srckit one does not.

Anonymous

View Same Google ImgOps iqdb SauceNAO file.png, 71KiB, 821x346

Anonymous Mon 02 Nov 2020 18:04:31 No.78510284 Report

Quoted By: >>78510299 >>78510383

>>78510240
Hmm, are you getting this account restriction message at all?

Anonymous

Anonymous Mon 02 Nov 2020 18:05:39 No.78510299 Report

Quoted By: >>78510380 >>78510383

>>78510284
Oh wait I think you mentioned you changed the group policy stuff already?

Anonymous

Anonymous Mon 02 Nov 2020 18:08:03 No.78510329 Report

Quoted By:

So after all of this what is the status of am64 tools needed for build on 64bit machines?

Anonymous

Anonymous Mon 02 Nov 2020 18:12:07 No.78510380 Report

Quoted By:

>>78510299
Nah - got to fire up gpedit.msc and look in there for the "accounts: limit local account use of blank passwords to console logon only" policy under security settings -> local policies -> security options.

Originally before we had the cmd prompt access i had to swap the retail winlogon in there and boot, login and fire up gpedit and then power off, swap the built one back in and reboot.

Anonymous

Anonymous Mon 02 Nov 2020 18:12:22 No.78510383 Report

Quoted By: >>78510408

>>78510284
>>78510299
Yeah just checked it myself, the redraw stuff needs group policy edits to happen.

So it's looking like the new winlogon changes got rid of the crash after logging in at least, replacing it with the RPC server error.
I don't know if that actually means it's going further or not though, could be the crash only happens after RPC stuff is finished, and something that was changed is breaking RPC now... hopefully that's not the case though.

There's still the restriction shit which means it's still logging in as guest instead of admin for some reason, we can get past it by messing with group policy ofc, but really the root issue needs to be fixed, maybe it's this issue that causes the redraw problem.

Anonymous

Anonymous Mon 02 Nov 2020 18:13:39 No.78510408 Report

Quoted By: >>78510426 >>78510435 >>78510467

>>78510383
I don't think it is logging in as a guest I think the restriction stuff comes from the fact that by default there is no administrator password and logonui normally glosses over that somehow.

Anonymous

Anonymous Mon 02 Nov 2020 18:15:23 No.78510426 Report

Quoted By: >>78510467

>>78510408
Was just about to post the same actually, only just realized we don't need to enable the guest account stuff in gpedit, maybe guest stuff is a red herring.
If we set an admin password during setup, does it let us login without needing gp edits tho?
Maybe we can set password with system cmd prompt actually, hm

Anonymous

Anonymous Mon 02 Nov 2020 18:15:57 No.78510435 Report

Quoted By:

>>78510408
Another observation is that when we run anything using MMC (gpedit.msc, compmgmt.msc event log viewer etc). sometimes buttons won't respond until another open dialog is closed - this is happening because we are bending the rules and running explorer on the localsystem account.

Anonymous

Anonymous Mon 02 Nov 2020 18:18:12 No.78510467 Report

Quoted By: >>78510550

>>78510426
>>78510408
Yep just confirmed it, with a password set you don't need to edit any gpedit stuff, winlogon redraws which means login is going through, awesome.

So there's two problems, first is that it's enforcing non-blank passwords when it shouldn't be (winlogon2003 doesn't enforce it), and second is that login fails maybe due to RPC.

Anonymous

View Same Google ImgOps iqdb SauceNAO file.png, 70KiB, 1280x960

Anonymous Mon 02 Nov 2020 18:24:44 No.78510550 Report

Quoted By: >>78510577 >>78510589

>>78510467
Huh, logging in after a bad shutdown shows this, so it is definitely logging in successfully, something is forcing it to log out.

and fuck, now I just remembered something

In 2462 winlogon it's all unprotected, except for one function which seemed obfuscated as fuck
I tried editing that winlogon on that build so it wouldn't call that obfuscated function, guess what happens when you login without that function being ran?
Instant log out

Anonymous

Anonymous Mon 02 Nov 2020 18:26:32 No.78510577 Report

Quoted By:

>>78510550
>except for one function which seemed obfuscated as fuck
I know this sounds like some fag creepypasta shit, but I literally only just put the two things together.

Guess I'll have to test against 2462 again.

Anonymous

Anonymous Mon 02 Nov 2020 18:27:08 No.78510589 Report

Quoted By:

>>78510550
Nice! :-)

Anonymous

Anonymous Mon 02 Nov 2020 18:42:11 No.78510833 Report

Quoted By: >>78511054 >>78511346

Are all of these winlogon screenshots from the 2000 winlogon ported to XP/2003 or merely sunlogon?

Anonymous

Anonymous Mon 02 Nov 2020 18:55:08 No.78511054 Report

Quoted By: >>78511317 >>78512051

>>78510833
They are mixing version and this result in problems. This is exactly why I am against copy stuff from other places. We rather reverse the retails version it take more time but it easier to do

Anonymous

Anonymous Mon 02 Nov 2020 18:59:18 No.78511118 Report

Quoted By:

>>78504881
the manifest might be inside winlogon.exe as a resource.

Anonymous

Anonymous Mon 02 Nov 2020 19:14:30 No.78511317 Report

Quoted By: >>78511873

>>78511054
>We rather reverse the retails version it take more time but it easier to do
You want to reverse all of winlogon by scratch? lmao
the XP one is built on top of the 2000 one, it only makes sense to use 2000's as a base and reverse the changes onto it

Anonymous

View Same Google ImgOps iqdb SauceNAO holy SHIT.png, 31KiB, 1280x960

Anonymous Mon 02 Nov 2020 19:15:52 No.78511329 Report

Quoted By: >>78511346 >>78511356 >>78511533

The problem does seem to be LoadUserProfile, commenting out the code for it allows login to proceed, background color changes, but nothing else happens because it probably needed LoadUserProfile to work.
So now to figure out why LoadUserProfile isn't working right...

Anonymous

Anonymous Mon 02 Nov 2020 19:16:54 No.78511346 Report

Quoted By:

>>78511329
forgot to mention, login box disappears too, as you can see in pic :)

>>78510833
sunlogin has no use, this is all 2000

Anonymous

Anonymous Mon 02 Nov 2020 19:17:56 No.78511356 Report

Quoted By:

>>78511329
Very nice :-) Please don't get discouraged and keep up the excellent progress Woot Woot!

Anonymous

View Same Google ImgOps iqdb SauceNAO kanbaru.jpg, 180KiB, 1920x1080

Anonymous Mon 02 Nov 2020 19:29:37 No.78511533 Report

Quoted By: >>78511617 >>78511625

>>78511329
Just bumping the thread.
Btw will the source code and patches be available at all times when you finish it, or will you be jerks and make it a closed project?
I mean I'm also putting a lot of effort into this project, that is I bump the thread every day!

Anonymous

Anonymous Mon 02 Nov 2020 19:35:52 No.78511617 Report

Quoted By: >>78512082

>>78511533
Well I've been posting pretty much every fix I made, even though I don't expect many will actually improve them, hopefully I'm helping someone out by posting them tho.

I got no doubt there's closed projects already working on shit with this though, saw some guy making progress with XPSP1 but of course they never posted any info how, OpenNT guy has been pretty quiet lately too...

Anonymous

Anonymous Mon 02 Nov 2020 19:36:31 No.78511625 Report

Quoted By:

>>78511533
the source to all of our stuff is available in patchwork over the last many threads. eventually it'll be collected on the git.
speaking of that i'm the webadmin for new hidden git and it will be down all day as the raid controller failed. sorry.

Anonymous

Anonymous Mon 02 Nov 2020 19:55:37 No.78511873 Report

Quoted By: >>78511929 >>78511945 >>78511978 >>78512165

>>78511317
We have a lot of problems and seem we are going nowhere..... At least with decomp some progress can be made... Like We have to have a solution that work with no settings changing.

Anonymous

Anonymous Mon 02 Nov 2020 19:59:46 No.78511929 Report

Quoted By:

>>78511873
>At least with decomp some progress can be made
In about 5 years maybe?
Even reactos hasn't finished decompiling all of winlogon lol

Anonymous

Anonymous Mon 02 Nov 2020 20:01:17 No.78511945 Report

Quoted By:

>>78511873
>we are going nowhere
There's been a bunch of developments in the same thread you're in right now dude, maybe try reading instead of trying to troll the only people actually working on this

Anonymous

Anonymous Mon 02 Nov 2020 20:03:16 No.78511978 Report

Quoted By: >>78512008

>>78511873
You're more than welcome to download IDA 7.5 or ghidra and start doing some disassembly - perhaps YOU will be the egghead that will solve all our problems :-) - This is the spirit of open-source not-for-profit projects such as this one! Anyone can contribute and improve things for everyone else! I encourage you to please go grab IDA and take a stab at some stuff!

Anonymous

Anonymous Mon 02 Nov 2020 20:05:42 No.78512008 Report

Quoted By:

>>78511978
It's all in the name of educational purposes anyway in my book.

Anonymous

Anonymous Mon 02 Nov 2020 20:08:45 No.78512051 Report

Quoted By:

>>78511054
The idea of this isn't to make a working system with proprietary components. If that were the case, we would just use normal XP. We want a fully open-source Windows XP.

Anonymous

Anonymous Mon 02 Nov 2020 20:11:03 No.78512082 Report

Quoted By:

>>78511617
OpenNT guy said he has a lot of work/family shit going on, so he hasn't had much time. He said so a few threads ago.

Anonymous

Anonymous Mon 02 Nov 2020 20:17:42 No.78512165 Report

Quoted By:

>>78511873
Based

Anonymous

Anonymous Mon 02 Nov 2020 20:29:00 No.78512298 Report

Quoted By: >>78513902 >>78534516

>>78454230

I fixed h2inc.exe built from the sources in \NT\base\mvdm\dos\v86\tools\src, it should now work as part of the build process as it generates the output file, so there is no need for MS DOS Player for this one too.
The rc.exe is still different, I included the one from NT 3.5, but it is still different (newer?). Anyone has the code of older versions (early 90's) of resource compiler?.

here anonfiles()com/B1seg2m1p8/16_bit_build_tools_v2_zip

Anonymous

View Same Google ImgOps iqdb SauceNAO file.png, 49KiB, 1280x960

Anonymous Mon 02 Nov 2020 20:29:38 No.78512308 Report

Quoted By: >>78512378 >>78512523

Found a fix for LoadUserProfile, was literally just one line missing from winlogon to init the userprofile crap inside userenv.

blank-passwords are still restricted though, but logging in with a non-blank password gives you... the exact same result I had from commenting out LoadUserProfile.. ;_;

No error message or redraw at least, maybe it's just having an issue starting up the shell or something.

Anonymous

View Same Google ImgOps iqdb SauceNAO file.png, 145KiB, 1422x952

Anonymous Mon 02 Nov 2020 20:36:59 No.78512378 Report

Quoted By: >>78512619 >>78512623 >>78512947

>>78512308
Unfortunately it seems the code for loading the shell is that obfuscated crap I talked about seeing in 2462, no way I could figure this crap out.
Gonna have to look into older whistler builds I guess

Anonymous

View Same Google ImgOps iqdb SauceNAO file.png, 30KiB, 473x286

Anonymous Mon 02 Nov 2020 20:48:48 No.78512523 Report

Quoted By: >>78512593 >>78512641 >>78512709

>>78512308
It's definitely logging in though, just need to find how to fix shell launch

Anonymous

Anonymous Mon 02 Nov 2020 20:53:34 No.78512593 Report

Quoted By:

>>78512523
what is the function, that launches the shell, called?

Anonymous

Anonymous Mon 02 Nov 2020 20:56:14 No.78512619 Report

Quoted By: >>78512641

>>78512378
Quite a few Whistler Server CHK iso's on archive.org, you could see if any of that would help?

Anonymous

Anonymous Mon 02 Nov 2020 20:56:40 No.78512623 Report

Quoted By:

>>78512378
classic 'security through obfuscation'

Anonymous

Anonymous Mon 02 Nov 2020 20:58:08 No.78512641 Report

Quoted By: >>78512680 >>78512717

>>78512523
DoStartShell in 2000/XP beta1, sometime between beta1 (2296) and beta2 (2462) they stripped the name and started obfuscating that shit tho

>>78512619
Do you know if their build numbers are below 2462?

Anonymous

Anonymous Mon 02 Nov 2020 21:00:53 No.78512680 Report

Quoted By:

>>78512641
the non-existent 23xx builds were likely a one-off where build 2300 introduced Palladium into the OS (DRM, lots of new security features), and when they skipped it, were obfuscating the fact that all that shit was added to Whistler.

Anonymous

Anonymous Mon 02 Nov 2020 21:02:52 No.78512709 Report

Quoted By:

>>78512523
VERY VERY NICE!

Anonymous

Anonymous Mon 02 Nov 2020 21:03:27 No.78512717 Report

Quoted By: >>78512780

>>78512641
One here is 2267 if that help
https://archive.org/details/osx86microsoftwindowswhistlerprofessionaleditionbuild2267prebeta1checkeddebugen

Anonymous

Anonymous Mon 02 Nov 2020 21:07:53 No.78512780 Report

Quoted By:

>>78512717
Going on from this there is a collection of Whistler betas and some are checked

https://archive.org/details/Windows-Whistler-Build-2202-2600-collection-71-files

Anonymous

View Same Google ImgOps iqdb SauceNAO file.png, 52KiB, 544x443

Anonymous Mon 02 Nov 2020 21:17:51 No.78512923 Report

Quoted By:

good old printf debugging
these should be going up to 17, something is stopping it after 14
the two lines of code between 14 & 15:
>WlWalkNotifyList( pTerm, WL_NOTIFY_STARTSHELL );
>RemoveStatusMessage(TRUE);
hmm

Anonymous

Anonymous Mon 02 Nov 2020 21:19:49 No.78512947 Report

Quoted By:

>>78512378

These links seems relevant to the logon process, it has code in there and the screenshot are from Windows XP - google translate makes sense of them

blog.csdn.net/chenyujing1234/article/details/7973618
blog.csdn.net/chenyujing1234/article/details/8028222

Anonymous

View Same Google ImgOps iqdb SauceNAO homegrown.webm, 841KiB, 1274x946

Anonymous Mon 02 Nov 2020 21:31:50 No.78513104 Report

Quoted By: >>78513132 >>78513150 >>78513608 >>78513750 >>78513764 >>78514108 >>78514756 >>78516199 >>78524896 >>78529108

fucking FINALLY

Anonymous

Anonymous Mon 02 Nov 2020 21:32:39 No.78513117 Report

Quoted By:

Man I wish I knew more of this kind of stuff so I could help, wouldn't even know where to start, I can manage a build and a few small tweaks but you guys seem to be working magic

Anonymous

View Same Google ImgOps iqdb SauceNAO file.png, 112KiB, 1280x960

Anonymous Mon 02 Nov 2020 21:33:29 No.78513132 Report

Quoted By:

>>78513104
i should have included start menu in vid, oops

Anonymous

Anonymous Mon 02 Nov 2020 21:34:22 No.78513150 Report

Quoted By:

>>78513104
Holy fuckballs

Anonymous

Anonymous Mon 02 Nov 2020 22:06:38 No.78513608 Report

Quoted By:

>>78513104
nice job!

Anonymous

Anonymous Mon 02 Nov 2020 22:16:23 No.78513750 Report

Quoted By:

>>78513104
HOLY SHIT, BATMAN! - YOU ROCK!

Anonymous

View Same Google ImgOps iqdb SauceNAO xp on left 2000 on right.png, 161KiB, 1869x899

Anonymous Mon 02 Nov 2020 22:17:29 No.78513764 Report

Quoted By: >>78513811 >>78522521 >>78534460

>>78513104
If anyone wants to know what the problem was, it's something to do with the "Run Group Policy Logon Scripts" being ran by WlWalkNotifyList
Some reason they don't finish and it keeps waiting for them until timeout, 600 secs later.
Can get around it by removing the login scripts from being executed ofc, which is what I did in webm, but would be much better to figure out why it's stalling in the first place.

Seems to be something to do with StartProcessInJob maybe, at least that's the only function related to this crap that seems pretty different between 2000 & XP.
I've had enough winlogon for today though, I'll try copying that over tomorrow

Anonymous

Anonymous Mon 02 Nov 2020 22:20:52 No.78513811 Report

Quoted By:

>>78513764
You need a well deserved break man lol

Anonymous

Anonymous Mon 02 Nov 2020 22:28:39 No.78513902 Report

Quoted By:

>>78512298
based moyefi

Anonymous

Anonymous Mon 02 Nov 2020 22:44:53 No.78514108 Report

Quoted By: >>78514208

>>78513104
So do we have a working winlogon now?

Anonymous

Anonymous Mon 02 Nov 2020 22:51:43 No.78514208 Report

Quoted By:

>>78514108
We can finally build a working winlogon ye
for x86 at least anyway

Anonymous

Anonymous Mon 02 Nov 2020 23:13:43 No.78514467 Report

Quoted By:

bump

Anonymous

Anonymous Mon 02 Nov 2020 23:36:31 No.78514742 Report

Quoted By: >>78514837

Someone needs to update the guide.

Anonymous

View Same Google ImgOps iqdb SauceNAO 7547373753.png, 140KiB, 661x500

Anonymous Mon 02 Nov 2020 23:38:15 No.78514756 Report

Quoted By: >>78514857

>>78513104
Whats the context here, i need a rundown.

Anonymous

Anonymous Mon 02 Nov 2020 23:45:17 No.78514837 Report

Quoted By: >>78515032 >>78517491

>>78514742
What with?

Anonymous

Anonymous Mon 02 Nov 2020 23:47:03 No.78514857 Report

Quoted By:

>>78514756
it's all code that we compiled ourselves handling the login, before this we needed to use winlogon.exe from the retail ISO which had activation shit inside it and likely backdoors etc

Anonymous

Anonymous Tue 03 Nov 2020 00:01:35 No.78515032 Report

Quoted By:

>>78514837
with all the new based anon patches maybe ?

Anonymous

Anonymous Tue 03 Nov 2020 01:03:00 No.78515739 Report

Quoted By:

bump

Anonymous

View Same Google ImgOps iqdb SauceNAO ruby.png, 31KiB, 400x400

Anonymous Tue 03 Nov 2020 01:38:50 No.78516199 Report

Quoted By:

>>78513104
Nice.
Let me bump this thread for you.

Anonymous

Anonymous Tue 03 Nov 2020 02:26:06 No.78516732 Report

Quoted By: >>78516867 >>78516869

Could someone help, I am making myself (and others maybe if interested) a little batch script as a 'frontend' to the build env, I got it to load in razzle fine.. but when I go to load anything from the menu (e.g prebuild.cmd or build -bcZP) it throws this
>="1" Was unexpected at this time

I know the variables from Razzle are kept on to my batch, as the srckit title bar, %_NTROOT% etc show in my batch.
What am I missing?

Anonymous

Anonymous Tue 03 Nov 2020 02:27:07 No.78516745 Report

Quoted By: >>78517505

any news regarding running Windows 10 software?

Anonymous

Anonymous Tue 03 Nov 2020 02:38:18 No.78516867 Report

Quoted By: >>78516904

>>78516732

Not sure how your frontend (interactive menu?) batch file looks, but when comparing values you might have to use double equal signs.

Here is an example: https://www.sevenforums.com/tutorials/78083-batch-files-create-menu-execute-commands.html

Anonymous

Anonymous Tue 03 Nov 2020 02:38:21 No.78516869 Report

Quoted By:

>>78516732
Scratch that fixed it.. fucking missed a = lol

It's too late

Anonymous

Anonymous Tue 03 Nov 2020 02:41:47 No.78516904 Report

Quoted By:

>>78516867
Yeah I realised my rookie mistake, thanks anyway

Anonymous

Anonymous Tue 03 Nov 2020 03:35:32 No.78517426 Report

Quoted By:

Bump

Anonymous

Anonymous Tue 03 Nov 2020 03:42:13 No.78517491 Report

Quoted By:

>>78514837
winlogon

Anonymous

Anonymous Tue 03 Nov 2020 03:43:16 No.78517505 Report

Quoted By: >>78517546

>>78516745
We just managed to log in to the system, Windows 10 support probably will never happen.

Anonymous

Anonymous Tue 03 Nov 2020 03:47:20 No.78517540 Report

Quoted By:

Any info on Sizzle?

Anonymous

Anonymous Tue 03 Nov 2020 03:48:22 No.78517546 Report

Quoted By: >>78517579 >>78517688 >>78521233

>>78517505
Adding most of the missing apis is actually pretty easy. Some need kernel support but most of the new apis are really quite trivial.

Anonymous

Anonymous Tue 03 Nov 2020 03:51:36 No.78517579 Report

Quoted By: >>78517685 >>78517688

>>78517546
I just wanna play games. When can I switch to xp as a daily os?

Anonymous

Anonymous Tue 03 Nov 2020 04:04:03 No.78517685 Report

Quoted By: >>78518090

>>78517579
Probably no going to happen. Running modern productivity software is in reach, but modern games that would require supporting the shitty vista graphics display model.

Anonymous

Anonymous Tue 03 Nov 2020 04:04:16 No.78517688 Report

Quoted By:

>>78517579
>>78517546
maybe 'WINED3D FOR WINDOWS' can be helpful in figuring out a means of supporting later DirectX API's. It acts as a translation layer to either Vulkan or OpenGL.

Anonymous

Anonymous Tue 03 Nov 2020 04:48:24 No.78518090 Report

Quoted By: >>78518125

>>78517685
nothing's particularly shitty about LDDM?
virtualization of apps is pretty important for modern features like compositing and such.

Anonymous

Anonymous Tue 03 Nov 2020 04:50:47 No.78518115 Report

Quoted By: >>78524462

A little bit off-topic, but after watching you guys fight for 3 days (which was probably quite a bit longer) just to get login working, it really does put the issues I've been having with this silly DFI board into perspective.
So, now that you guys have managed to get login working, what next? I find this to be quite interesting.

Anonymous

Anonymous Tue 03 Nov 2020 04:52:45 No.78518125 Report

Quoted By: >>78523259

>>78518090
>compositing
compositing is shit

Anonymous

Anonymous Tue 03 Nov 2020 05:42:57 No.78518560 Report

Quoted By:

bump*

Anonymous

Anonymous Tue 03 Nov 2020 07:02:31 No.78519146 Report

Quoted By:

Bump

Anonymous

Anonymous Tue 03 Nov 2020 09:51:27 No.78520357 Report

Quoted By:

Giving a bump before I go to sleep. Good to see some progress.

Anonymous

Anonymous Tue 03 Nov 2020 11:04:25 No.78520887 Report

Quoted By:

Bump

Anonymous

View Same Google ImgOps iqdb SauceNAO mad.png, 523KiB, 800x800

Anonymous Tue 03 Nov 2020 11:05:44 No.78520903 Report

Quoted By:

>>78500072
Just bumping.

Anonymous

Anonymous Tue 03 Nov 2020 11:09:24 No.78520935 Report

Quoted By: >>78520977

i suggest porting one open source browser to xp. Propably we can disable most things that need new apis for example VR. Actually there is mypal which is only internet browser still supporting xp

Anonymous

View Same Google ImgOps iqdb SauceNAO crab.png, 491KiB, 999x1082

Anonymous Tue 03 Nov 2020 11:14:30 No.78520977 Report

Quoted By:

>>78520935
>i suggest porting one open source browser to xp.
Y-yeah! Let's just wait to see if anons can make the system work, and then spend time on porting applications.

bump

Anonymous

Anonymous Tue 03 Nov 2020 11:48:34 No.78521233 Report

Quoted By:

>>78517546

When you look at this list, there is the GetTickCount64 API for example that it is only available from version 6.0+ of Windows, and any software relying on it will not run in Windows XP, because it is missing

https://www.geoffchappell.com/studies/windows/win32/kernel32/api/index.htm

Many of them could be added to the code using the Wine project. Or even raw assembly from the originals?

Some Wine implementations from here like can be useful: https://github.com/lkrotowski/wine-starcraft/blob/master/dlls/kernel32/kernel_main.c
e.g.
ULONGLONG WINAPI GetTickCount64(void)
{
LARGE_INTEGER counter, frequency;
NtQueryPerformanceCounter( &counter, &frequency );
return counter.QuadPart * 1000 / frequency.QuadPart;
}

Anonymous

Anonymous Tue 03 Nov 2020 12:42:43 No.78521736 Report

Quoted By: >>78522053

bump

Anonymous

Anonymous Tue 03 Nov 2020 13:08:56 No.78522053 Report

Quoted By:

>>78521736
This.

Anonymous

Anonymous Tue 03 Nov 2020 13:18:11 No.78522151 Report

Quoted By:

I found WDK/DDK isos etc
https://archive.org/details/tool-microsoft-ddk-wdk

Anonymous

Anonymous Tue 03 Nov 2020 13:48:09 No.78522450 Report

Quoted By:

Windows ME source leak when?

Anonymous

Anonymous Tue 03 Nov 2020 13:54:17 No.78522521 Report

Quoted By: >>78525027

>>78513764

So :-) Can I PRETTY PLEASE get a copy of your winlogon tree for testing / farting around purposes?

Signed - Mr. Anon Tester who has been testing junk and discouraging negativity! :p

Anonymous

Anonymous Tue 03 Nov 2020 14:51:01 No.78523224 Report

Quoted By:

bump

Anonymous

Anonymous Tue 03 Nov 2020 14:53:46 No.78523259 Report

Quoted By:

>>78518125
no it isn't, it's just sensible. drawing each window to texture and then then putting them on the screen reduces stacking artifacts(cinderella windows xp bars, etc.) and as it is windows have to redraw any time a window collides with its bounds. it sucks.

Anonymous

Anonymous Tue 03 Nov 2020 15:00:07 No.78523335 Report

Quoted By: >>78523346 >>78523745

>Kernel Exports Added for Windows Server 2003 SP1
https://www.geoffchappell.com/studies/windows/km/ntoskrnl/history/names52sp1.htm
>These additions represent by far the largest expansion of the kernel’s exported functionality for any service-pack release in the history of Windows. Indeed, more functions were added for Windows Server 2003 SP1 than for the original Windows Server 2003.
Good luck WRK anons

Anonymous

Anonymous Tue 03 Nov 2020 15:01:11 No.78523346 Report

Quoted By:

>>78523335
Also apparently a lot of those exports added in SP1 are for amd64 only - would be interesting to see if our SP0 amd64 build includes any of them

Anonymous

Anonymous Tue 03 Nov 2020 15:38:18 No.78523745 Report

Quoted By:

>>78523335
>https://www.geoffchappell.com/studies/windows/km/ntoskrnl/history/names52sp1.htm
Also this is why using WDK stuff id not so good, if the change so much in kernel we could add broken stuff or stuff that need other changes in other files.

Anonymous

Anonymous Tue 03 Nov 2020 15:55:22 No.78523931 Report

Quoted By:

pmuB

Anonymous

Anonymous Tue 03 Nov 2020 16:45:50 No.78524462 Report

Quoted By:

>>78518115
see >>78318824

Anonymous

Anonymous Tue 03 Nov 2020 16:46:16 No.78524465 Report

Quoted By:

Bump

Anonymous

Anonymous Tue 03 Nov 2020 16:54:30 No.78524563 Report

Quoted By: >>78524906

If this winlogon works for Server 2003, would it work for XP, too?

Anonymous

Anonymous Tue 03 Nov 2020 17:18:01 No.78524896 Report

Quoted By: >>78525027

>>78513104
Where to get working winlogon from?

Anonymous

Anonymous Tue 03 Nov 2020 17:18:40 No.78524906 Report

Quoted By:

>>78524563
Yes - we are just waiting on the anon to hopefully release it. - I think anon needed a large break!

Anonymous

Anonymous Tue 03 Nov 2020 17:25:26 No.78525027 Report

Quoted By: >>78525075 >>78525081

>>78522521
This should work I think, haven't tested this pack itself yet tho, hopefully I didn't forget to add anything:

>winlogon200X_v2.zip
https://gofile.io/d/EF0iw6

readme has notes about non-blank passwords etc.

As with the other 200X packs I've only tested things under x86/chk too, would be nice if someone can try other combinations.

>>78524896
Above, hopefully

Anonymous

Anonymous Tue 03 Nov 2020 17:28:05 No.78525075 Report

Quoted By: >>78525193

>>78525027
Also if someone wants to try this on XP my guess is winlogon would have to be built under the XPSP1 tree, I might be wrong though, but it's worth a try if someone has issues with trying winlogon built under server2003

Anonymous

Anonymous Tue 03 Nov 2020 17:28:36 No.78525081 Report

Quoted By: >>78525183

>>78525027
Tester dude here - checking stuff out on 1/4 installed amd64, amd64 retail and srckit x86 vms

Thanks for the hard work!

Anonymous

Anonymous Tue 03 Nov 2020 17:34:25 No.78525183 Report

Quoted By: >>78525286 >>78525293

>>78525081
no logon under x86 fre srckit - dialog redraws.

Anonymous

Anonymous Tue 03 Nov 2020 17:34:49 No.78525193 Report

Quoted By: >>78525286

>>78525075
The Server 2003 tree can create an XP ISO.

Anonymous

Anonymous Tue 03 Nov 2020 17:40:36 No.78525286 Report

Quoted By: >>78525390 >>78525402 >>78525512 >>78525595

>>78525183
Ah wtf, I think I accidentally overwrote the bit that fixes that, shit
edit winlogon.c, search "Start the system processes", above it add

if (g_Console) {
 InitializeUserProfile();
}

>>78525193
XP running on 3790 yeah, I meant if someone wants to try with 2600/SP1

Anonymous

Anonymous Tue 03 Nov 2020 17:41:02 No.78525293 Report

Quoted By:

>>78525183
3 minute delay on amd64 retail then the logon dialog and command prompt draw but no logon - logon dialog redraws

Anonymous

Anonymous Tue 03 Nov 2020 17:50:26 No.78525390 Report

Quoted By: >>78525402

>>78525286
Can provide fixed zip?

Anonymous

Anonymous Tue 03 Nov 2020 17:51:27 No.78525402 Report

Quoted By: >>78531310

Somehow I overwrote my winlogon.c with the v1a one just before copying shit for v2, ugh
The thing in >>78525286 was the only change I made in there luckily so no other fix got lost, in the winlogon.c at least...
Here's pack with that fix included.

>winlogon200X_v2a.zip
https://gofile.io/d/1ady8A

>>78525390
Sure

Anonymous

Anonymous Tue 03 Nov 2020 17:59:36 No.78525512 Report

Quoted By: >>78525535 >>78525595

>>78525286
THAT DID THE TRICK on x86 srckit.

NOTES: on x86 srckit fre build - when shutting down from the start menu, the shell closes but the shutdown never happens for some reason. - sits with no shell and the wallpaper drawn.

On amd64 pro retail (5.2.3790.src03_sp1_rtm.050324-1447):
The system boots, wallpaper draws, 3 minutes pass and the command prompt loads minimized and the logon dialog loads, trying to login with a valid account results in the dialog disappearing for approximately 1 second then it re-draws with no logon. undoubtedly this is because of RPC (errors are present in the system event log with event ID 7005 for the "loaduserprofile call failing with the following error: the rpc server is unavailable".

Notes: 1/4 way installed amd64 srckit fre vm:
We get a little further along and nearer to GUI mode setup starting - The kernel boots, green desktop background loads MOUSE POINTER now loads and it sits around a little longer but then it restarts with no visible bsod. VMware states: "A fault has occurred causing a virtual CPU to enter the shutdown state. If this fault had occurred outside of a virtual machine, it would have caused the physical machine to restart. The shutdown state can be reached by incorrectly configuring the virtual machine, a bug in the guest operating system, or a problem in VMWare workstation. click OK to restart the virtual machine or cancel to power off the virtual machine.

Anonymous

Anonymous Tue 03 Nov 2020 18:01:36 No.78525535 Report

Quoted By: >>78525626

>>78525512
On the 1/4 installed VM, it may now be an issue of having SP1 dll's and exe's that we were missing that I added in on postbuild from the retail SP1 disc causing a crash or it may still be something with winlogon. Will try to explore this some more.

Anonymous

Anonymous Tue 03 Nov 2020 18:05:41 No.78525595 Report

Quoted By: >>78525721 >>78525742

>>78525512
Aha nice, good to hear

afaik the shutdown hanging is related to the GPO shit I mentioned, shutdown sends an event notification to the GPO scripts but seems the way it's handled is broken in this, thought I disabled all that by removing GPO events being added but maybe I missed one or something.

amd64 one is strange, the RPC stuff is what the fix in >>78525286 should work around, userenv only uses RPC if it thinks that it's a remote logon, without initializing user profile stuff it thinks even local logins are remote and tries contacting RPC (and I guess since logins are all meant to be local there's no RPC server to handle it?)

Maybe amd64 needs something else to stop it trying to contact RPC, guess I'll have to look into amd64 userenv soon.

Anonymous

Anonymous Tue 03 Nov 2020 18:08:17 No.78525626 Report

Quoted By: >>78525663

>>78525535
After this cpu error occurs this thing continues to crash before even loading ntldr so whatever induced this crash (be it winlogon or my mismatched dll's / exe's) it's a bad sort of crash.

You have to completely power off the vm to recover.

Anonymous

Anonymous Tue 03 Nov 2020 18:10:54 No.78525663 Report

Quoted By: >>78525882 >>78525983

>>78525626
I don't think there are any other retail or prerelease builds that are closer than AB1EXFRE_EN or AB1PXFRE_EN that we can grab the missing dll's exe's for postbuild from.

Anonymous

Anonymous Tue 03 Nov 2020 18:16:35 No.78525721 Report

Quoted By: >>78525795

>>78525595
The RPC error is NOT happening on the x86fre srckit build. Only happens on that amd64 retail build (5.2.3790.src03_sp1_rtm.050324-1447).

No way for me to know if it is happening from our built amd64 tree build since It won't go up through GUI mode setup. - Currently investigating this as a missing dll/exe mismatch.

Anonymous

Anonymous Tue 03 Nov 2020 18:18:05 No.78525742 Report

Quoted By: >>78525795

>>78525595
The shutdown was hanging because command prompt was still open and would not forcibly close by the logoff / shutdown attempt. LOL

Anonymous

Anonymous Tue 03 Nov 2020 18:21:25 No.78525795 Report

Quoted By: >>78525829

>>78525721
>The RPC error is NOT happening on the x86fre srckit build.
Yep, that's because we're calling InitializeUserProfile(), that should be telling userenv not to use RPC since logins in this process are from winlogon and should be local, but I guess in amd64 case either something is going wrong with this process, or userenv maybe needs something else to tell it this.

In worst case maybe SP1 userenv only works via RPC... I'm not sure how we're meant to actually start this RPC server tho, I didn't see anything in winlogon about it.

>>78525742
Ooh lool, maybe I forgot to add a call to CloseCommandPrompt somewhere

Anonymous

Anonymous Tue 03 Nov 2020 18:23:48 No.78525829 Report

Quoted By:

>>78525795
>CloseCommandPrompt
Hmm, I think I've added all the calls that 2462 added for this, but RTM also has a new call to it inside some obfuscated section, ughh

Anonymous

Anonymous Tue 03 Nov 2020 18:27:14 No.78525882 Report

Quoted By: >>78525943 >>78525983

>>78525663
https://0bin.net/paste/bqRU0-Fy#Sed8WXJyhH0-EG3HyF7cAYSSRN9sKGshSOmqejIoqz1

This is a list of all the DLL's EXE's and SYS files that are missing for amd64 builds (that are being grabbed from the AB1PXFRE_EN retail release)

The new non-bsod crash could easily be coming from one of these swapped in files!

Also lots of driver.cab issues.

Anonymous

View Same Google ImgOps iqdb SauceNAO file.png, 125KiB, 1151x970

Anonymous Tue 03 Nov 2020 18:32:04 No.78525943 Report

Quoted By: >>78525980 >>78532818

>>78525882
It'd probably be easier to attach windbg to setup and see where exactly it's crashing, will probably tell you the exact DLL responsible too.

Seems that making setup enable KD you just need to change prerelease.inc so PRERELEASE=1, rebuild ntsetup shit, then you can probably follow https://samsclass.info/126/proj/p12-WinDbg-PC to setup VMware to let KD serial connection thru

Then grab new windbg and make a connection like pic rel (from my setup), then boot VM and hopefully it'll attach.

This is assuming you use VMware of course... I'll probably try having a look myself soon after I get some more winlogon shit fixed

Anonymous

Anonymous Tue 03 Nov 2020 18:34:33 No.78525980 Report

Quoted By:

>>78525943
I don't know the exact baud rate setup uses tho.. might need to experiment with different ones.
Also if anyone follows the guide I linked you can skip boot.ini stuff in there, PRERELEASE flag makes setup pretty much do all that for you

Anonymous

Anonymous Tue 03 Nov 2020 18:34:54 No.78525983 Report

Quoted By: >>78526008

>>78525882

https://betawiki.net/wiki/Windows_Server_2003_build_3790.1069

and
>>78525663

https://betawiki.net/wiki/Windows_XP_Professional_x64_Edition_build_3790.1069
both are early amd64 builds

Anonymous

Anonymous Tue 03 Nov 2020 18:36:23 No.78526008 Report

Quoted By: >>78526551

>>78525983
sorry this format is so fucked i'm phoneposting and it sucks.

Anonymous

Anonymous Tue 03 Nov 2020 19:13:16 No.78526496 Report

Quoted By:

Bump

Anonymous

Anonymous Tue 03 Nov 2020 19:17:06 No.78526551 Report

Quoted By:

>>78526008
>phoneposting
faggot

Anonymous

Anonymous Tue 03 Nov 2020 19:21:34 No.78526620 Report

Quoted By: >>78526631 >>78526995

How difficult would it be to "port" dwm.exe to XP? Vista/7's UI is really nice.

Anonymous

Anonymous Tue 03 Nov 2020 19:22:38 No.78526631 Report

Quoted By: >>78526680 >>78527048

>>78526620
give me 30 minutes

Anonymous

Anonymous Tue 03 Nov 2020 19:25:51 No.78526680 Report

Quoted By: >>78526938

>>78526631
I give you 17 minutes

Anonymous

Anonymous Tue 03 Nov 2020 19:44:50 No.78526938 Report

Quoted By:

>>78526680
i'll do it in 5

Anonymous

Anonymous Tue 03 Nov 2020 19:48:32 No.78526995 Report

Quoted By: >>78527357

>>78526620
What is the point of using xp if you just turn it in vista/7.

Anonymous

Anonymous Tue 03 Nov 2020 19:52:14 No.78527048 Report

Quoted By:

>>78526631
Done. Where is it?

Anonymous

Anonymous Tue 03 Nov 2020 20:14:52 No.78527357 Report

Quoted By:

>>78526995
Not proprietary (anymore).
Better support for older hardware.

Anonymous

Anonymous Tue 03 Nov 2020 20:47:45 No.78527813 Report

Quoted By: >>78527959

>>78500072
Does anyone know where to get legacy adobe software like photoshop 6 and the like?

Anonymous

Anonymous Tue 03 Nov 2020 20:58:32 No.78527959 Report

Quoted By: >>78528015

>>78527813
Google Other search engines, torrent website abandonware collections but to my knowledge this isn't the place, thread is called /wxp/ not questions about where to get photoshop 6 or where to get it

Anonymous

Anonymous Tue 03 Nov 2020 21:03:29 No.78528015 Report

Quoted By: >>78528068

>>78527959
>we want to make windows xp run!
>but we dont want to put any software on it that can run on it
nani the fuck?

Anonymous

Anonymous Tue 03 Nov 2020 21:07:10 No.78528068 Report

Quoted By:

>>78528015
there are threads elsewhere, where people have been cataloging software that works and does not work on sites like msfn's forums - literally hundreds of pages of confirmed-working software and links. There's no need to bog this thread down with such things yet. Let's get this shit working first!

That said, implementing additions to the kernel should be easier once everything is working as intended. We still have lots of missing bits and pieces.

Anonymous

Anonymous Tue 03 Nov 2020 21:10:39 No.78528116 Report

Quoted By: >>78528273

>bogging down this thread
>with literally one companies software

Anonymous

Anonymous Tue 03 Nov 2020 21:20:56 No.78528236 Report

Quoted By:

bump

Anonymous

Anonymous Tue 03 Nov 2020 21:24:36 No.78528273 Report

Quoted By:

>>78528116
errbody knows the only good winxp software is VisSim

Anonymous

Anonymous Tue 03 Nov 2020 21:25:34 No.78528284 Report

Quoted By: >>78528384

>>78500072
win 7 leak when

Anonymous

Anonymous Tue 03 Nov 2020 21:33:15 No.78528384 Report

Quoted By: >>78529385

>>78528284
after vista

Anonymous

Anonymous Tue 03 Nov 2020 22:11:05 No.78528860 Report

Quoted By:

Bump

Anonymous

View Same Google ImgOps iqdb SauceNAO unknown (6).png, 1003KiB, 1843x1835

Anonymous Tue 03 Nov 2020 22:23:43 No.78529085 Report

Quoted By: >>78529301

bumping with some weird bmp-inspired artwork

Anonymous

View Same Google ImgOps iqdb SauceNAO 1547273751549.jpg, 100KiB, 1024x1004

Anonymous Tue 03 Nov 2020 22:25:11 No.78529108 Report

Quoted By:

>>78513104
You're fucking awesome!!

Anonymous

Anonymous Tue 03 Nov 2020 22:38:54 No.78529301 Report

Quoted By: >>78529342 >>78529423

>>78529085
Context?

Anonymous

Anonymous Tue 03 Nov 2020 22:41:36 No.78529342 Report

Quoted By: >>78529423

>>78529301
A rare pic of OP drinking semen.

Anonymous

Anonymous Tue 03 Nov 2020 22:45:00 No.78529385 Report

Quoted By:

>>78528384
Vista leak when?

Anonymous

View Same Google ImgOps iqdb SauceNAO penguuuu_sfw.png, 3MiB, 1275x1650

Anonymous Tue 03 Nov 2020 22:47:58 No.78529423 Report

Quoted By: >>78529538

>>78529301
>>78529342
bmp's found somewhere in the multimedia files included one with a guy drinking 'milk' from a container of ASF (Microsoft's streaming format at the time).

I upscaled it and started using it in my own artwork, which ended up becoming a thing of its own outside of 4chins.

Anonymous

Anonymous Tue 03 Nov 2020 22:55:57 No.78529538 Report

Quoted By:

>>78529423
Nice clipping

Anonymous

Anonymous Tue 03 Nov 2020 23:24:00 No.78529873 Report

Quoted By: >>78530250

Where's that Anon who's making that batch script GUI? I wanna know more

Anonymous

Anonymous Tue 03 Nov 2020 23:55:43 No.78530221 Report

Quoted By:

bump for xenix source code

Anonymous

Anonymous Tue 03 Nov 2020 23:57:39 No.78530250 Report

Quoted By: >>78530414 >>78536046

>>78529873
Not sure, but a script has popped up on that person's github with the Build-env-info website (check the OPs rentry/centralizer-info page)

Guess they must be a fellow thread lurker that inputs every now and again lol

Anonymous

Anonymous Wed 04 Nov 2020 00:12:11 No.78530414 Report

Quoted By: >>78536046

>>78530250
Ill have a look thanks

Anonymous

Anonymous Wed 04 Nov 2020 00:54:54 No.78530845 Report

Quoted By:

bum

Anonymous

Anonymous Wed 04 Nov 2020 01:45:50 No.78531310 Report

Quoted By: >>78531591

>>78525402
>https://www.geoffchappell.com/studies/windows/km/ntoskrnl/history/names52sp1.htm
waiting for guide anon

Anonymous

Anonymous Wed 04 Nov 2020 02:14:28 No.78531495 Report

Quoted By:

bump

Anonymous

Anonymous Wed 04 Nov 2020 02:30:53 No.78531591 Report

Quoted By: >>78531637 >>78533669

>>78531310
I've added a mention of it to the additions section if that's what you meant: https://rentry.co/build-win2k3#winlogonexe

Not gonna add it to the ZIP or anything tho, ZIP is just for build-env fixes, I leave code fixes/adds to other places/git repos/etc, this way when the next winlogon update is posted the guide+ZIP doesn't contain anything that's out of date.

BTW if anyone knows some of the filenames for the other code additions I list there it'd be nice to add those.

Anonymous

Anonymous Wed 04 Nov 2020 02:38:56 No.78531637 Report

Quoted By:

>>78531591
>one anon did have success with this, allowing setup to accept any product key as valid, but after installation WPA would detect the invalid key and prevent logging in. Probably winlogon.exe related, would a patched winlogon.exe help?
Hm maybe someone should try that out now, the patched pidgen code was posted a few threads back IIRC

Anonymous

Anonymous Wed 04 Nov 2020 03:43:06 No.78532079 Report

Quoted By:

bump

Anonymous

Anonymous Wed 04 Nov 2020 05:03:52 No.78532451 Report

Quoted By:

bump for vxworks source code

Anonymous

View Same Google ImgOps iqdb SauceNAO setuppasswordpolicy_incomplete.png, 59KiB, 856x847

Anonymous Wed 04 Nov 2020 05:44:23 No.78532621 Report

Quoted By: >>78532802 >>78532842

Think I found why we get blank password issues, 2505 winlogon has a SetupPasswordPolicy function which seems to be using LsaCallAuthenticationPackage to set a process option, probably the MSV1_0_OPTION_ALLOW_BLANK_PASSWORD one going by the name.

Only problem is this function has some obfuscated shit inside, I removed it in this pic but I'm pretty sure it might be doing something important, sadly the unprotected 2462 winlogon doesn't seem to have this function though...

Does anyone here know if there's any chk build between 2462 & 2505? or any fre builds with symbols?

Anonymous

Anonymous Wed 04 Nov 2020 05:47:55 No.78532639 Report

Quoted By:

So how hard would it be to port W2K's shell folder to 2003's source for a hybrid and maybe even eventually get x64 windows 2000 binaries.

Anonymous

View Same Google ImgOps iqdb SauceNAO .webm, 1MiB, 1248x938

Anonymous Wed 04 Nov 2020 06:20:13 No.78532802 Report

Quoted By: >>78532818

>>78532621
woot it works, blank passwords with no group-policy change needed

>winlogon200X_v2b.zip
https://gofile.io/d/SYrfH0

Though I'm still hoping for
>Does anyone here know if there's any chk build between 2462 & 2505? or any fre builds with symbols?
Maybe a hoarder could come through for us? lel

Anonymous

Anonymous Wed 04 Nov 2020 06:24:13 No.78532818 Report

Quoted By: >>78532829

>>78532802
Now afaik only issues are
>command-prompt not closing on shutdown (need to make sure RTM chk version actually does close it)
>amd64 setup support (PRERELEASE build flag + windbg needed... >>78525943)
>add the whole fast-user switching crap (lol)
Going to sleep soon tho, if anyone wants to look into those feel free

Anonymous

Anonymous Wed 04 Nov 2020 06:27:42 No.78532829 Report

Quoted By:

>>78532818
Oh and the GPO WlAddInternalNotify stuff I had to remove too, must be some way to fix that

Anonymous

Anonymous Wed 04 Nov 2020 06:30:57 No.78532842 Report

Quoted By: >>78532935

>>78532621
Did a quick search but no check build between 2462 & 2505, there should be a MSDN disc with a chk build but that's beta 1 (2296)
Beta archive has these versions with chk:

NT 5.0 Workstation Beta2 X86 Build 1877 Checked/Debug
NT 5.0 Workstation Beta2 Alpha Build 1877 Checked/Debug
NT 5.0 Win 2000 Pro Checked/Debug Beta3 x86 -Build 2000.
NT 5.0 Win 2000 Pro Checked/Debug Beta3 Alpha -Build 2000
NT 5.0 Win 2000 Pro Beta 3 Build 2031 Alpha Checked/Debug
NT 5.0 Win 2000 Pro Beta 3 Build 2031 X86 Checked/Debug.
NT 5.0 Win 2000 Pro RC1 x86 - Build2072 Checked/Debug.
NT 5.0 Win 2000 Pro RC1 Alpha - Build2072 Checked/Debug.
NT 5.0 Win 2000 Pro RC2 x86 Build 2128 Checked/Debug.

Windows 2000 Pro final Checked Debug
Windows 2000 Pro final Checked Debug / SP2
Windows 2000 Pro Checked Debug / SP3

2296 Professional, Checked Debug
2462 Pro checked, debug
2505 Pro, Checked Debug

XP Pro Build 2600 - CH/Debug

3541 Advanced Server CH/Debug
3590 Net Enterprise Server, Checked Debug
3604.1 NET Web Server, Checked Debug
3663 Net Ent Server, RC1 Checked Debug
3790 Enterprise Edition, Ch / Deb, X64 With Sp1

But this info is from 2006...
https://www.betaarchive.com/forum/viewtopic.php?f=16&t=374
There are chck builds of vista beta's I.E
Build 4050 (from the idx02 build lab) (pre-reset?)
or maybe a hoarder will help us :)
hoping my research helped bit

Anonymous

Anonymous Wed 04 Nov 2020 06:49:52 No.78532935 Report

Quoted By: >>78532953

>>78532842
Ah damn, that's mostly what I found too.
Guess I'll have to try looking at fre ones without symbols, hopefully one of them has SetupPasswordPolicy unprotected...

Anonymous

Anonymous Wed 04 Nov 2020 06:53:50 No.78532953 Report

Quoted By: >>78533051

>>78532935
So far I've checked 2486 (protected), and 2474 (protected, but no protection inside SetupPasswordPolicy...)
Still not sure which is first build to include protection tho

Anonymous

Anonymous Wed 04 Nov 2020 07:16:24 No.78533051 Report

Quoted By:

>>78532953
Aight, think I know now:

>2462/beta2 unprotected, no SetupPasswordPolicy func
>2463 unprotected, no SetupPasswordPolicy func
weirdly though this has symbol path "H:\binaries.x86fre\SCP_WPA\winlogon.PDB" inside, no others mention path like this
SCP is the code protection shit they use, but I don't see it in LoginAttempt here, maybe it's only inside WPA code
>2465 unprotected, no SetupPasswordPolicy func
>2469 unprotected, has SetupPasswordPolicy func
>2474 protected, LogonAttempt only?
>2475 protected, LogonAttempt + SetupPasswordPolicy
>2481 protected, LogonAttempt + SetupPasswordPolicy
>2485 protected, LogonAttempt only?
>2486 protected, LogonAttempt + SetupPasswordPolicy

It doesn't seem like my reimpl. of SetupPasswordPolicy is missing anything, no idea what the obfuscation is hiding though, must be weird WPA hooks or something

Anonymous

Anonymous Wed 04 Nov 2020 08:31:48 No.78533394 Report

Quoted By:

bump

Anonymous

Anonymous Wed 04 Nov 2020 08:52:33 No.78533514 Report

Quoted By:

bump

Anonymous

Anonymous Wed 04 Nov 2020 08:58:37 No.78533545 Report

Quoted By:

Think I've fixed shutdown issue, would be nice if others can confirm
A few other small updates here too

>winlogon200X_v2c.zip
https://gofile.io/d/wx64iD

Anonymous

Anonymous Wed 04 Nov 2020 09:18:05 No.78533639 Report

Quoted By: >>78533645 >>78533669

The guide needs to be updated with the winlogon.exe stuff.

Anonymous

Anonymous Wed 04 Nov 2020 09:19:09 No.78533645 Report

Quoted By:

>>78533639
Centralizer info, too.

Anonymous

Anonymous Wed 04 Nov 2020 09:23:01 No.78533669 Report

Quoted By:

>>78533639
It has been: >>78531591

Anonymous

Anonymous Wed 04 Nov 2020 10:34:20 No.78534039 Report

Quoted By:

bump

Anonymous

Anonymous Wed 04 Nov 2020 11:16:28 No.78534294 Report

Quoted By:

bump

Anonymous

View Same Google ImgOps iqdb SauceNAO 634343.png, 173KiB, 1024x777

Anonymous Wed 04 Nov 2020 11:28:07 No.78534386 Report

Quoted By: >>78534401

Some quick edits.
btw did we ever decide on a name??

Anonymous

Anonymous Wed 04 Nov 2020 11:30:46 No.78534401 Report

Quoted By:

>>78534386
WinXD

Anonymous

Anonymous Wed 04 Nov 2020 11:38:25 No.78534460 Report

Quoted By:

>>78513764
Welp, copied all the shit in this pic and a few other things, still no luck getting GPO scripts to work ;_;
There is some code about adding the user to BaseNamedObjects which is still missing tho, maybe needs that, looks like it'd be quite a bit of work tho..

Anonymous

Anonymous Wed 04 Nov 2020 11:48:51 No.78534516 Report

Quoted By: >>78535578

>>78512298
>I fixed h2inc.exe built from the sources
Noice, have you tried building the whole source tree with that?

Anonymous

View Same Google ImgOps iqdb SauceNAO 525748-1280x1024-1262851995424.jpg, 193KiB, 1280x1024

Anonymous Wed 04 Nov 2020 12:05:51 No.78534626 Report

Quoted By: >>78537781

Any winlogon/systime.c news?

Anonymous

Anonymous Wed 04 Nov 2020 13:48:49 No.78535253 Report

Quoted By:

bump

Anonymous

View Same Google ImgOps iqdb SauceNAO file.png, 117KiB, 1442x820

Anonymous Wed 04 Nov 2020 14:36:41 No.78535578 Report

Quoted By:

>>78534516
No, I have not tried the full source. I could build (bcz) the \NT\ds\nw (using h2inc.exe) and \NT\base\mvdm (using stripz.exe and stripdd.exe) folder with them.

h2inc.exe now generates the .inc file, where it previously crashed creating the temp-file.

Anonymous

Anonymous Wed 04 Nov 2020 15:29:18 No.78536046 Report

Quoted By: >>78536083 >>78539384

>>78530250
>>78530414
I found it it is actually pretty cool!

It loads razzle for you even 64 bit razzle and builds fine.. apparently it can post build and make cd but I haven't got that far yet lol

Its here if you guys wanna try it
https://github.com/Empyreal96/easy-build-nt5

Anonymous

Anonymous Wed 04 Nov 2020 15:34:29 No.78536083 Report

Quoted By: >>78536121

>>78536046
Based, currently building on a system running a built iso so i'll be testing this too

Anonymous

Anonymous Wed 04 Nov 2020 15:40:23 No.78536121 Report

Quoted By: >>78536227

>>78536083
Youre building on an iso you build? Cool!

Anonymous

Anonymous Wed 04 Nov 2020 15:51:08 No.78536227 Report

Quoted By:

>>78536121
yeah, it works surprisingly well.

Anonymous

Anonymous Wed 04 Nov 2020 16:25:21 No.78536514 Report

Quoted By:

guide anon add about disabling antivirus during razzle64 free offline

Anonymous

Anonymous Wed 04 Nov 2020 17:09:06 No.78536895 Report

Quoted By:

Bump

Anonymous

Anonymous Wed 04 Nov 2020 17:51:37 No.78537367 Report

Quoted By:

bump for sp3 source code

Anonymous

Anonymous Wed 04 Nov 2020 18:23:14 No.78537660 Report

Quoted By: >>78537678 >>78537857 >>78539357

Compilable pseudo-sources of XP SP1 x86 winlogon: https://anonfiles
.com/l9A6F6map5/ds_zip

Good news: it can actually be compiled, and the binary processed with the obfuscator is close enough* to the retail version.
Bad news: most of the functions are just inline assembly, void __declspec(naked) somefunc() { __asm { push ebp // mov ebp, esp // ... // ret } }. Still, should be better than just copying a giant monolitic binary - it it possible to change stuff without breaking everything, it is possible to parallelize work on decompiling between several people if anyone wants to.
SEH and switch tables cannot be represented in inline assembly (the inline assembly cannot define data, and C code cannot take addresses of labels inside functions); fortunately, there are not that many of them, so I have decompiled all functions containing SEH or switch tables.

* Not yet at the level of byte-identical, but I'm working on it; all remaining differences are related to how the code is organized, not how it works. Should make no difference with original one.

Anonymous

Anonymous Wed 04 Nov 2020 18:24:44 No.78537678 Report

Quoted By: >>78537798

>>78537660
But __asm stuff would not compile in amd64 as inline assembler is not allowed....

Anonymous

Anonymous Wed 04 Nov 2020 18:34:23 No.78537771 Report

Quoted By:

>>78500072
The to do list is dead, someone should make a new one.

Anonymous

Anonymous Wed 04 Nov 2020 18:35:25 No.78537781 Report

Quoted By:

>>78534626
Read the thread, the entire thread has been about winlogon.

Anonymous

Anonymous Wed 04 Nov 2020 18:36:51 No.78537798 Report

Quoted By:

>>78537678
Yep, x86-only. For porting to amd64 it is not really useful. On the other side, for getting all the new features on x86, it is.

Anonymous

Anonymous Wed 04 Nov 2020 18:42:32 No.78537857 Report

Quoted By: >>78538139

>>78537660
Wow neat, glad to know I'm not the only one that's looking into winlogon stuff.

How did you handle the obfuscated parts in here, did you deobfuscate them yourself, or did you find they could just be removed & then re-added via SCP or something?

Anonymous

Anonymous Wed 04 Nov 2020 19:14:08 No.78538139 Report

Quoted By:

>>78537857
There are two kinds of interference from SCP, checkers and decryptors. Checkers are just a bunch of inserted code between pusha/popa, I have removed them and then validated that SCP reinserts exactly them with exactly these parameters at exactly these positions.

For decryptors, the actual code is encrypted; I have already researched the activation stuff years ago, and I still have an IDA script to decrypt those inside IDA database. After the decryption, export isn't much different from the main code. (Well, aside of some complications arising from the usage of C++ there.)

Anonymous

Anonymous Wed 04 Nov 2020 19:23:05 No.78538220 Report

Quoted By:

this seems relevant
https://web.archive.org/web/20140311123154/http://antiwpa.planet-dl.org/src/doc/Details%20about%20the%20WPA.htm

Anonymous

Anonymous Wed 04 Nov 2020 20:31:52 No.78538906 Report

Quoted By:

bump

Anonymous

Anonymous Wed 04 Nov 2020 20:49:31 No.78539082 Report

Quoted By:

Bump

Anonymous

Anonymous Wed 04 Nov 2020 21:05:23 No.78539250 Report

Quoted By:

bump bump bump

Anonymous

Anonymous Wed 04 Nov 2020 21:16:52 No.78539357 Report

Quoted By: >>78539384 >>78539629

>>78537660
On nice you found my little project!
Hopefully it all works on all Win versions (Need to test 7 and below though)

Was going to post it here for you lot when it was more fully featured lol, not even sure if it's of use to some of you guys but hey ho.
Pretty much all credit in the script lies with you guys here I just made it as an easy build tool

Anonymous

Anonymous Wed 04 Nov 2020 21:19:29 No.78539384 Report

Quoted By: >>78539629

>>78539357
Shit I meant to tag this one lol
>>78536046

Anonymous

Anonymous Wed 04 Nov 2020 21:27:55 No.78539453 Report

Quoted By: >>78539503

So reading this thread we can now build a working winlogon or no?

Anonymous

Anonymous Wed 04 Nov 2020 21:34:30 No.78539503 Report

Quoted By:

>>78539453
YES

Anonymous

Anonymous Wed 04 Nov 2020 21:48:14 No.78539629 Report

Quoted By: >>78539690

>>78539357
>>78539384
your contributions to the effort have been recorded. Thank you for your service :D

Anonymous

Anonymous Wed 04 Nov 2020 21:50:52 No.78539645 Report

Quoted By:

blessed thread
now someone post a new systime.c before it 404s and the triumvirate will be complete

Anonymous

Anonymous Wed 04 Nov 2020 21:55:58 No.78539690 Report

Quoted By:

>>78539629
Well thanks!

For anyone who is interested, I plan to make it be able to set certain build switches (I.e Prerelease, Timebombs days and others, open to suggestions) and most likely more stuff that will help tweak

Anonymous

Anonymous Wed 04 Nov 2020 21:59:10 No.78539722 Report

Quoted By: >>78539742 >>78539865 >>78539976

What about Sizzle?

Anonymous

Anonymous Wed 04 Nov 2020 22:01:05 No.78539742 Report

Quoted By:

>>78539722
Apparently OpenNT guy had issues with 'Rona taking his job and shit, I'm sure he is still working on it though

Anonymous

Anonymous Wed 04 Nov 2020 22:06:53 No.78539796 Report

Quoted By:

New thread when?

Anonymous

Anonymous Wed 04 Nov 2020 22:13:53 No.78539865 Report

Quoted By:

>>78539722
I think last time we heard sizzle had issues building certain parts, but now the prepatched files have some parts updated etc, those Sizzle issues are probs being sorted for sure

Anonymous

Anonymous Wed 04 Nov 2020 22:23:40 No.78539976 Report

Quoted By:

>>78539722
Why using it when razzle now work 100% realible?

Anonymous

Anonymous Wed 04 Nov 2020 23:06:19 No.78540422 Report

Quoted By:

New thread: >>78540416

Subject

Name

E-mail

Password

Capcode	All Only User Posts Only Verified Posts Only Moderator Posts Only Manager Posts Only Admin Posts Only Developer Posts Only Founder Posts
Show Posts	All Only With Images Only Without Images Only Spoiler Images Only Non-Spoiler Images
Deleted Posts	All Only Deleted Posts Only Non-Deleted Posts
Ghost Posts	All Only Ghost Posts Only Non-Ghost Posts
Post Type	All Only Sticky Threads Only Opening Posts Only Reply Posts
Results	All Grouped By Threads
Order	Latest Posts First Oldest Posts First

On these archives

Your latest searches

/wxp/ - Friendly Windows XP/2003 Leak Thread