[Rel] System File Patches >09/23/08<

kal · Post by **kal** » Mon Jan 14, 2008 7:12 am

Well I've updated the patch to works with the KB941644 update (QFE branch) that updates the tcpip.sys to version 5.1.2600.3244. Here is the patch:

http://dl.free.fr/m9mmwUO0S/PatchAddon_ ... 50_v13g.7z

Kal

Zacam · Post by **Zacam** » Mon Jan 14, 2008 11:17 am

Was QFE the only branch file?

kal · Post by **kal** » Mon Jan 14, 2008 11:30 am

No there was GDR too, but i heard that QFE was a bit better (cumulative or something like that).

If I make an addon update for that hotfixe, which branch should i choose ?

Kal

Zacam · Post by **Zacam** » Mon Jan 14, 2008 9:47 pm

Both.

For the update specific files, then you can release directly to whatever file is in the update pack.

For a general hotfix PatchAddon, always include both because you can never predict WHICH will actually go in by the users hand or simple mistake or any number of other things that you don't happen to think of until they actually end up happening.

I'm slowly expanding these addons. Fortunately, the uptime at work is tapering off, so not so much overtime is needed, so I can focus on getting more things done, including patches for private hotfixes and the like.

Zacam · Post by **Zacam** » Mon Jan 14, 2008 10:36 pm

All right. RVMUpdatePack Beta 3 entries for TCP/IP 3244 updated. Now at version 1.3g. Added kal to the credits in the changelog.

kal · Post by **kal** » Tue Jan 15, 2008 7:04 am

Thank you Zacam

Zacam wrote: For a general hotfix PatchAddon, always include both because you can never predict WHICH will actually go in by the users hand or simple mistake or any number of other things that you don't happen to think of until they actually end up happening.

Well, let's suppose I've included botch tcpip.sys (GDR/QFE) in my update addon. The end user that will integrate my addon with RVMi won't be able to choose?! I mean, the choice is done by me in the inf file, where I decide which tcpip.sys version I will replace in I386. I'm a little bit confused.

By the way, I've updated some of your addons to work with french files version :
http://dl.free.fr/mDLeYUKsu/PatchAddon_SFC_OS_v13g.7z
http://dl.free.fr/m1tKc54b2/PatchAddon_UXTHEME_v13g.7z

For those files, the header checksum waas incorrect. Here is what I did :
I modified the files manually with ultraedit, not the header part at offset 320, the other part. Then, I did a modifype to correct the checksum header. Finally, I got this value with ultracompare and modified your addon.

Kal

ENU_user · Post by **ENU_user** » Tue Jan 15, 2008 8:05 am

kal, the checksume in integrator was not working for a long time now and the patches were not usually offered with headers ...
nevertheless, you just made a good point as to why its correct offering the patches with no headers.
and for anyone who is using new RC1 , its ok to remove them.
good luck.

biatche · Post by **biatche** » Tue Jan 15, 2008 4:54 pm

kal:

I downloaded your PatchAddon_TCPIP_250_v13g.7z ... what do I need to modify in this to make it patch for 100 concurrent connections.

for uxtheme/SFC, will I need to download that 'g' version? or can I use zacam's F version?

thanks

kal · Post by **kal** » Tue Jan 15, 2008 8:22 pm

ENU_user wrote:kal, the checksume in integrator was not working for a long time now and the patches were not usually offered with headers ...
nevertheless, you just made a good point as to why its correct offering the patches with no headers.
and for anyone who is using new RC1 , its ok to remove them.
good luck.

So that means that we can avoid patching header part ? That won't be a problem during windows install (integrity check) ?

biatche wrote:kal:

I downloaded your PatchAddon_TCPIP_250_v13g.7z ... what do I need to modify in this to make it patch for 100 concurrent connections.

Zacam updated his files according to the new version, just download this :
http://zacam.ueuo.com/rvm/PatchAddon_TCPIP_100_v13g.7z

biatche wrote: for uxtheme/SFC, will I need to download that 'g' version? or can I use zacam's F version?

thanks

No, it's just to add compatibility with french file versions for the header part (which seems not really important)

Kal

Zacam · Post by **Zacam** » Tue Jan 15, 2008 9:40 pm

I actually had not thought of other languages or had someone point out(thank you again) that diff lang versions of a file had diff checksums.

Since the patching data should be the same, the only conflict would be in offset. But, since the original checksum for the unmodified file is different between them, and since I don't do wildcard replacement, keeping them seperate (without having to uise seperate files) will be easy.

The only reason why I began patching the offsets for Checksum was because Vista broke modifype. To prevent such future breakages or anything else of the like, I'm going to continue doing so. However, though the offsets for checksum are different for French versions, all that will happen is that the addon will fail to patch with the provided information and the integrator (providing the modifype replacement does what it is supposed to) will automatically correct the offset before it compresses the file. In short: I'm including it because I can to prevent having to do it because it needs to be.

I am glad to see you do things the same way I do: manually. I hope you also test the same way.

As to GDR/QFE patch addons: If you don't know which version is in the source that the addon is going to be used on, include the information for both.

biatche: Apparently you cannot read, since only two posts up from yours I documented that I already changed stuff.

biatche · Post by **biatche** » Wed Jan 16, 2008 4:18 am

thank you you are right.. 5pm i need to sleep

store88 · Post by **store88** » Sat Jan 19, 2008 9:18 am

I am not able to access http://zacam.ueuo.com/
Can anyone give me another link to those patchs

roadrunner650 · Post by **roadrunner650** » Wed Jan 30, 2008 12:26 pm

zacam,

Thanks for your work in our behalf.

Just a heads-up... sp3v3282 is out.

thanks again,
roadrunner650

ENU_user · Post by **ENU_user** » Mon Feb 04, 2008 11:57 pm

removed

Stimpy · Post by **Stimpy** » Wed Feb 06, 2008 5:26 am

Just wondering if its possible to update this so the addons support the latest RC2 3282 of SP3? I'm dieing to try RC2 out!

Zacam · Post by **Zacam** » Wed Feb 06, 2008 10:21 pm

I'll have everything sorted this weekend.

Sm0ker · Post by **Sm0ker** » Thu Feb 07, 2008 3:49 am

Zacam just been looking through the TCPIP (100 to 250) v13g.ini that under the ExtraFileEdits section you have made a typo

Code: Select all

;RVM 2.2.1 - Beta 3
I386\rvmtemp\extracted\RVMUpPck.inf|KB91644\Filelist\0","BuildCheckSum",0,"649a2"|KB91644\Filelist\0","BuildCheckSum",0,"649fc"|1
RVMUpPck.inf|KB91644]\Filelist\0","BuildCheckSum",0,"649a2"|KB91644\Filelist\0","BuildCheckSum",0,"649fc"|1

Shouldn't the KB be kb941664 not KB91644

Stimpy · Post by **Stimpy** » Thu Feb 07, 2008 5:14 am

Just a heads-up, RC3 build 3300 has just been released to testers. This is the final RC, next will be RTM.

biatche · Post by **biatche** » Thu Feb 07, 2008 5:29 am

Good find sm0ker. Now, I've setup so many machines with this. What are the implications

Zacam · Post by **Zacam** » Sat Feb 09, 2008 1:16 am

I'll have 3282 & 3300 done up by sunday night. I have a new method to force check that will (or should) correct any sleep dep typo's.

(My smallest pay period in hours since Mid October was 88 hours and we are now under a vacation freeze. Oh joy.)

dolivas · Post by **dolivas** » Tue Feb 12, 2008 11:19 am

Zacam wrote:I'll have 3282 & 3300 done up by sunday night. I have a new method to force check that will (or should) correct any sleep dep typo's.

(My smallest pay period in hours since Mid October was 88 hours and we are now under a vacation freeze. Oh joy.)

Hi Zacam Sunday has come and gone and no update..

(JK) I know you are very busy do you have an idea when you might be able to get these updated I really want to test the new 3300 build.

Thanks
dolivas

Zacam · Post by **Zacam** » Wed Feb 13, 2008 2:10 am

Yeah. I'm going to have to take in to work with me to get it done. I don't like the idea because it can allow for more errors to occur than I would like, but I need to get this done for all of you.

I can definitively state that you will have updates before this weekend OR within 24hr's of when Ryan's UpdatePack goes final, which ever comes first.

dolivas · Post by **dolivas** » Sun Feb 17, 2008 10:02 am

Zacam any update on these? Is there anything I can do to help you get these out?

bober101 · Post by **bober101** » Sun Feb 17, 2008 3:28 pm

the typos are easy to fix, but for newer versions of the hotfix these patches work on i have no idea.

Zacam · Post by **Zacam** » Sun Feb 17, 2008 8:46 pm

3282 & 3300 use the same patch offsetsfor TCP.

As an experiment, I'm going to remove PEChecksum patching to open up compatibility. Since RVM b3 and b4 use a 3244 that is different than the SP3 3244 and to support muli-lingual offsets.

This means that we are going to have to hope that integrators checksum patching never breaks or get's broken.

(I'll still be recording all actual PECheckSum's, I just won't be including them. It will also greatly speed up my release process. Updates will be here soon.)

Zacam · Post by **Zacam** » Mon Feb 18, 2008 12:58 am

Done. SFC, SysSetup, TCPIP and UXTheme updated to SP3 3282 and 3300.

I'm pretty sure (unless I missed something) that the RVM Final won't change any of the files, so I won't need to update for it. So, next update will hopefully be SP3 Final.

Siginet · Post by **Siginet** » Mon Feb 18, 2008 1:00 am

Thanks for taking the time Zacam. Many users will appreciate it.

As for the PEChecksum stuff. I think I've got it working smoothly so we shouldn't have to worry.

Edit:
Link is bad for PatchAddon_SFC_OS_v13h.7z.

I can provide you hosting for your addons in the addons database if you'd like? http://integrator.siginetsoftware.com/index.php?addons

Currently Jurjen is working on a registration page so that users can easily register for an addon posting account. But for now just PM Me and I can create an account for you.

Zacam · Post by **Zacam** » Mon Feb 18, 2008 2:10 am

Slight hiccup in my filehost, SFC should now be present.

Once SP3 goes final and I work out a few other prject addons, I'll be adding them in, no worries there.

Siginet · Post by **Siginet** » Mon Feb 18, 2008 2:16 am

I just found a flaw in the uxtheme patch.

You places a colen : instead of a semi-colen ; On the SP3 spot.

:KB936929 - SP3 Should be ;KB936929 - SP3

Here is a fixed entries file:

Code: Select all

[General]
Author = Zacam
Builddate = 02/17/2008
Title = Multi-Patch: UXTHEME.DLL
Description = Addon which allows unsigned Themes
Version = 1.3h
Website = http://ryanvm.net/forum/viewtopic.php?t=2274

[ExtraFileEdits]
;RVM 1.2.0 - 2.0.4
I386\rvmtemp\extracted\RVMUpPck.inf|KB319740\Filelist\0","BuildCheckSum",0,"412c0"|KB319740\Filelist\0","BuildCheckSum",0,"40540"|1
I386\RVMUpPck.inf|KB319740\Filelist\0","BuildCheckSum",0,"412c0"|KB319740\Filelist\0","BuildCheckSum",0,"40540"|1

;RVM 2.0.5 - 
I386\rvmtemp\extracted\RVMUpPck.inf|KB908536\Filelist\0","BuildCheckSum",0,"44c63"|KB908536\Filelist\0","BuildCheckSum",0,"43ee3"|1
I386\RVMUpPck.inf|KB908536\Filelist\0","BuildCheckSum",0,"44c63"|KB908536\Filelist\0","BuildCheckSum",0,"43ee3"|1

[HexEdit]
;XP SP2
I386\UXTHEME.DLL|6.0.2900.2180|113178|83EC1C568D4DE4|33C0C9C2040090

;KB319740 - RVM 1.2.0 - 2.0.4
I386\UXTHEME.DLL|6.0.2900.2523|104714|83EC1C568D4DE4|33C0C9C2040090

;KB908536 - RVM 2.0.5 - 
I386\UXTHEME.DLL|6.0.2900.2845|104746|83EC1C568D4DE4|33C0C9C2040090

;KB936929 - SP3
I386\UXTHEME.DLL|6.0.2900.3180|104746|83EC1C568D4DE4|33C0C9C2040090

I386\UXTHEME.DLL|6.0.2900.3205|104746|83EC1C568D4DE4|33C0C9C2040090

I386\UXTHEME.DLL|6.0.2900.3244|104746|83EC1C568D4DE4|33C0C9C2040090

I386\UXTHEME.DLL|6.0.2900.3264|104746|83EC1C568D4DE4|33C0C9C2040090

I386\UXTHEME.DLL|6.0.2900.3282|104746|83EC1C568D4DE4|33C0C9C2040090

I386\UXTHEME.DLL|6.0.2900.3300|104746|83EC1C568D4DE4|33C0C9C2040090

Hope you don't mind Zacam. I posted a link to the fixed uxtheme patch. You can edit it with your link when you get back.

Zacam · Post by **Zacam** » Mon Feb 18, 2008 4:27 pm

Done.

nonno fabio · Post by **nonno fabio** » Thu Feb 21, 2008 8:05 am

Zacam, thanks for your great work.

Is it possible to make a Syssetup.dll patch for W2k and W2k3 too, at least for newer file?

Windows 2000 professional: syssetup.dll v5.0.2195.6611
Windows 2003 Server: syssetup.dll v5.2.3790.3959

thx in advance

compstuff · Post by **compstuff** » Mon Feb 25, 2008 10:57 am

I recently used the TCPIP.SYS 100 addon and noticed this in the Integrator log:

10:45:17 - TCPIP.SYS 5.1.2600.3244 Patched at offset 325830.
10:45:17 - TCPIP.SYS 5.1.2600.3244 No match at offset 325958. Patch skipped.
10:45:17 - New checksum: 0x64A5E (I386\TCPIP.SYS)

Sorry for the newbie question but is this OK or an error???

Siginet · Post by **Siginet** » Mon Feb 25, 2008 2:45 pm

compstuff wrote:I recently used the TCPIP.SYS 100 addon and noticed this in the Integrator log:

10:45:17 - TCPIP.SYS 5.1.2600.3244 Patched at offset 325830.
10:45:17 - TCPIP.SYS 5.1.2600.3244 No match at offset 325958. Patch skipped.
10:45:17 - New checksum: 0x64A5E (I386\TCPIP.SYS)

Sorry for the newbie question but is this OK or an error???

That is because it checks for different file types. It fails on one type then is successful on another.

So it is fine. Nothing to worry about.

compstuff · Post by **compstuff** » Mon Feb 25, 2008 6:02 pm

Thanks Sig... my last few attempts at integrations have been a mess so I'm trying to figure out what the heck I'm doing wrong... maybe trying too hard

Zacam · Post by **Zacam** » Mon Feb 25, 2008 11:24 pm

Beta SP3 has a version # 3244. RVM update pack ALSO has a 3244 version of the file, but they are NOT identical.

Hence the message, which is commented in a general sense on the first post as being ignorable.

Now, if it had found the file and failed to patch both/either offset, then I'd want a copy of it to find out why.

Siginet · Post by **Siginet** » Mon Feb 25, 2008 11:45 pm

nonno fabio wrote:Zacam, thanks for your great work.

Is it possible to make a Syssetup.dll patch for W2k and W2k3 too, at least for newer file?

Windows 2000 professional: syssetup.dll v5.0.2195.6611
Windows 2003 Server: syssetup.dll v5.2.3790.3959

thx in advance

I'd really like to second this request.

I think it would be awsome to support 2k and 2k3 patches in the patch addons. Mainly 2k3 uxtheme. If there is any way that I can help just let me know how. I can begin collecting patched and un-patched versions of the 2k3 files. Allthough in the past when I was collecting xp patched files I noticed that your method of patching was different then the ones I collected.

So I am not sure what I should exactly look for.

I think this is the magic of the integrators [HexEdit] section. It can allow us to support so many different versions/types of the files to be hex edited with a simple entries file.

compstuff · Post by **compstuff** » Tue Feb 26, 2008 7:13 am

Zacam... thanks for the response and the addon... it worked just fine in my last two integrations and I found the cause of my original problem... took me long enough

Zacam · Post by **Zacam** » Tue Feb 26, 2008 10:42 pm

Sig: Post me a link for whatever files you have (2K in one sort, 2K3 in another).

Normally, I'd try the OS installs myself and go from there, but I honestly just have NOT had the time that I've wanted OR needed to do this.

If I have before/after, I can evaluate the patch offsets in debug and enumerate the correct allocations to then patch all versions (forewards and backwards) and I can do it with a PDA on my morning commute on the train.

compstuff: If I may, what was the issue causing the problem?

dolivas · Post by **dolivas** » Wed Feb 27, 2008 1:31 am

Hi Zacam I have a question for you I was looking at the PatchAddon_TCPIP_100_v13h trying to figure out how to make it work with the new SP3 3311 build and noticed what I think is an error in the ini is this correct?

Code: Select all

 ;KB941644 - RVM b3 - RC
I386\TCPIP.SYS|5.1.2600.3244|325830|0A|C64

Should the end not be just 64 ? also would I just add this to the ini file to get the SP3 3311 build patched?

Code: Select all

I386\TCPIP.SYS|5.1.2600.3311|326214|0A|64

I have been reading all I can find to figure out how to determine the correct offset. Any tips on finding this information.

Thanks,
dolivas

Zacam · Post by **Zacam** » Wed Feb 27, 2008 6:37 pm

Corrections made, Updated to 3311.

In the case of SP3, it doesn't appear that they are making any REAL changes to the files for TCPIP, so the same address offset has continued to work so far.

This, however, is not always the case and as such is something to keep in mind.

For TCPIP I run through a dis-assembler and do a query search until I find the base value + search tag. I then run a search in Hexedit for the resultant code to find the decimal address location.

The surrounding code around the base value (0A) can vary, unlike UXTHEME. Even still, I apply the same method to all patches to make sure of the locations falling into the approriate sections.

*Reaper* · Post by ***Reaper*** » Wed Feb 27, 2008 7:55 pm

Zacam.....

Just so I'm on the same page with ya......

The filenames, stayed the same even though you updated them?

Just wanted to make sure.....

Thanks for all your work....

It is very much appreciated!

Zacam · Post by **Zacam** » Wed Feb 27, 2008 11:18 pm

TCPIP is now _v13i instead of _v13h.

roadrunner650 · Post by **roadrunner650** » Thu Feb 28, 2008 7:57 am

thanks for new tcip patch. SFC not patching sp3 v3311.

Zacam · Post by **Zacam** » Thu Feb 28, 2008 3:35 pm

Haven't Updated SFC yet or any others. I already had the files here at work to do TCPIP, so I posted them from here.

Siginet · Post by **Siginet** » Thu Feb 28, 2008 3:54 pm

This seems to have a pretty good list of some patched uxtheme files someone made.
http://www.withinwindows.com/uxthemes/

Do you need the originals as well?

OuTman · Post by **OuTman** » Sun Mar 02, 2008 1:16 pm

Hi, found something in tcpip 250 patch that seems to be a typo, here are lines 31-32:

I386\rvmtemp\extracted\RVMUpPck.inf|KB91644\Filelist\0","BuildCheckSum",0,"649a2"|KB91644\Filelist\0","BuildCheckSum",0,"64a92"|1
RVMUpPck.inf|KB91644\Filelist\0","BuildCheckSum",0,"649a2"|KB91644\Filelist\0","BuildCheckSum",0,"64a92"|1

shouldn't be KB941644 instead?

Zacam · Post by **Zacam** » Sun Mar 02, 2008 6:34 pm

Hai. Shouldn't cause any major problems, but I,ll correct it when I release the remaining patch files I have here.

Essentially, I just need more speed, less haste.

Bhishmar · Post by **Bhishmar** » Wed Mar 05, 2008 6:33 am

Hi Zacam
From some previous posts I see that you have progressed to v13i.
But for the AIO patch I am not seeing any new download link for v13i?

Your first page still points to old file :
PatchAddon_AIO_v13d.cab

Where is the new AIO file located?
regards

Siginet · Post by **Siginet** » Wed Mar 05, 2008 2:18 pm

Here's the code needed for the official 2003 Server SP2 uxtheme file v6.0.3790.3959.

Tested and working.

Code: Select all

;2003 Server SP2
I386\UXTHEME.DLL|6.0.3790.3959|175801|81EC88000000A11C|33F68BC6C9C20800

Zacam · Post by **Zacam** » Wed Mar 05, 2008 2:44 pm

There is no new AIO at this time.

Sig: I'll double check that. Just because it makes it work doesn't mean it is the best or only way.