Zitat von ⇗ XPLAKE8175 im Beitrag ¶ #1651

---

Diderius6's ACPI patch only works on fat32 formatted hdd

---

Zitat von ⇗ XPLAKE8175 im Beitrag ¶ #1652

---

XP mce and 64 bit iso exceeds CD size.

---

Zitat von ⇗ kukonosau im Beitrag ¶ #1656

---

but get errors "the file acpi.sys is corrupted"

---

Zitat von ⇗ kukonosau im Beitrag ¶ #1656

---

IR_NOT_LESS_OR_EQUAL. May be, BSOD 0x0000000a.

---

Zitat von ⇗ diderius6 im Beitrag ¶ #1671

---

@daniel_k

But, waaaaaooohh ,
the amd_sata.sys together with newest storport.sys and amd_xata.sys
works generic on AMD board asrock fatal1ty ab350 gaming k4 (DEV_43B7 and DEV_7901)
with Ryzen 3700x cpu.
And the amd_xata.sys gives AmdXataTrimSupport on AMD boards, so TRIM driver is loaded and started!
But still I do not know, how I can test, if TRIM works in XP

Dietmar

---

Zitat

---

On 149C the etronxhci7052.sys works at once.
It is Ryzen 3700x on the nice AMD board asrock fatal1ty ab350 gaming k4

---

In this case, you mean etronstor.sys works, correct?
No need to rename etronstor.sys to usbstor.sys?

Zitat

---

EDIT: With my modded driver in post 1095 it is other. ALL USB on Ryzen 1700x and Ryzen 3700x works on
asus prime x570-pro and asrock fatal1ty ab350 gaming k4 board under XP 32 bit.

---

Is it really stable?

Did you do the same tests you did with my modded Intel USB driver?
Boot from USB, run benchmarks and so on?

I'm asking this because canonkong says it is not stable?

• ⇗  0076_32bit_xp.rar

Zitat von ⇗ diderius6 im Beitrag ¶ #1692

---

USB driver 2.14.0.76 from Fresco 32 bit

---

Zitat

---

[FRESCO.NTx86]
%FLxHCIc.DRVDESC%=      FLxHCIc,        PCI\CC_0C0330

---

fresco is WDF based, this maybe means very slow init of usb devices (like VIA) , but  this .inf is funny :)

Zitat von ⇗ diderius6 im Beitrag ¶ #1697

---

PS: On the AMD fatalty board, the Fresco driver froze the compi, so no good choice.

---

Zitat von ⇗ diderius6 im Beitrag ¶ #1701

---

@daniel_k

For the new Etron driver is the same true as before:
DEV_149C works, but DEV_43BB (with USB2.0 port also) not,
even it is installed

Dietmar

---

.text:00011888                 push    4
.text:0001188A                 lea     eax, [edi+11h]
.text:0001188D                 mov     byte ptr [edi+15h], 0
.text:00011891                 push    eax
.text:00011892                 movzx   eax, byte ptr [edi+10h]
.text:00011896                 push    4 -> easily kill by nops
.text:00011898                 lea     eax, [ebx+eax*4]
.text:0001189B                 push    eax
.text:0001189C                 call    ds:memcpy_s -> memcpy

However, this one, I don't know how to patch:

.text:00067712                 push    eax
.text:00067713                 mov     eax, [esi]
.text:00067715                 push    [ebp+arg_0]
.text:00067718                 call    dword ptr [eax+0Ch]
.text:0006771B                 movzx   eax, ax
.text:0006771E                 mov     ecx, esi
.text:00067720                 push    eax
.text:00067721                 mov     eax, [esi]
.text:00067723                 call    dword ptr [eax+8]
.text:00067726                 push    eax
.text:00067727                 call    ds:memcpy_s -> memcpy

There are only 2 push'es and memcpy_s requires 4 parameters, what should I kill?
Can a call return value be considered a push <parameter>?

From Microsoft's reference:

errno_t memcpy_s(
   void *dest,
   size_t destSize, -> this parameter should be killed
   const void *src,
   size_t count
);

void *memcpy(
   void *dest,
   const void *src,
   size_t count
);

Please note that in assembly, the parameter order is reversed:

push size_t count
push const void *src,
push size_t destSize, -> this parameter should be killed
push void *dest,
call memcpy_s

• ⇗  AMD USB 3.1 drivers v1.0.5.3 WHQL.rar

Zitat von ⇗ diderius6 im Beitrag ¶ #1705

---

@daniel_k
The amd_sata.sys 1.2.1.337 driver does not work, version 1.2.1.402 also not
on x570 board
Dietmar

---

Zitat von ⇗ diderius6 im Beitrag ¶ #1706

---

PS: For DEV_149C device is Etron driver good and for DEV_43BB is AMD driver good,
see attached.

---

Zitat von ⇗ daniel_k im Beitrag ¶ #1703

---

.text:00011888                 push    4                  ; 1
.text:0001188A                 lea     eax, [edi+11h]
.text:0001188D                 mov     byte ptr [edi+15h], 0
.text:00011891                 push    eax                         ; 2
.text:00011892                 movzx   eax, byte ptr [edi+10h]
.text:00011896                 push    4 -> easily kill by nops ; 3
.text:00011898                 lea     eax, [ebx+eax*4]
.text:0001189B                 push    eax ; 4
.text:0001189C                 call    ds:memcpy_s -> memcpy[/code]

.text:00067712                 push    eax                  ; 1
.text:00067713                 mov     eax, [esi]
.text:00067715                 push    [ebp+arg_0]                   ; 2
.text:00067718                 call    dword ptr [eax+0Ch] ;  subcall return result in eax
.text:0006771B                 movzx   eax, ax ; zeroing high bits of eax
.text:0006771E                 mov     ecx, esi
.text:00067720                 push    eax                   ; 3
.text:00067721                 mov     eax, [esi]          ; reload eax, so we can do anything with eax before this command
.text:00067723                 call    dword ptr [eax+8]
.text:00067726                 push    eax                   ; 4
.text:00067727                 call    ds:memcpy_s -> memcpy

---

1189C                 call    ds:memcpy_s
118A2                 add     esp, 10h

to

1189C                 call    ds:memcpy
118A2                 add     esp, 0Ch

Sorry for being a noob.

For X64, there is no push, but several mov, sometimes add as well.
How do I know which one is correct for me to NOP?

These are from IDA, do you think the parameters are correct?

72987                 mov     eax, [rdi+4]
7298A                 cmp     eax, 40h
7298D                 jnb     short loc_729AC
7298F                 mov     [rcx+rsi+8], eax
72993                 mov     r9d, [rdi+4]    ; size_t
72997                 add     rcx, 0Ch
7299B                 add     rcx, rsi        ; void *
7299E                 mov     r8, r15         ; void *
729A1                 mov     edx, 40h        ; size_t
729A6                 call    cs:memcpy_s

72D50                 xor     r12d, r12d
72D53                 mov     r8, rdx         ; void *
72D56                 mov     edi, r9d
72D59                 mov     edx, 100h       ; size_t
72D5E                 test    r9d, r9d
72D61                 jnz     short loc_72D84
72D63                 mov     rcx, [rsp+48h+arg_38]
72D6B                 lea     r9d, [rdi+40h]  ; size_t
72D6F                 mov     dword ptr [rcx], 41696541h
72D75                 add     rcx, 4          ; void *
72D79                 call    cs:memcpy_s

This one is missing 2 parameters?!

72D84                 mov     rbx, [rsp+48h+arg_38]
72D8C                 mov     eax, [rsp+48h+arg_40]
72D93                 mov     [rbx+108h], r9d
72D9A                 lea     rcx, [rbx+4]    ; void *
72D9E                 mov     r9d, 40h        ; size_t
72DA4                 mov     dword ptr [rbx], 46696541h
72DAA                 mov     [rbx+104h], eax
72DB0                 call    cs:memcpy_s

72E04                 mov     r8, [r14+rcx*8] ; void *
72E08                 movzx   eax, dx
72E0B                 lea     rcx, [rbx+4]    ; void *
72E0F                 test    r8, r8
72E12                 jz      short loc_72E22
72E14                 mov     r9d, eax        ; size_t
72E17                 movzx   edx, dx         ; size_t
72E1A                 call    cs:memcpy_s

72F25                 movzx   edx, word ptr [rdi+0Eh] ; size_t
72F29                 lea     r8, [rdi+10h]   ; void *
72F2D                 mov     rcx, rax        ; void *
72F30                 mov     r9d, edx        ; size_t
72F33                 call    cs:memcpy_s

7354C                 lea     rcx, [rbp+37h+var_80] ; void *
73550                 mov     edx, 40h        ; size_t
73555                 mov     r9d, [rax+r12+8] ; size_t
7355A                 lea     r8, [rax+0Ch]
7355E                 add     r8, r12         ; void *
73561                 call    cs:memcpy_s

77F9C                 lea     eax, [rbp+3]
77F9F                 add     r8, rcx         ; void *
77FA2                 mov     [rsp+0D8h+var_88], ax
77FA7                 lea     rax, [rsp+0D8h+var_80]
77FAC                 lea     rcx, [rsp+0D8h+var_68] ; void *
77FB1                 mov     r9d, edx        ; size_t
77FB4                 mov     [rsp+0D8h+var_78], rax
77FB9                 call    cs:memcpy_s

Zitat von ⇗ daniel_k im Beitrag ¶ #1719

---

to
 

1189C                 call    ds:memcpy
118A2                 add     esp, 0Ch

---

Zitat von ⇗ daniel_k im Beitrag ¶ #1719

---

This one is missing 2 parameters?!

---

• ⇗  IntelHDOriginalInf.zip

• ⇗  IntelHDOriginalInf.zip

• ⇗  igxp32.rar

• ⇗  82579Vintellanasi210.rar

• ⇗  acpi5048 x64 - 2nd patch attempt.zip

• ⇗  hal.rar

Zitat von ⇗ diderius6 im Beitrag ¶ #1744

---

@Mov AX, 0xDEAD
can you please mod my english hal.dll (64 bit) here to use always the old clock

---

8B 0D 56 ED FD FF 8B C2  C1 E8 08 24 01 0F BA E2 0F 73 0C E8 98 03 FC FF  C6 05 91 EC FD FF 01 0F
                                                 0F EB 0C

8B 05 76 68 FD FF 8B C8  C1 E9 08 41 22 CC 0F BA E0 0F 73 0E 44 88 25 71  09 FD FF 44 88 25 8A 67
                                                    0F EB 0E 

this mod for latest version 5.2.3790.4355, but in your old version bytes are same

474B: C74070A5C60300         mov          d,[rax][070],00003C6A5

with this

474B: C74070A5C60300         mov          d,[rax][070],0000346A5

⇗

• ⇗  halmoddddchecksumm.rar
• ⇗  setcsum.rar

size_t wcsnlen(
   const wchar_t *str, (RCX)
   size_t numberOfElements (RDX)
);
 
size_t wcslen(
   const wchar_t *str (RCX)
);

errno_t wcsncpy_s(
   wchar_t *strDest, (RCX)
   size_t numberOfElements, (R9) ???
   const wchar_t *strSource, (R8)
   size_t count (RDX) ???
);
 
wchar_t *wcsncpy(
   wchar_t *strDest, (RCX)
   const wchar_t *strSource, (RDX)
   size_t count (R8) ???
);

Can you check if my assumptions are correct, please?

• ⇗  WinTimerTester.rar

Zitat von ⇗ daniel_k im Beitrag ¶ #1752

---

 

errno_t wcsncpy_s(
   wchar_t *strDest, (RCX)
   size_t numberOfElements, (R9) ???
   const wchar_t *strSource, (R8)
   size_t count (RDX) ???
);

Can you check if my assumptions are correct, please?

---

Zitat von ⇗ daniel_k im Beitrag ¶ #1752

---

However, I can't find any x64 DLL, SYS or EXE with sample code of wcslen and wcsncpy.

---

Zitat von ⇗ diderius6 im Beitrag ¶ #1755

---

the powermanagment is corrupt on all Intel boards from Skylake above.

---

Zitat von ⇗ Mov AX, 0xDEAD im Beitrag ¶ #1757

---

Zitat von ⇗ daniel_k im Beitrag ¶ #1752

---

However, I can't find any x64 DLL, SYS or EXE with sample code of wcslen and wcsncpy.

---

wcslen - hdaudbus.sys (win7 x64)
wcsncpy - nvlddmkm.sys (nvidia vga driver)
wcsncpy_s - appwiz.cpl (win7 x64)

---

Zitat von ⇗ diderius6 im Beitrag ¶ #1755

---

I succeed to install Vista 32 bit and 64 bit on all Intel boards.
But on Ryzen only Vista 64 bit, because of not correct working acpi.sys

Dietmar

PS: The uncorrect timer affects even Win7. Some month ago I took a closer look to this.
For to test, if everything is ok, you can use the timer tool.
Not only the timer does not work correct. intelppm.sys has been fixed by @Mov AX, 0xDEAD
which means, that the powermanagment is corrupt on all Intel boards from Skylake above.

---

Zitat von ⇗ diderius6 im Beitrag ¶ #1765

---

@daniel_k

Have you been able to install Vista 32 bit on Ryzen board?
Did you change something in acpi.sys for to reach this,
Dietmar

---

Zitat von ⇗ daniel_k im Beitrag ¶ #1763

---

About the intelppm.sys, doesn't it have the same effect as setting the XP's power scheme to Portable/Laptop?
I've been doing this for years, that's the only way to make C1E to work on a desktop.

---

• ⇗  StorahciSkulltrailALL.rar

Zitat von ⇗ diderius6 im Beitrag ¶ #1771

---

@daniel_k

I just test your new driver
RSTe_4.6.0.1085_x64_MOD.rar
on the EVGA z390 dark board with XP 64 bit.
It works:))!!
Have a nice day
Dietmar

---

75B3B: 4C8D442430                     lea          r8,[rsp][030] -> const void *src
75B40: 498D8A98020000                 lea          rcx,[r10][000000298]
75B47: 41B901000000                   mov          r9d,1
75B4D: E82E360000                     call        79180

79180: 48895C2410                     mov          [rsp][010],rbx
79185: 48896C2418                     mov          [rsp][018],rbp
7918A: 56                             push         rsi
7918B: 57                             push         rdi
7918C: 4154                           push         r12
7918E: 4156                           push         r14
79190: 4157                           push         r15
79192: 4883EC20                       sub          rsp,020 ;' '
79196: 4C8BA1E8980100                 mov          r12,[rcx][0000198E8]
7919D: 4C8BB1F8980100                 mov          r14,[rcx][0000198F8]
791A4: 488B9918990100                 mov          rbx,[rcx][000019918]
791AB: 4C8BF9                         mov          r15,rcx
791AE: 33C0                           xor          eax,eax
791B0: 418BE9                         mov          ebp,r9d
791B3: 8D4820                         lea          ecx,[rax][020]
791B6: 8D5014                         lea          edx,[rax][014] -> size_t destSize
791B9: 498BFC                         mov          rdi,r12
791BC: F3AA                           rep stosb
791BE: 498BFE                         mov          rdi,r14
791C1: B900090000                     mov          ecx,000000900
791C6: F3AA                           rep stosb
791C8: 498BBFE0980100                 mov          rdi,[r15][0000198E0]
791CF: B900020000                     mov          ecx,000000200
791D4: F3AA                           rep stosb
791D6: 498BCE                         mov          rcx,r14 -> void *dest
791D9: 448BCA                         mov          r9d,edx -> size_t count
791DC: 498BF0                         mov          rsi,r8
791DF: 48895C2450                     mov          [rsp][050],rbx
791E4: FF15761F0100                   call         memcpy_s

My solution would be:

75B3B: 4C8D442430                     lea          rdx,[rsp][030] -> const void *src
75B40: 498D8A98020000                 lea          rcx,[r10][000000298]
75B47: 41B901000000                   mov          r8d,1
75B4D: E82E360000                     call        79180

79180: 48895C2410                     mov          [rsp][010],rbx
79185: 48896C2418                     mov          [rsp][018],rbp
7918A: 56                             push         rsi
7918B: 57                             push         rdi
7918C: 4154                           push         r12
7918E: 4156                           push         r14
79190: 4157                           push         r15
79192: 4883EC20                       sub          rsp,020 ;' '
79196: 4C8BA1E8980100                 mov          r12,[rcx][0000198E8]
7919D: 4C8BB1F8980100                 mov          r14,[rcx][0000198F8]
791A4: 488B9918990100                 mov          rbx,[rcx][000019918]
791AB: 4C8BF9                         mov          r15,rcx
791AE: 33C0                           xor          eax,eax
791B0: 418BE9                         mov          ebp,r9d
791B3: 8D4820                         lea          ecx,[rax][020]
791B6: 448D4014                       lea          r8d,[rax][014] -> size_t count
791BA: 498BFC                         mov          rdi,r12
791BD: F3AA                           rep stosb
791BF: 498BFE                         mov          rdi,r14
791C2: B900090000                     mov          ecx,000000900
791C7: F3AA                           rep stosb
791C9: 498BBFE0980100                 mov          rdi,[r15][0000198E0]
791D0: B900020000                     mov          ecx,000000200
791D5: F3AA                           rep stosb
791D7: 498BCE                         mov          rcx,r14 -> void *dest
791DA: 498BF0                         mov          rsi,r8
791DD: 9090                           nop
791DF: 48895C2450                     mov          [rsp][050],rbx
791E4: FF15761F0100                   call         memcpy

Can't patch this without moving down some instructions like mov          rdi,[r15][0000198E0] which obviously has relocation.

Zitat von ⇗ daniel_k im Beitrag ¶ #1785

---

@diderius6

About the ReactOS' storahci, it's a shame it isn't feature complete.

---

• ⇗  Storahci.zip

Zitat von ⇗ daniel_k im Beitrag ¶ #1786

---

@diderius6

Updated RSTe_4.6.0.1085_x64_MOD, made some mistakes. Now is 100% correct.
¶ Windows XP SP3 32bit and modern PC parts (118)

Tested on VirtualBox.

Please try it again if possible.

By the way, how much RAM available does XP x64 shows in System Properties?

For some reason, here it shows only 15.9GB instead of the full 16.0 GB RAM.

---

Method (_PS0, 0, Serialized)  // _PS0: Power State 0
            {
                If ((DVID == 0xFFFF))
                {
                    Return (Zero)
                }

                Local2 = MEMB /* \_SB_.PCI0.XHC_.MEMB */
                Local1 = PDBM /* \_SB_.PCI0.XHC_.PDBM */
                If (OSYS >= 0x07D6)
                {
                    PDBM &= 0xFFFFFFFFFFFFFFF9
                }
                Local3 = D0D3 /* \_SB_.PCI0.XHC_.D0D3 */
                D0D3 = Zero
                MEMB = XWMB /* \XWMB */
                PDBM = (Local1 | 0x02)
                OperationRegion (MCA1, SystemMemory, XWMB, 0x9000)
                Field (MCA1, DWordAcc, Lock, Preserve)
                {
                    Offset (0x80E0), 
                        ,   15, 
                    AX15,   1, 
                    Offset (0x8154), 
                        ,   31, 
                    CLK2,   1, 
                    Offset (0x816C), 
                        ,   2, 
                    CLK0,   1, 
                        ,   11, 
                    CLK1,   1
                }

                If ((PCHV () == LPTL))
                {
                    MB13 = Zero
                    MB14 = Zero
                    CLK0 = Zero
                    CLK1 = Zero
                }

                If ((PCHG == One))
                {
                    CLK2 = One
                }

                If (((PCHS == 0x02) && (PCHG == One)))
                {
                    Local3 = XWMB /* \XWMB */
                    Local3 += 0x0510
                    OperationRegion (PSCA, SystemMemory, Local3, 0x40)
                    Field (PSCA, DWordAcc, Lock, Preserve)
                    {
                        PSC1,   32, 
                        Offset (0x10), 
                        PSC2,   32, 
                        Offset (0x20), 
                        PSC3,   32, 
                        Offset (0x30), 
                        PSC4,   32
                    }

                    While (((((PSC1 & 0x03F8) == 0x02E0) || ((PSC2 & 
                        0x03F8) == 0x02E0)) || (((PSC3 & 0x03F8) == 0x02E0) || ((PSC4 & 
                        0x03F8) == 0x02E0))))
                    {
                        Stall (0x0A)
                    }

                    Local4 = Zero
                    Local0 = (PSC1 & 0xFFFFFFFFFFFFFFFD)
                    If (((Local0 & 0x000203F9) == 0x02A0))
                    {
                        PSC1 = (Local0 | 0x80000000)
                        Local4 |= One
                    }

                    Local0 = (PSC2 & 0xFFFFFFFFFFFFFFFD)
                    If (((Local0 & 0x000203F9) == 0x02A0))
                    {
                        PSC2 = (Local0 | 0x80000000)
                        Local4 |= 0x02
                    }

                    Local0 = (PSC3 & 0xFFFFFFFFFFFFFFFD)
                    If (((Local0 & 0x000203F9) == 0x02A0))
                    {
                        PSC3 = (Local0 | 0x80000000)
                        Local4 |= 0x04
                    }

                    Local0 = (PSC4 & 0xFFFFFFFFFFFFFFFD)
                    If (((Local0 & 0x000203F9) == 0x02A0))
                    {
                        PSC4 = (Local0 | 0x80000000)
                        Local4 |= 0x08
                    }

                    If (Local4)
                    {
                        Sleep (0x65)
                        If ((Local4 & One))
                        {
                            Local0 = (PSC1 & 0xFFFFFFFFFFFFFFFD)
                            PSC1 = (Local0 | 0x00FE0000)
                        }

                        If ((Local4 & 0x02))
                        {
                            Local0 = (PSC2 & 0xFFFFFFFFFFFFFFFD)
                            PSC2 = (Local0 | 0x00FE0000)
                        }

                        If ((Local4 & 0x04))
                        {
                            Local0 = (PSC3 & 0xFFFFFFFFFFFFFFFD)
                            PSC3 = (Local0 | 0x00FE0000)
                        }

                        If ((Local4 & 0x08))
                        {
                            Local0 = (PSC4 & 0xFFFFFFFFFFFFFFFD)
                            PSC4 = (Local0 | 0x00FE0000)
                        }
                    }

                    AX15 = One
                }

                If (((PCHG == One) || ((PCHV () == WPTL) && (PCHP == 0x41))))
                {
                    SWAI = Zero
                    SAIP = Zero
                }

                If (CondRefOf (\_SB.PCI0.XHC.PS0X))
                {
                    PS0X ()
                }

                If (OSYS >= 0x07D6)
                {
                    PDBM &= 0xFFFFFFFFFFFFFFFD
                }
                MEMB = Local2
                PDBM = Local1
            }

Zitat von ⇗ daniel_k im Beitrag ¶ #1784

---

 

791D6: 498BCE                         mov          rcx,r14 -> void *dest
791D9: 448BCA                         mov          r9d,edx -> size_t count
791DC: 498BF0                         mov          rsi,r8
791DF: 48895C2450                     mov          [rsp][050],rbx
791E4: FF15761F0100                   call         memcpy_s

Can't patch this without moving down some instructions like mov          rdi,[r15][0000198E0] which obviously has relocation.

---

newcode:
XX XX XX             mov rdx, r8 (new *src <- old *src, 64b)
XX XX XX             mov r8d,r9d (new count <- old count, 32b)
FF 15 XX XX XX XX    call memcpy (your assembler must calculate offset between current ip and memcpy)
3a:
XX XX XX             ret
3b:
XX XX XX             jmp 791EA

Zitat

---

memcpy_s
2 RDX (destSize)
3 R8 (*src)
4 R9 (count)

memcpy:
2 RDX (*src)
3 R8 (count)

---

• ⇗  DSDT.rar

Zitat von ⇗ canonkong im Beitrag ¶ #1789

---

@skullteria
What about USB XHCI Controller?
USB XHCI Driver Based on ReactOS Compiler: ⇗ https://yadi.sk/d/Bo_nQun4ryJXyQ
But not work on win7.

---

Zitat von ⇗ daniel_k im Beitrag ¶ #1786

---

By the way, how much RAM available does XP x64 shows in System Properties?
For some reason, here it shows only 15.9GB instead of the full 16.0 GB RAM.

---

Zitat von ⇗ Mov AX, 0xDEAD im Beitrag ¶ #1810

---

Does anyone have a Longhorn x64 windows version <= 4042 ?
if yes, please share acpi.sy_

---

Zitat von ⇗ Mov AX, 0xDEAD im Beitrag ¶ #1804

---

You shift code, this is not i like, in this case i prefer more generic way (but more complex and need some knowledge of mapping segment)
1) extend code segment to max available (max is begin of next segment - 1 byte) in PE header
2) look in reloc table about possible reloc in calling memcpy_s (ff 15 76 1f 01 00   is  call   qword  PTR [rip+0x11f76] , so it is IP relative call and no need reloc)
3a) if no reloc replace CALL memcpy_s to CALL newcode to new code placed at end of segment
or
3b) replace CALL memcpy_s to JMP newcode to new code placed at end of segment
4) add new commands with any lengh (but dont use absolute adressing, otherwise you need patch reloc table)

---

Zitat von ⇗ Andalu im Beitrag ¶ #1805

---

Hi all,
thanks a lot for your great job guys!

I know i'm a bit OT here but i need your help :)
i successfully installed Usb3.0 driver from daniel_k  on motherboard Gateway DX4870 (from acer aspire M3985, chipset B75) logically with XPSP3 :) both 'amd usb 3.0 root hub' and 'intel extensible host controller' are visible, but the usb3 ports work like usb2, the benchmark tests speed are too low for a really usb3.

My external disk too uses a blue led only when inserted on the Renesas usb3.0 pci card and always a white led when inserted in any usb2 and usb3 motherboard rear ports.
What's doesn't work correctly?


P.S.: my english is bad..sorry

---

Zitat von ⇗ daniel_k im Beitrag ¶ #1819

---

Thanks, I think I understand all your points.

---

Zitat von ⇗ daniel_k im Beitrag ¶ #1820

---

Make sure that the USB3 (XHCI) BIOS settings are properly configured.

Try the driver in this post:
¶ Windows XP SP3 32bit and modern PC parts (89)

---

Zitat von ⇗ skullteria im Beitrag ¶ #1826

---

So, i need from somebody make a fix of this function, removing security_cookie_check call. I will attatch driver on some hours.

---

void security_check_cookie(DWORD PTR) {
    return;
}

Zitat von ⇗ Mov AX, 0xDEAD im Beitrag ¶ #1828

---

Zitat von ⇗ skullteria im Beitrag ¶ #1826

---

So, i need from somebody make a fix of this function, removing security_cookie_check call. I will attatch driver on some hours.

---

 

void security_check_cookie(DWORD PTR) {
    return;
}

---

Zitat von ⇗ skullteria im Beitrag ¶ #1829

---

How add it to driver?

---

Zitat von ⇗ Andalu im Beitrag ¶ #1825

---

there is not XHCI option in bios, the mobo comes from an acer pre-assembled pc and the bios has few options only.
I installed too the "Renesas_FINAL_NEW" and the rear ports are still seen as usb2 but now:
- Intel USB3.1 eXtensible Host Controller and Renesas Electronics Usb 3.0 Host Controller have a new advanced tab where i disabled USB 3.0 power saving features;
- i got the message "this storage device can work faster if connected to a usb 3.0 port" for every device connected to the rear usb3 ports.

Can i try something else?

---

• ⇗  PE_Tool_0.0.5.zip

• ⇗  ssdt.zip

Zitat von ⇗ daniel_k im Beitrag ¶ #1832

---

What is the exact model of your system?
And country of purchase? Some models can only be found in the specific country support site.

---

Zitat von ⇗ daniel_k im Beitrag ¶ #1831

---

@Mov AX, 0xDEAD
Unfortunately there are just 5 free bytes, useless.

---

Zitat von ⇗ XPLAKE8175 im Beitrag ¶ #1845

---

I tried the more dangerous way: RWEverything.

---

Zitat von ⇗ XPLAKE8175 im Beitrag ¶ #1848

---

@diderius6 @Mov AX, 0xDEAD
iASL Warning: There were 41 external control methods found during disassembly, but only  33 were resolved (8 unresolved).

---

Zitat

---

External (AL6F, MethodObj, 0)
External (HLVT, MethodObj, 0)
External (P0L6, MethodObj, 0)
External (P1L6, MethodObj, 0)
External (P2L6, MethodObj, 0)
External (PS0X, MethodObj, 0)
External (PS2X, MethodObj, 0)
External (PS3X, MethodObj, 0)
External (_SB_.PCI0.PAUD.PUAM, MethodObj, 0)
External (_SB_.PCI0.XHC_.DUAM, MethodObj, 0)
External (_SB_.PCI0.XHC_.RHUB.INIR, MethodObj, 0)
External (_SB_.PCI0.SAT0.SDSM, MethodObj, 4)
External (MDBG, MethodObj, 1)
External (_SB_.TPM_.PTS_, MethodObj, 1)

---

if iasl found dependies in ssdt - ignore it, only dsdt is matter

Zitat von ⇗ XPLAKE8175 im Beitrag ¶ #1849

---

@diderius6 @Mov AX, 0xDEAD
How can I find DSDT/SSDTs in my bios with a program? If there is a program available how can I extract all my DSDT/SSDTs?

---

• ⇗  ssdtdebug.zip

• ⇗  BiosXrefstxtOri.rar

• ⇗  iasl4.zip

• ⇗  newdsdt.zip

• ⇗  dsdt.rar

• ⇗  acpi.rar

Zitat von ⇗ diderius6 im Beitrag ¶ #1874

---

GA-H110M-S2H
...
My first test is, if I can install there any version of UEFI Vista 32 bit.

---

Zitat von ⇗ diderius6 im Beitrag ¶ #1876

---

I see on a chinese Website, that they succeed with bootia32.efi

---

Zitat von ⇗ diderius6 im Beitrag ¶ #1879

---

Mov AX, 0xDEAD
"Some like CSM module, but as custom uefi loader on disk"
Have you ever seen something like a generic CSM module

---

Zitat von ⇗ infuscomus im Beitrag ¶ #1880

---

If you boot into grub2 64-bit in EFI mode with grubx64.efi, can you start 32-bit .efi executables from there?
like
chainloader (hd0,4)/efi/Boot/bootmgfw.efi
if bootmgfw.efi is 32-bit?

---

Zitat

---

BOOTIA32.EFI->grubia32.efi->grub.cfg
BOOTX64.EFI->grubx64.efi->grub.cfg

---

grub.cfg is same for both loaders and has command to load kernel:

Zitat

---

linuxefi /images/pxeboot/vmlinuz

---

vmlinuz is x64 kernel

seems exist way to run linux kernel with any uefi, but i dont understand how it works )

Zitat von ⇗ infuscomus im Beitrag ¶ #1884

---

@Mov AX, 0xDEAD
XP x64 works in 64-bit UEFI at least - ⇗ https://www.betaarchive.com/forum/viewto...=20327&start=82

---

Zitat von ⇗ Mov AX, 0xDEAD im Beitrag ¶ #1887

---

chinese guy maked custom loader/grub2x64.efi(??) to run DOS, XP, GRUB4DOS, WIN32, WIN64
⇗ http://bbs.wuyou.net/forum.php?mod=viewthread&tid=373513
english comments with grub2x64.efi download link to ⇗ https://github.com/a1ive/grub/issues/2

maybe this is what we need or i wrong

---

Zitat von ⇗ diderius6 im Beitrag ¶ #1886

---

@Mov AX, 0xDEAD
⇗ https://wiki.ubuntuusers.de/Howto/Instal...auf_EFI-System/
PS: 64 bit Uefi Bios => runs 32 Bit OS

---

Zitat

---

/
 * Support for invoking 32-bit EFI runtime services from a 64-bit
 * kernel. 
/

---

so linux kernel has own emulation layer x32<->x64

Zitat von ⇗ Mov AX, 0xDEAD im Beitrag ¶ #1887

---

chinese guy maked custom loader/grub2x64.efi(??) to run DOS, XP, GRUB4DOS, WIN32, WIN64
⇗ http://bbs.wuyou.net/forum.php?mod=viewthread&tid=373513
english comments with grub2x64.efi download link to ⇗ https://github.com/a1ive/grub/issues/2

maybe this is what we need or i wrong

---

When I understand the discussion forum for this general grub2x64.efi correct,
XP SP3 can be just loaded via ntldr on a pur 64bit UEFI without any CSM support?

Only menu.lst with content
  
   root (hd0,0)
   chainloader /ntldr
   boot

Thats all?

Dietmar

PS: I am not good with syntax for grub. Where has

"If you boot into grub2 64-bit in EFI mode with grubx64.efi, can you start 32-bit .efi executables from there?

like

chainloader (hd0,4)/efi/Boot/bootmgfw.efi

if bootmgfw.efi is 32-bit?"

to stay this special grub2x64.efi ?

• ⇗  mixing-it-up-with-efi-mixed-mode.pdf

Zitat von ⇗ diderius6 im Beitrag ¶ #1897

---

@Mov AX, 0xDEAD
Can you compile the source code for win_x32 on uefi
for Win server 2003 and XP SP3? This would be a big step forward,

---

Zitat von ⇗ diderius6 im Beitrag ¶ #1899

---

@Mov AX, 0xDEAD
With Win8 32bit, may be other can help you

---

Zitat von ⇗ infuscomus im Beitrag ¶ #1833

---

@daniel_k

PETool 0.0.5 can insert extra space in-between sections, maybe it can help?

originally found here
⇗ https://msfn.org/board/topic/146529-pe-t...eating-patches/

---

Zitat von ⇗ Mov AX, 0xDEAD im Beitrag ¶ #1840

---

Zitat von ⇗ daniel_k im Beitrag ¶ #1831

---

⇗ @Mov AX, 0xDEAD
Unfortunately there are just 5 free bytes, useless.

---

1) in drivers exist section INIT, this is also code section, but after driver initialised this memory is cleaned
to avoid this rename section to .text and make it in header nopageable and nondiscardable
or
2) create new code section, virtual adress must not overlap with existing sectons

---

Zitat von ⇗ daniel_k im Beitrag ¶ #1904

---

@Andalu

Did you the black USB 2.0 and blue USB 3.0 ports?

All ports work?

Just saw the service manual, there isn't much to be done if there are no settings available in BIOS Setup.

---

Zitat von ⇗ diderius6 im Beitrag ¶ #1901

---

I just do the USB mod in DSDT in Bios for full Intel chipset USB3 support on the

---

• ⇗  DSDT.rar

Zitat von ⇗ diderius6 im Beitrag ¶ #1910

---

@Mov AX, 0xDEAD
Yes, some 64bit constants cant live together with XP 32 bit until now in DSDT.

---

Zitat von ⇗ diderius6 im Beitrag ¶ #1915

---

Have you tested, if this code overcomes the BSOD A5
during use of asl.exe with full acpi support uploading a modded DSDT

---

Zitat von ⇗ Mov AX, 0xDEAD im Beitrag ¶ #1809

---

Zitat von ⇗ daniel_k im Beitrag ¶ #1786

---

By the way, how much RAM available does XP x64 shows in System Properties?
For some reason, here it shows only 15.9GB instead of the full 16.0 GB RAM.

---

check with any e820 tool ram ranges, if is it 15.9 - bios claimed some ram

---

Zitat von ⇗ daniel_k im Beitrag ¶ #1921

---

Which tool would you recommend?
Curious to see. Is it possible to tell the device the RAM is reserved to?

---

• ⇗  e820.zip

Zitat von ⇗ daniel_k im Beitrag ¶ #1920

---

@diderius6
If I understand correctly and if Mov AX, 0xDEAD gave us all the required steps to add support for qwords, try the acpi.sys (checked/debug version included) or apply the changes to yours

---

Zitat von ⇗ daniel_k im Beitrag ¶ #1926

---

@diderius6, try both these, not sure if I following the logic correctly, so please try both.
At least it didn't crash here!

---

E820 Dump Tool - Version 0.1.0 - Copyright(C) Mike Hou 2011
----------------------------------------------------------------
        Base Address                Length             Type    
-----------------------+------------------------------+---------
 0: 0x00000000-00000000 (0x00000000-0009C400 ~ 625 KB) 1 (Memory)
 1: 0x00000000-0009C400 (0x00000000-00003C00 ~  15 KB) 2 (Reserved)
 2: 0x00000000-000E0000 (0x00000000-00020000 ~ 128 KB) 2 (Reserved)
 3: 0x00000000-00100000 (0x00000000-3FF00000 ~ 1023 MB) 1 (Memory)
 4: 0x00000000-40000000 (0x00000000-00400000 ~   4 MB) 2 (Reserved)
 5: 0x00000000-40400000 (0x00000000-74F90000 ~   1 GB) 1 (Memory)
 6: 0x00000000-B5390000 (0x00000000-00001000 ~   4 KB) 4 (NVS)
 7: 0x00000000-B5391000 (0x00000000-00001000 ~   4 KB) 2 (Reserved)
 8: 0x00000000-B5392000 (0x00000000-080CC000 ~ 128 MB) 1 (Memory)
 9: 0x00000000-BD45E000 (0x00000000-004FB000 ~   4 MB) 2 (Reserved)
10: 0x00000000-BD959000 (0x00000000-000B3000 ~ 716 KB) 1 (Memory)
11: 0x00000000-BDA0C000 (0x00000000-003C3000 ~   3 MB) 4 (NVS)
12: 0x00000000-BDDCF000 (0x00000000-01230000 ~  18 MB) 2 (Reserved)
13: 0x00000000-BEFFF000 (0x00000000-00001000 ~   4 KB) 1 (Memory)
14: 0x00000001-00000000 (0x00000003-3F000000 ~  12 GB) 1 (Memory)
15: 0x00000000-BF000000 (0x00000000-01000000 ~  16 MB) 2 (Reserved)
16: 0x00000000-F0000000 (0x00000000-08000000 ~ 128 MB) 2 (Reserved)
17: 0x00000000-FE000000 (0x00000000-00011000 ~  68 KB) 2 (Reserved)
18: 0x00000000-FEC00000 (0x00000000-00001000 ~   4 KB) 2 (Reserved)
19: 0x00000000-FED00000 (0x00000000-00001000 ~   4 KB) 2 (Reserved)
20: 0x00000000-FEE00000 (0x00000000-00001000 ~   4 KB) 2 (Reserved)
21: 0x00000000-FF000000 (0x00000000-01000000 ~  16 MB) 2 (Reserved)
----------------------------------------------------------------

Extended Memory:
INT $15, AH=$88
Memory above 1M: 0 Kb
INT $15, AX=$E801
Free memory between 1M and 16M, in K: 0 Kb
Free memory above 16M, in 64K blocks: 0 = 0 Kb
Configured memory between 1M and 16M, in K: 0 Kb
Configured memory above 16M, in 64K blocks: 0 = 0 Kb
INT $15, EAX=$0000E820
0000000000000000 : 000000000009C400 1 (Available)
000000000009C400 : 0000000000003C00 2 (Reserved)
00000000000E0000 : 0000000000020000 2 (Reserved)
0000000000100000 : 000000003FF00000 1 (Available)
0000000040000000 : 0000000000400000 2 (Reserved)
0000000040400000 : 0000000074F90000 1 (Available)
00000000B5390000 : 0000000000001000 4 (ACPI NVS)
00000000B5391000 : 0000000000001000 2 (Reserved)
00000000B5392000 : 00000000080CC000 1 (Available)
00000000BD45E000 : 00000000004FB000 2 (Reserved)
00000000BD959000 : 00000000000B3000 1 (Available)
00000000BDA0C000 : 00000000003C3000 4 (ACPI NVS)
00000000BDDCF000 : 0000000001230000 2 (Reserved)
00000000BEFFF000 : 0000000000001000 1 (Available)
0000000100000000 : 000000033F000000 1 (Available)
00000000BF000000 : 0000000001000000 2 (Reserved)
00000000F0000000 : 0000000008000000 2 (Reserved)
00000000FE000000 : 0000000000011000 2 (Reserved)
00000000FEC00000 : 0000000000001000 2 (Reserved)
00000000FED00000 : 0000000000001000 2 (Reserved)
00000000FEE00000 : 0000000000001000 2 (Reserved)
00000000FF000000 : 0000000001000000 2 (Reserved)

Can't speak of the Z390, but the Z370 (where I ran the tools) is virtually the same as other 200 series chipsets.

Zitat von ⇗ daniel_k im Beitrag ¶ #1929

---

3: 0x00000000-00100000 (0x00000000-3FF00000 ~ 1023 MB) 1 (Memory)
5: 0x00000000-40400000 (0x00000000-74F90000 ~   1 GB) 1 (Memory)
8: 0x00000000-B5392000 (0x00000000-080CC000 ~ 128 MB) 1 (Memory)
14: 0x00000001-00000000 (0x00000003-3F000000 ~  12 GB) 1 (Memory)
Can't speak of the Z390, but the Z370 (where I ran the tools) is virtually the same as other 200 series chipsets.

---

Zitat von ⇗ daniel_k im Beitrag ¶ #1933

---

@Mov AX, 0xDEAD
Does it has something to do with my GTX 980 4GB?

---

Zitat

---

3	0000000000100000  00000000B3D44000  1:Available
6	00000000B3E46000  0000000007DF5000  1:Available
12	0000000100000000  000000003F400000  1:Available

---

in low memory available 2877+125 =3002Mb, in high pae 1012Mb, total 4014Mb ~ 4096Mb
in my case bios set some hardware mapping(?) to translate cpu "physical adresses" above first 4G range to "low" ramchip physical lines, because ram is 4G and has relative 0x0-0xFFFF FFFF adressing only

Zitat von ⇗ diderius6 im Beitrag ¶ #1939

---

@daniel_k

On all 3 compis device manager shows 31.9 Gbyte free
on your nice XP/ 2003 32 bit project.

When I use 4 Gb ram, they all show there 3.9 Gbyte free

Dietmar

---

Zitat von ⇗ daniel_k im Beitrag ¶ #1943

---

I was wondering, as I still don't have the knowledge to do it myself, wouldn't it be possible to add support for CreateQWordFieldOp by using the same function that processes CreateDWordFieldOp?

---

If (LEqual (M64L, Zero))
{
	CreateQWordField (BUF0, \_SB.PCI0._Y0F._LEN, MSLN)  // _LEN: Length
	Store (Zero, MSLN) /* \_SB_.PCI0._CRS.MSLN */
}
	Else
{
	CreateQWordField (BUF0, \_SB.PCI0._Y0F._LEN, M2LN)  // _LEN: Length
	CreateQWordField (BUF0, \_SB.PCI0._Y0F._MIN, M2MN)  // _MIN: Minimum Base Address
	CreateQWordField (BUF0, \_SB.PCI0._Y0F._MAX, M2MX)  // _MAX: Maximum Base Address
	Store (M64L, M2LN) /* \_SB_.PCI0._CRS.M2LN */
	Store (M64B, M2MN) /* \_SB_.PCI0._CRS.M2MN */
	Subtract (Add (M2MN, M2LN), One, M2MX) /* \_SB_.PCI0._CRS.M2MX */
}

- add CreateQWordField, which actually calls CreateDWordField.

- Patch Store so it will ignore higher order address and just copy the lower 32-bit part.

- XP is tricked into thinking we are working with 32-bit addresses.

Zitat von ⇗ daniel_k im Beitrag ¶ #1946

---

- add CreateQWordField, which actually calls CreateDWordField.
- Patch Store so it will ignore higher order address and just copy the lower 32-bit part.
- XP is tricked into thinking we are working with 32-bit addresses.

---

Zitat von ⇗ Mov AX, 0xDEAD im Beitrag ¶ #1947

---

Zitat von ⇗ daniel_k im Beitrag ¶ #1946

---

- add CreateQWordField, which actually calls CreateDWordField.
- Patch Store so it will ignore higher order address and just copy the lower 32-bit part.
- XP is tricked into thinking we are working with 32-bit addresses.

---

This trick will work.
no need touch "store" because in winxp all ints are 32, so M64L/M64B/Zero is 32 too

---

Zitat von ⇗ daniel_k im Beitrag ¶ #1948

---

6F680200-40BA0200-8A
1- Function address
2- Opcode "CreateDwordField" String
3- Opcode

---

Zitat von ⇗ daniel_k im Beitrag ¶ #1953

---

Switch does not exist in ACPI.SYS. Does XP ignores this? Will check ACPI specs.

---

Zitat von ⇗ diderius6 im Beitrag ¶ #1956

---

@daniel_k
"Does DSDT can be modded in VirtualBox? Did you ever try?"
I think yes, but the results on real compi may be different

---

Zitat von ⇗ diderius6 im Beitrag ¶ #1959

---

BSOD 0x000000A5 (0x00000011, 0x00000008, xxx, yyy)
has nothing to do with
CreateQWordField.

---

2B1D0: 83FE02                         cmp          esi,2
2B1D3: 740B                           jz          .2B1E0   -> THIS IS CORRECT?
2B1D5: 81EEF3000000                   sub          esi,0000000F3
2B1DB: E976D9FFFF                     jmp         .28B56
2B1E0: 8B31                           mov          esi,[ecx]
2B1E2: 8B36                           mov          esi,[esi]
2B1E4: 897208                         mov          [edx][8],esi
2B1E7: 830108                         add          d,[ecx],8
2B1EA: E9ADD9FFFF                     jmp         .28B9C

            Device (NVM1)
            {
                Name (_ADR, 0x00C1FFFF)  // _ADR: Address
                Method (_INI, 0, NotSerialized)  // _INI: Initialize
                {
                    NITV = NIT1 /* \NIT1 */
                    NPMV = NPM1 /* \NPM1 */
                    NPCV = NPC1 /* \NPC1 */
                    NL1V = NL11 /* \NL11 */
                    ND2V = ND21 /* \ND21 */
                    ND1V = ND11 /* \ND11 */
                    NLRV = NLR1 /* \NLR1 */
                    NLDV = NLD1 /* \NLD1 */
                    NEAV = NEA1 /* \NEA1 */
                    NEBV = NEB1 /* \NEB1 */
                    NECV = NEC1 /* \NEC1 */
                    NRAV = NRA1 /* \NRA1 */
                    NMBV = NMB1 /* \NMB1 */
                    NMVV = NMV1 /* \NMV1 */
                    NPBV = NPB1 /* \NPB1 */
                    NPVV = NPV1 /* \NPV1 */
                    NRPN = NRP1 /* \NRP1 */
                    NCRN = Zero
                    ARPC (NRPN, RefOf (PWRG), RefOf (RSTG), RefOf (SCLK))  ---> CULPRIT
                }
...

Method ARPC has an ToInteger opcode.

There are 3 instances of that command line (NVM1, NVM2 and NVM3)

Zitat von ⇗ daniel_k im Beitrag ¶ #1963

---

@Mov AX, 0xDEAD
Can you please confirm this code flow is correct, please?
 

2B1D0: 83FE02                         cmp          esi,2
2B1D3: 740B                           jz          .2B1E0   -> THIS IS CORRECT?
 
2B1E0: 8B31                           mov          esi,[ecx]

---

        Method (HCID, 1, Serialized)
        {
            Name (_T_1, Zero)  // _T_x: Emitted by ASL Compiler
            Name (_T_0, Zero)  // _T_x: Emitted by ASL Compiler
            If (OSYS >= 0x07D6)
            {
                While (One)
                {
                    _T_0 = ToInteger (Arg0)
                    If (_T_0 == Zero)
                    {
                        Local0 = L0SM /* \L0SM */
                    }
                    ElseIf (_T_0 == One)
                    {
                        Local0 = L1SM /* \L1SM */
                    }
                    ElseIf (_T_0 == 0x02)
                    {
                        Local0 = L2SM /* \L2SM */
                    }
                    Else
                    {
                        Local0 = L3SM /* \L3SM */
                    }
 
                    Break
                }
 
                While (One)
                {
                    _T_1 = ToInteger (Local0)
                    If (_T_1 == Zero)
                    {
                        Return ("INT3471")
                    }
                    ElseIf (_T_1 == One)
                    {
                        Return ("INT33BE")
                    }
                    ElseIf (_T_1 == 0x02)
                    {
                        Return ("INT3476")
                    }
                    ElseIf (_T_1 == 0x03)
                    {
                        Return ("INT3477")
                    }
                    ElseIf (_T_1 == 0x04)
                    {
                        Return ("INT3474")
                    }
                    ElseIf (_T_1 == 0x05)
                    {
                        Return ("INT3473")
                    }
                    ElseIf (_T_1 == 0x06)
                    {
                        Return ("INT3475")
                    }
                    ElseIf (_T_1 == 0x07)
                    {
                        Return ("INT3478")
                    }
                    ElseIf (_T_1 == 0x08)
                    {
                        Return ("INT3479")
                    }
                    ElseIf (_T_1 == 0x09)
                    {
                        Return ("INT347A")
                    }
                    ElseIf (_T_1 == 0x0A)
                    {
                        Return ("INT347B")
                    }
                    ElseIf (_T_1 == 0x0B)
                    {
                        Return ("OVTI2742")
                    }
                    ElseIf (_T_1 == 0x0C)
                    {
                        Return ("OVTI9234")
                    }
                    ElseIf (_T_1 == 0x0D)
                    {
                        Return ("OVTI8856")
                    }
                    ElseIf (_T_1 == 0x0E)
                    {
                        Return ("OVTIF860")
                    }
                    Else
                    {
                        Return (GRID (Arg0))
                    }
 
                    Break
                }
            }
            Else
            {
                Return ("INT3471")
            }
        }

Zitat von ⇗ infuscomus im Beitrag ¶ #1976

---

@diderius6 @daniel_k @Mov AX, 0xDEAD
what are we doing with acpi.sys? don't we already have a patched acpi.sys from longhorn 5048 that works?

---

BF080014C0B8  =>  BF00000000B8

Zitat von ⇗ diderius6 im Beitrag ¶ #1978

---

The gigabyte h110m-s2h board with original BIOS F25 starts with ACPI support.
But there is no graphikcard and on one PCI-to-PCI bridge (yellow exclamation mark) told,
not enough resources. When you look at the IRQ, they go only up to 19.

---

Zitat von ⇗ daniel_k im Beitrag ¶ #1987

---

managed to add QWordConst opcode. It's attached, if you wanna try it.

---

Zitat von ⇗ diderius6 im Beitrag ¶ #1990

---

For the not working PCIe (graphikcard)
E/A-Bereich FF00 - FFFE wird verwendet von:
 \Driver\VgaSave
 PCI Standard-PCI-zu-PCI-Brücke
ACPI\PNP0C02\IOTRAPS

---

Zitat von ⇗ daniel_k im Beitrag ¶ #1987

---

@Mov AX, 0xDEAD, interesting that, with XP's ACPI.SYS there is no conflict

---

        Device (IOTR)
        {
            Name (_HID, EisaId ("PNP0C02") /* PNP Motherboard Resources */)  // _HID: Hardware ID
            Name (_UID, "IoTraps")  // _UID: Unique ID
            Method (_CRS, 0, NotSerialized)  // _CRS: Current Resource Settings
            {
                Local0 = ResourceTemplate ()
                    {
                    }
                Name (BUF0, ResourceTemplate ()
                {
                    IO (Decode16,
                        0x0000,             // Range Minimum
                        0x0000,             // Range Maximum
                        0x01,               // Alignment
                        0xFF,               // Length
                        _Y21)
                })
                Name (BUF1, ResourceTemplate ()
                {
                    IO (Decode16,
                        0x0000,             // Range Minimum
                        0x0000,             // Range Maximum
                        0x01,               // Alignment
                        0xFF,               // Length
                        _Y22)
                })
                Name (BUF2, ResourceTemplate ()
                {
                    IO (Decode16,
                        0x0000,             // Range Minimum
                        0x0000,             // Range Maximum
                        0x01,               // Alignment
                        0xFF,               // Length
                        _Y23)
                })
                Name (BUF3, ResourceTemplate ()
                {
                    IO (Decode16,
                        0x0000,             // Range Minimum
                        0x0000,             // Range Maximum
                        0x01,               // Alignment
                        0xFF,               // Length
                        _Y24)
                })
                CreateWordField (BUF0, \_SB.PCI0.IOTR._CRS._Y21._MIN, AMI0)  // _MIN: Minimum Base Address
                CreateWordField (BUF0, \_SB.PCI0.IOTR._CRS._Y21._MAX, AMA0)  // _MAX: Maximum Base Address
                CreateWordField (BUF1, \_SB.PCI0.IOTR._CRS._Y22._MIN, AMI1)  // _MIN: Minimum Base Address
                CreateWordField (BUF1, \_SB.PCI0.IOTR._CRS._Y22._MAX, AMA1)  // _MAX: Maximum Base Address
                CreateWordField (BUF2, \_SB.PCI0.IOTR._CRS._Y23._MIN, AMI2)  // _MIN: Minimum Base Address
                CreateWordField (BUF2, \_SB.PCI0.IOTR._CRS._Y23._MAX, AMA2)  // _MAX: Maximum Base Address
                CreateWordField (BUF3, \_SB.PCI0.IOTR._CRS._Y24._MIN, AMI3)  // _MIN: Minimum Base Address
                CreateWordField (BUF3, \_SB.PCI0.IOTR._CRS._Y24._MAX, AMA3)  // _MAX: Maximum Base Address
                AMI0 = ITA0 /* \ITA0 */
                AMA0 = ITA0 /* \ITA0 */
                AMI1 = ITA1 /* \ITA1 */
                AMA1 = ITA1 /* \ITA1 */
                AMI2 = ITA2 /* \ITA2 */
                AMA2 = ITA2 /* \ITA2 */
                AMI3 = ITA3 /* \ITA3 */
                AMA3 = ITA3 /* \ITA3 */
                If (ITS0 == One)
                {
                    ConcatenateResTemplate (Local0, BUF0, Local1)
                    Local0 = Local1
                }
 
                If (ITS1 == One)
                {
                    ConcatenateResTemplate (Local0, BUF1, Local1)
                    Local0 = Local1
                }
 
                If (ITS2 == One)
                {
                    ConcatenateResTemplate (Local0, BUF2, Local1)
                    Local0 = Local1
                }
 
                If (ITS3 == One)
                {
                    ConcatenateResTemplate (Local0, BUF3, Local1)
                    Local0 = Local1
                }
 
                Return (Local0)
            }
        }

• ⇗  Z370AOG3_F13.rar

3A122: 894610                         mov          [esi][010],eax
3A125: 0FB6C0                         movzx        eax,al
3A128: 50                             push         eax
3A129: E8920FFFFF                     call         HalConvertIdtToIrql
3A12E: 83661C00                       and          d,[esi][01C],0
3A132: 884614                         mov          [esi][014],al

My patch:

3A122: 894610                         mov          [esi][010],eax
3A125: 0FB6C0                         movzx        eax,al
3A128: 50                             push         eax
3A129: E8E2610000                     call        40310
3A12E: 83661C00                       and          d,[esi][01C],0
3A132: 884614                         mov          [esi][014],al
 

40310: 8B442404                       mov          eax,[esp][4]
40314: C1E804                         shr          eax,4
40317: 83C004                         add          eax,4
4031A: C20400                         retn         4 

Zitat von ⇗ diderius6 im Beitrag ¶ #1994

---

I tried to disable ACPI\PNP0C02\IOTRAPS
in registry of XP
and also in devicemanager (motherboard resources)
but without success.
May be, that can be done without modding DSDT

---

Zitat von ⇗ daniel_k im Beitrag ¶ #1995

---

@Mov AX, 0xDEAD, that's what I don't get.

       Device (IOTR)
            Method (_CRS, 0, NotSerialized)  // _CRS: Current Resource Settings
                If (ITS0 == One)
                {
                    ConcatenateResTemplate (Local0, BUF0, Local1)
                    Local0 = Local1
                }

---

Zitat von ⇗ daniel_k im Beitrag ¶ #2004

---

@Mov AX, 0xDEAD, what does this mean (on XP)?

---

Zitat von ⇗ daniel_k im Beitrag ¶ #1997

---

I'm trying to patch Vista beta 4008, which has one missing import, whose code is really simple.
Original:
 

3A129: E8920FFFFF                     call         HalConvertIdtToIrql

My patch:

 

3A129: E8E2610000                     call        40310
 
40310: 8B442404                       mov          eax,[esp][4]
40314: C1E804                         shr          eax,4
40317: 83C004                         add          eax,4
4031A: C20400                         retn         4 

---

Zitat von ⇗ daniel_k im Beitrag ¶ #2010

---

@Mov AX, 0xDEAD
2) Sorry, don't understand. You mean pop stack back in the original function itself or in the code after the call?

---

Zitat von ⇗ daniel_k im Beitrag ¶ #2012

---

@diderius6

That's great!

Are there any functional changes between this and XP 5512? IRQ ranges?

Please delete your above and use the file I've attached.

There were some unnecessary changes I made.

I've already applied @infuscomus fix.

---

Zitat von ⇗ daniel_k im Beitrag ¶ #2020

---

@Mov AX, 0xDEAD, wouldn't it be possible to add a string check to Store function in ACPI.SYS so that during processing it would ignore ITA0 and don't do anything?
This would solve the PCI bridge conflict.

---

Zitat von ⇗ daniel_k im Beitrag ¶ #2023

---

@skullteria, I did it on my own. Yes, currently porting the changes to x64.

@Mov AX, 0xDEAD, seeing what most XP compatibility patches are hacks (even official ones), don't see anything wrong with that.

Are there any utilities to edit x64 relocation table or we need to change it manually? Something like Relocation Section Editor which I use for 32-bit?

---

Zitat von ⇗ daniel_k im Beitrag ¶ #2023

---

Are there any utilities to edit x64 relocation table or we need to change it manually? Something like Relocation Section Editor which I use for 32-bit?

---

15ED4: BF080014C0                     mov          edi,0C0140008
15ED9: B8090014C0                     mov          eax,0C0140009
15EDE: 3B55F8                         cmp          edx,[ebp][-8]
15EE1: 0F8DE3000000                   jge          000015FCA
15EE7: 8B5D0C                         mov          ebx,[ebp][00C]
15EEA: 0FBE141A                       movsx        edx,b,[edx][ebx]
15EEE: 83FA49                         cmp          edx,049 ;'I'
15EF1: 7F64                           jg           000015F57
15EF3: 745C                           jz           000015F51
15EF5: 83EA41                         sub          edx,041 ;'A'
15EF8: 7450                           jz           000015F4A
15EFA: 4A                             dec          edx
15EFB: 7447                           jz           000015F44
15EFD: 4A                             dec          edx
15EFE: 7435                           jz           000015F35
15F00: 4A                             dec          edx
15F01: 741F                           jz           000015F22
15F03: 4A                             dec          edx
15F04: 4A                             dec          edx
15F05: 7415                           jz           000015F1C
15F07: 4A                             dec          edx
15F08: 4A                             dec          edx
15F09: 7567                           jnz          000015F72
15F0B: 6683390F                       cmp          w,[ecx],00F    --> CHECK CAUSES BSOD
15F0F: 0F84A3000000                   jz           000015FB8
15F15: 89FF                           mov          esi,edi
15F17: E99C000000                     jmp          000015FB8
15F1C: 66833905                       cmp          w,[ecx],5
15F20: EBED                           jmps         000015F0F

XP 5512:

13D1F: BF080014C0                     mov          edi,0C0140008 ;'
13D24: B8090014C0                     mov          eax,0C0140009 ;'
13D29: 3B5DFC                         cmp          ebx,[ebp][-4]
13D2C: 0F8DB6000000                   jge          000013DE8
13D32: 8B550C                         mov          edx,[ebp][00C]
13D35: 0FBE1413                       movsx        edx,b,[ebx][edx]
13D39: 83FA49                         cmp          edx,049 ;
13D3C: 7F51                           jg           000013D8F
13D3E: 7449                           jz           000013D89
13D40: 83EA41                         sub          edx,041 ;
13D43: 743D                           jz           000013D82
13D45: 4A                             dec          edx
13D46: 7434                           jz           000013D7C
13D48: 4A                             dec          edx
13D49: 7422                           jz           000013D6D
13D4B: 4A                             dec          edx
13D4C: 740A                           jz           000013D58
13D4E: 4A                             dec          edx
13D4F: 4A                             dec          edx
13D50: 7553                           jnz          000013DA5
13D52: 66833905                       cmp          w,[ecx],5
13D56: EB6F                           jmps         000013DC7

Zitat von ⇗ diderius6 im Beitrag ¶ #2034

---

@daniel_k

The new acpi.sys 5048 for 64 bit gives on a working XP 64 installation on the Giga H110 board
with original DSDT and Bios F25
BSOD A5 (0x03, xxx, 0xC0140008, yyy)
Dietmar

PS: The same BSOD happens on asrock fatal1ty z370 gaming k6.

---

Zitat von ⇗ diderius6 im Beitrag ¶ #2045

---

@daniel_k

The modded acpi.sys 64 bit from @skullteria
does not show IOTR error on the Asrock fatal1ty z370 gaming k6 board

Dietmar

PS: The very last acpi.sys 64 bit from @skullteria I do not have.

---

Zitat von ⇗ daniel_k im Beitrag ¶ #2033

---

@Mov AX, 0xDEAD
Interesting that the ACPI.SYS 5048 does an additional check in CreateByteField which leads to a BSOD.
VISTA 5048
 

15ED4: BF080014C0                     mov          edi,0C0140008
15ED9: B8090014C0                     mov          eax,0C0140009

---

15F07: 4A                             dec          edx
15F08: 4A                             dec          edx
15F09: 7567                           jnz          000015F72
15F0B: 6683390F                       cmp          w,[ecx],00F 

at ip=15F0B  EDX was decremented to 41+1+1+1+2+2=48h="H"
so _ValidateArgTypes was called with 2nd arg = pointer to string with "H" char inside

at winxp_5512 exist  C, I, O, A, B, D, .. but not "H"
at vosta_5048 i see two calls with H  "LoadTable" & "Unload" opcode, but we dont see this in dsdt, do double check about place of BSOD

Zitat von ⇗ diderius6 im Beitrag ¶ #2045

---

does not show IOTR error on the Asrock fatal1ty z370 gaming k6 board

---

Zitat von ⇗ diderius6 im Beitrag ¶ #2050

---

@Mov AX, 0xDEAD
Asrock fatal1ty z370 gaming k6 board

---

Zitat von ⇗ daniel_k im Beitrag ¶ #2056

---

@diderius6, please try these 2 test files.

Where is the modded x64 ACPI.SYS from @skullteria which fixes IOTR? Was it 5048 or 5512?

So, we've got it all after all.

We just need to find which patch is resposible for the IOTR fix and apply it on the 32-bit version.

---

• ⇗  acpi.rar

Zitat von ⇗ daniel_k im Beitrag ¶ #2059

---

@Mov AX, 0xDEAD
This is the original untouched ACPI.SYS 5048.

---

• ⇗  acpi3.rar

Zitat von ⇗ daniel_k im Beitrag ¶ #2069

---

⇗ @diderius6

---

• ⇗  USB3bestforIntel.rar

pseudo-code:
sub edi, 0xe ; back edi to start of buffer
cmpl	[edi], 0x11 0D 0A 0A
jnz nopatch
cmpl	[edi+4], 0x47 01 00 00
jnz nopatch
cmpl	[edi+8], 0x00 00 01 FF
jnz nopatch
cmpw [edi+c], 0x79 00
jnz nopatch
patch:
moveb [edi+b], 0x00 ; edi+b=length
nopatch: jmp _back

im not sure about full bufer, maybe in edi will be only 0A 0A 47 01 00 00 00 00 01 FF 79 00

Zitat von ⇗ diderius6 im Beitrag ¶ #2073

---

@daniel_k

Your last acpi.sys (post 2069) for XP SP3 32 bit
works on all boards (AMD, Intel, old, new) that I tested.
No need to mod anything in Bios. All USB devices work.

---

Zitat von ⇗ daniel_k im Beitrag ¶ #2081

---

@Mov AX, 0xDEAD, how do I find the code for a certain opcode? I'm think about replacing a non used opcode.

---

.text:00027407                 mov     edi, edi
.text:00027409                 push    ebp

in this block we copy bytes from dsdt to memory:

.text:000274B5                 mov     eax, [ebp+arg_0]
.text:000274B8                 mov     ecx, esi
.text:000274BA                 mov     esi, [eax+3Ch]
.text:000274BD                 mov     eax, [ebx+30h]
.text:000274C0                 mov     edi, [eax+10h]
.text:000274C3                 mov     eax, ecx
.text:000274C5                 shr     ecx, 2
.text:000274C8                 rep movsd
.text:000274CA                 mov     ecx, eax
.text:000274CC                 and     ecx, 3
.text:000274CF                 rep movsb
.text:000274D1                 mov     eax, [ebx+14h] <- copying is done at this IP and we can patch
.text:000274D4                 mov     ecx, [ebp+arg_0]
.text:000274D7                 mov     [ecx+3Ch], eax
.text:000274DA                 pop     edi

also possible patching source buffer (where dsdt is loaded) before copying to final destination