190 replies to this topic

[allanf]

...Here's a link to the fixed version: http://galapo.boot-l...tResolution.exe

Yep. Fixed ... ...

Thanks.

[Galapo]

I uploaded a new version adopting a few of your suggestions.

When starting the executable, program info is now displayed. The same can be displayed by the commandline parameters: /?, -?, -help, or help (take your pick).

Messages are displayed a little longer also.

Regards,
Galapo.

[allanf]

@Filip Hasa,

I hate to dump an alpha on you. I will be away for a few days.

Here is an attempt to introduce a page for x64 programs into Winbuilder interface. Only updated 'Dependency Walker', jkDefrag and MBRWiz. Also added the last two to x86 page... look good but not tested at all. procexp is supposed to work on all platforms - according to the Web Page.




... not ideal because the interface gives the impression that x86 and x64 can be mixed, but really only one page will run, depending on the 'pe2 architecture' selection.




Regards

[Filip Hasa]

@GALAPO

HI,
can you compile your SetResolution.exe under amd64?
thanks

[Filip Hasa]

@allanf

thanks for next version. I will try it.

Servicing - dependece on system - not useable for different type system then you are creating

[Galapo]

Try this: http://galapo.boot-l...olution-x64.exe

I have no idea whether it works as I have no way of testing.

Regards,
Galapo.

[TheHive]

Its gettimg better but I had more suggestions.
Seperate retail programs from other programs. Im guessing seperate the auto downloaded programs from the none auto downloaded programs.
For example if you dont have ghost and you just download the project and try to select ghost to include in the project build you will not get anything because the user needs to know that they have to supply the files.

By default AMD64 is selected.
The FInal ISO doesnt seem to be created.

[allanf]

The FInal ISO doesnt seem to be created.

... that sounds like a serious problem!

An 'oscdimg.cmd' file ought to be created in the project's folder. This is used to 'Set' the path to the correct oscdimg.exe for the Architecture of your host machine, and to run the oscdimg command.

Please let me know if you can find the file '\winbuilder\Projects\pe21.002x\oscdimg.cmd'.

the setting 'pe2 architecture' determines the architecture of the actual build - not the building of it... so you can build an amd64 WinPE2 on an x86 machine, etc...

For the 'pe21' project you need the WAIK 2.1 available from MS:
http://www.microsoft...;displaylang=en

'pe2' uses the older WAIK 2.0.

I'll look for any bugs that could be causing the problem.

Regards

[Filip Hasa]

Hi,

@allanf

i dont have problem with iso. i use E version.

I maded it some changes. can you implemented?!

How about automatic run of setresolution?

Problem with

@Galapo

setresolution seems work I can change color depth and set basic resolution but I cannot change resolution. See pictures.

There is problem with rescopy.exe file and bestres.exe.

Thank you for help

[Galapo]

@Galapo

setresolution seems work I can change color depth and set basic resolution but I cannot change resolution. See pictures.

There is problem with rescopy.exe file and bestres.exe.

I was thinking that would happen as those programs are not 64bit.

Seems like the dll calls work the same as you can set the low resolution and alter colour depth, so that's good.

If only I could get the same functions of reccopy and bestres internally into my code. There's this here: http://www.autoitscr...h...st&p=296523 and also this: http://msdn.microsof...771(VS.85).aspx

If only I was better at the dll stuff so that I could adapt the code...

Regards,
Galapo.

[Filip Hasa]

Some programs for both platforms by nirsoft

NIRSOFT

ProduKey - Recover lost product key (CD-Key) of Windows/MS-Office/SQL Server
http://www.nirsoft.n...ls/produkey.zip
http://www.nirsoft.n...rodukey-x64.zip

FileTypesMan - Alternative to 'File Types' manager of Windows
http://www.nirsoft.n...iletypesman.zip
http://www.nirsoft.n...ypesman-x64.zip

HeapMemView - View Process Heap Memory
http://www.nirsoft.n...heapmemview.zip
http://www.nirsoft.n...memview-x64.zip

Network Password Recovery - Recover Windows XP/Vista network passwords
http://www.nirsoft.n...ils/netpass.zip
http://www.nirsoft.n...netpass-x64.zip

ShellExView - Shell Extension Manager For Windows
http://www.nirsoft.n...ls/shexview.zip
http://www.nirsoft.n...hexview-x64.zip

DriverView: List all device drivers currently loaded on your Windows
http://www.nirsoft.n.../driverview.zip
http://www.nirsoft.n...verview-x64.zip

WirelessKeyView: Recover lost wireless network key
http://www.nirsoft.n...lesskeyview.zip
http://www.nirsoft.n...keyview-x64.zip

LSASecretsView - View LSA secrets stored on your computer
http://www.nirsoft.n...secretsview.zip
http://www.nirsoft.n...etsview-x64.zip

RegScanner Tool: Alternative to RegEdit find/search of Windows
http://www.nirsoft.n.../regscanner.zip
http://www.nirsoft.n...scanner-x64.zip

CurrPorts: View Opened TCP/IP ports / connections on Windows
http://www.nirsoft.n...tils/cports.zip
http://www.nirsoft.n.../cports-x64.zip

OpenCloseCD
http://www.nirsoft.n...osecdplugin.zip
http://www.nirsoft.n...dplugin-x64.zip

SysExporter
http://www.nirsoft.n...tils/sysexp.zip
http://www.nirsoft.n.../sysexp-x64.zip

DLL Export Viewer
http://www.nirsoft.n...tils/dllexp.zip
http://www.nirsoft.n.../dllexp-x64.zip

[Filip Hasa]

@allnaf

WOW32.dll
http://www.911cd.net...tart=#entry8612

but i think you cannot run 16bit applications on winpe x86.

[Filip Hasa]

If only I was better at the dll stuff so that I could adapt the code...

It's pity. I cannot help you I don't understent API of dll at all ;o(

[allanf]

@Galapo,

I am now getting a memory access violation when trying to start SetResolution x86 normally. And a 'second-chance exception' error in Dependecy Walker when profiling it. Last time I saw one of those was trying to implement IE7 in VistaPE before others like 2acd had success.


@Filip,

I have implemented the corrections you have provided.

I thank you for your research and continued interest in this project. Do you think that the Nirsoft programs can be implemented as a suite - to try to keep the programs-listings short? Can you do it?

My TODO list hasn't reduced in a few days - actually growing rapidly. I need to fix the 'Set Path' for programs when using cmd; maybe move FreeCommander and Opera onto the selectable programs-list; possibly make a function to create the different types of shortcuts, etc, etc

Changes to attached .002f:

Removed space from 'cmd.exe Shell'
Removed old programs from x64 Programs Interface
Added individual selection of Process Explorer - flagship of SysInternals. (Disabled if the Suite is selected... untested.)
For all programs, added 'Set Path' when cmd selected ... it's only setting path to x:\..., not working for external media...
Added SetResolution with shortcut.
Added some text to top of Programs Lists.




beta:


Regards

[Galapo]

@Galapo,

I am now getting a memory access violation when trying to start SetResolution x86 normally. And a 'second-chance exception' error in Dependecy Walker when profiling it. Last time I saw one of those was trying to implement IE7 in VistaPE before others like 2acd had success.

Is the version you're testion v.2.0? I'll have to look into this and do a few tests. It could be due to the change requested by MedEvil of (trying?) to run the program with a higher priority. I could alter this so it does not run like this under PE if that's the issue.

Regards,
Galapo.

[Galapo]

I uploaded a new version where in order to set process priority to 'high' the commandline paramter '-high' needs to be specified. Hopefully this fixes your issue. I was unable to replicate it under LiveXP.

Regards,
Galapo.

[allanf]

I uploaded a new version where in order to set process priority to 'high' the commandline paramter '-high' needs to be specified. Hopefully this fixes your issue. I was unable to replicate it under LiveXP.

Regards,
Galapo.

I downloaded and used v.2.2. The problem has now gone. If you didn't change anything between my first and second reports (v.2.0), the issue may have been a dependency on one of the WinPE Packages - HTA, XML, WMI, etc - or something else that I may have changed between builds. I'll let you know if it happens again.

Thanks

[Galapo]

OK. I think it's good to have the option of setting a higher process priority or not and your issue promted that so thanks.

Regards,
Galapo.

[Filip Hasa]

hi,

added some nirsoft stuff. Only which has amd64 binnaries as well. May be next step will be only x86 stuff.
added 7-zip
changes links for "Forensic Acquisition Utilities" and delete useless folder for differnt platform.


in future propably we will compile amd64 winpe only on x64 system becouse installation packages MSI (like 7-zip)

BUG:
mbrwiz after start is blank, i need press enter to see help

see changes in attachment:

[allanf]

added some nirsoft stuff. Only which has amd64 binnaries as well. May be next step will be only x86 stuff.
added 7-zip
changes links for "Forensic Acquisition Utilities" and delete useless folder for differnt platform.

Filip,

You have done a very good job. I have combined your work with my own recent work. Thank you very much!







Changes from me:

A new Winbuilder Variable, 'TargetPath_Cmd' determined if Shell is cmd or another. Applied for making shortcuts ('TargetPath_Cmd=DriveLetter.cmd), or for setting paths (SetPath.cmd). Same syntax for both, although only #3 argument - path and filename, without drive letter - is needed for SetPath.cmd

SetPath.cmd for the cmd shell will list in cmd Window all installed programs at boot.

Note: Spybot breaks the whole startnet.cmd because of '&' in default pathname - '... Search & Destroy\'... needs fixing! EDIT: Clarification - only breaks startnet.cmd when Shell is cmd and SetPath.cmd runs at startup. OK with other Shells.

Note: I changed my 'pe2ArchiveDr\FastStone Capture\' to remove the space, and adjusted the script... I don't remember why? Please do the same to your folder -'FastStoneCapture\' without a space.

in future propably we will compile amd64 winpe only on x64 system becouse installation packages MSI (like 7-zip)

I didn't try to build the amd64 WinPE, yet. It won't work on my x86? How about the zip downloads?

BUG:
mbrwiz after start is blank, i need press enter to see help

Yes. Bug with mbrwiz ... it will not take the default shortcut parameter '/?|more' when the shortcut is set up from DriveLetter_2.cmd. Maybe need another DriveLetter_x.cmd with simply '/?'. One PE Tool is the same, I think.

Best Regards

[Galapo]

It's pity. I cannot help you I don't understent API of dll at all ;o(

Hi Filip,

I haven't given up just yet. I've posted appeals for help here and here but unfortunately no response as yet.

In the meantime, I'm curious to know if vmdetect runs under 64bit: http://www.offensive...14/vmdetect.exe. Can you test that for me and report?

Thanks,
Galapo.

[Galapo]

Well, thanks to rasim's post here, I'm able to obtain a list of supported resolutions directly from the windows api. As such, SetResolution now does not need rescopy.exe or bestres.exe. Hopefully, this means the 64bit version now works properly: http://galapo.boot-l...OLUTION-X64.exe.

Regards,
Galapo.

[Filip Hasa]

Hi allanf,

Yes. Bug with mbrwiz ... it will not take the default shortcut parameter '/?|more' when the shortcut is set up from DriveLetter_2.cmd. Maybe need another DriveLetter_x.cmd with simply '/?'. One PE Tool is the same, I think.

mbrWIZ FIX: you can run > MBRWiz /? && echo.| more ;o)
it is better then write new script ;o)

Can you replace?
If,ExistFile,"%pe2ArchiveDir%\SetResolution-x64.exe",FileCopy,"%pe2ArchiveDir%\SetResolution-x64.exe","%TargetDir%\Windows\System32"
by
If,ExistFile,"%pe2ArchiveDir%\SetResolution-x64.exe",FileCopy,"%pe2ArchiveDir%\SetResolution-x64.exe","%TargetDir%\Windows\System32\SetResolution.exe"

My idea is all binaries will have same name not depend on platform. They cannot be in one folder.

why don't you want delete directory of another platform in FAU section?

I didn't try to build the amd64 WinPE, yet. It won't work on my x86? How about the zip downloads?

Sorry my mistake. I thought you cannot do admin install of amd64 packages like 7-zip on x86 system. You can do.
I use winbuilder on win 2003 - x86 as well.

A new Winbuilder Variable, 'TargetPath_Cmd' determined if Shell is cmd or another. Applied for making shortcuts ('TargetPath_Cmd=DriveLetter.cmd), or for setting paths (SetPath.cmd). Same syntax for both, although only #3 argument - path and filename, without drive letter - is needed for SetPath.cmd

SetPath.cmd for the cmd shell will list in cmd Window all installed programs at boot.

Greate idea. How about some parametr? like with mbrwiz

xp-read-key is not needed because produkey by nirsoft can do it ( tested on vista ;o)

portableapps.com you can extract by switch /S. But I didn't find where will be it extract by default ( propably on same disk in directory \PortableApps\{application}Portable)
but it useless for amd64 ;o(

We can do it ;o)

[Filip Hasa]

Hi Filip,

I haven't given up just yet. I've posted appeals for help here and here but unfortunately no response as yet.

In the meantime, I'm curious to know if vmdetect runs under 64bit: http://www.offensive...14/vmdetect.exe. Can you test that for me and report?

Thanks,
Galapo.

Hi Galapo,

i didnt get error, but I cannot change resolution to another resolution then 640 x 480. I tried only in ESX server under conosole. I will try on realy machine later.

vmdetect is not 64 bit application

thanks filip

edit: i forgot screen:

[allanf]

why don't you want delete directory of another platform in FAU section?

Yes I do like all of your ideas. My msitake ... I think I changed the shortcut folder only, and not the actual program's folder? 'Copy-and-paste' error to try to keep the x86 and amd64 script co-ordinated... not easy! Your idea of renaming the executables... hmmmm... if every program had both x86 and x64, we could do away with a separate page??? All downloads and installations would be determined by 'pe21 Architecture'.

Should I update the scripts and post? ... or do you have them ready?

Regards:)