38 replies to this topic

[phox]

I have managed to download XP SP3 and slipstreamed it with nLite.

When I have used new XPProSP3 as a source, 3 - hivesFactory.Script
has generated three errors:  log.zip   146.78KB   555 downloads

Build works OK in qEmu!

[TheHive]

Did you notice it using less RAM, faster, or any different from SP2.

[phox]

Did you notice it using less RAM, faster, or any different from SP2.

I didn't have time for detailed testing, but will do and report.

[phox]

I didn't have time for detailed testing, but will do and report.

It is faster processing (10%) and build is slightly bigger (1%)!

[phox]

Detailed test with XPProSP3 as a source:

1. Constant report for three errors, but build works OK:

RegWrite - root key: [HKLM] Type: [0x4] Section [WB-Software\Microsoft\Windows\CurrentVersion\MSSHA] key [PollingDuration=20..]

  RegWrite - Failed to write REG key in root key: [HKLM] Type: [0x4] Section [WB-Software\Microsoft\Windows\CurrentVersion\MSSHA] key [RemediationCheck=0F..]

  RegWrite - root key: [HKLM] Type: [0x4] Section [WB-Software\Microsoft\Windows\CurrentVersion\MSSHA] key [RemediationTimeout=96..]

  RegWrite - Failed to write REG key in root key: [HKLM] Type: [0x4] Section [WB-Software\Microsoft\Windows\CurrentVersion\MSSHA] key [ScanInterval=3C..]

  RegWrite - root key: [HKLM] Type: [0x4] Section [WB-Software\Microsoft\Windows\CurrentVersion\MSSHA] key [ScanStartsAfterInterval=23..]

  RegWrite - Failed to write REG key in root key: [HKLM] Type: [0x4] Section [WB-Software\Microsoft\Windows\CurrentVersion\MSSHA] key [WuStopTimeOut=3C..]

2. To work correctly, PENetwork.script version 25 needs dot3api.dll!?

3. Selection of setupreg.hiv in regCompact.Script freeses build after Boot spash.

 log.zip   185.82KB   392 downloads

[phox]

@Peter,
@Galapo.

After detailed testing of LiveXP with XPProSP3 source,
I found out, that only way to make workable build
is to replace PENetwork.Script version 25 with version 22
and autoUPX.Script version 20 with version 16.

All other combination give some kind of a problem
(see earlier posts).

[pscEx]

@Peter,
@Galapo.

After detailed testing of LiveXP with XPProSP3 source,
I found out, that only way to make workable build
is to replace PENetwork.Script version 25 with version 22
and autoUPX.Script version 20 with version 16.

All other combination give some kind of a problem
(see earlier posts).

@Phox

I tried with nativeEx_barebone and SP3 German.

I got similar error messages like you.

But that does not prohibit a bootable and running PE.

The RegWrite errors are caused by a registry DWORD entry which is not a number (as the WinBuilder syntax demands) but a sequence of 4 hex bytes:"3C","00","04","00" and similar.
These entries are SP3 - new for some network securities, but currently in the PE not needed and not used.
(I'm looking whether I can extend WinBuilder's RegWrite function to accept this new input format.)

The PENetwork error messages have the same origin: When PENetwork starts the network functionality, some security addons are started internally. But these addons are not on the PE.
No worry, the network runs in the same functionality you are familar with.

UPX: On my system, version 20 does not bring any issue.

regCompact: No issue on my system

Peter

[Holger]

Hello Phox,

you could try my PENetwork-Beta-script from this march:
http://www.holger.bo...etwork_Beta.zip

I did insert some SP3 (beta) things.
I did not a test under final release SP3 but just give it a try.

Greets
Holger

[pscEx]

Hello Phox,

you could try my PENetwork-Beta-script from this march:
http://www.holger.bo...etwork_Beta.zip

I did insert some SP3 (beta) things.
I did not a test under final release SP3 but just give it a try.

Greets
Holger

On my system the build with XP SP3 German runs like a charm in VirtualBox.

Of course, in this short time I did not test a lot.
But PENetwork comes up w/o the errors reported by Phox, and I have internet connection.



Peter

[phox]

Hello Phox,

you could try my PENetwork-Beta-script from this march:
http://www.holger.bo...etwork_Beta.zip

I did insert some SP3 (beta) things.
I did not a test under final release SP3 but just give it a try.

Greets
Holger

Thank you Holger!

After first go, it reported missing file:


and on second go it asked for atl.dll

After adding it, your beta script works OK!

[pscEx]

Thank you Holger!

After first go, it reported missing file:


and on second go it asked for atl.dll

After adding it, your beta script works OK!

@Phox:

Your post surprises me, because I did not have had any troubles with those files.

Can you PM me your log? I think that it is not so interesting for the forum to be posted here.

Peter

[phox]

UPX: On my system, version 20 does not bring any issue.

regCompact: No issue on my system

Peter

UPX version 20 generates 10MB bigger build and ends up with endless rebooting!

regCompact works correctly only when setupreg.hiv is not selected!

[pscEx]

UPX version 20 generates 10MB bigger build and ends up with endless rebooting!

regCompact works correctly only when setupreg.hiv is not selected!

Strange!
Same question like my previous post: Please PM me the log.

Peter

[Galapo]

After first go, it reported missing file:

and on second go it asked for atl.dll

From memory, I think those errors occur if you have deselected "Copy network CMDline tools". Probably this requires fixing in the script as you should be able to deselect the option without being presented with the error messages.

Regards,
Galapo.

[phox]

From memory, I think those errors occur if you have deselected "Copy network CMDline tools". Probably this requires fixing in the script as you should be able to deselect the option without being presented with the error messages.

Regards,
Galapo.

Yes, you are right!

For some reason those files are needed when "Copy network CMDline tools"
is not selected, but they are not included in general "CopyOrExpand" section.

[paraglider]

@psc if you are extending the registry syntax can you add support for all registry value types, support for appending / prepending to reg_multi_sz values, support for values of zero length, hex binary strings for all value types? The hex binary strings option would be useful to set none string values in reg_sz, reg_expand_sz and reg_multi_sz values.

[pscEx]

@psc if you are extending the registry syntax can you add support for all registry value types, support for appending / prepending to reg_multi_sz values, support for values of zero length, hex binary strings for all value types? The hex binary strings option would be useful to set none string values in reg_sz, reg_expand_sz and reg_multi_sz values.

To code this is rather easy. But I have a question which I could not solve by googleing:

Input e.g. "aa","bb","cc","dd"

What is the DWORD result?

• 0xaabbccdd
• 0xbbaaddcc
• 0xccddaabb
• 0xddccbbaa

Peter

[paraglider]

If you have a 4 byte buffer then "AA","BB","CC","DD" would be written AA to the first byte then BB to the second etc. So on a little endian machine this results in the integer containing DDCCBBAA.

[Brito]

Registry 0x4 value is a simple number (DWORD type) that delphi can handle very well and write back in correct binary format, you shouldn't need to worry about byte-per-byte write for 0x4.


Here is the code in delphi that I use to interpret value data for all value types.

Procedure TRegistryValue.Decode (RawFile : TFileStream; Position: DWORD);         // output value data in readable format         var             i         : Integer;             TempByte  : Array of BYTE;             TempInt   : Int64;           begin                    // let&#39;s process data                    Rawfile.Position := DataPosition;                     Case ValueType                        of                          $0 :        // 0x0 = None                               begin                               DataOutPut := &#39;<Empty>&#39;;                               DataInput  := &#39;&#39;;                               end;                          $1,$2 : begin  // 0x1 = String   // 0x2 = Expand Variable String                               DataOutPut := &#39;&#39;;                               SetLength(TempByte, ValueDataSize);                               RawFile.Read(TempByte[0], ValueDataSize);                                for i := 0 to ValueDataSize                                   do // this is not UNICODE aware and only supports ASCII                                    If not Odd(i)                                      then DataOutPut := DataOutPut + Chr(TempByte[i]);                                      DataInput := DataOutput                                end;                          $3 : begin  // 0x3 = Binary                               DataOutPut := &#39;&#39;; // working good                               SetLength(TempByte, ValueDataSize);                               RawFile.Read(TempByte[0], ValueDataSize);                               for i := 0 to ValueDataSize -1 do                                DataOutPut := DataOutPut + &#39; &#39; + IntToHex(TempByte[i],2);                               end;                          $4 :  // 0x4 = DWORD                                begin  // working good                                RawFile.Read(i, 4);                                DataInput  := intToStr(i);                                DataOutput := DataInput+&#39; (0x&#39;+IntToHex(i,8)+&#39;)&#39;;                                end;                          $5 :  // 0x5 = REG_DWORD_LITTLE_ENDIAN                                begin                                   SetLength(DataOutPut, 4);                                   // Not Tested!                                   DataOutPut := CopyData (RawFile, 4);                                   DataInput  := IntToStr(HexToInt(DataOutPut));                                   DataOutput := DataInput+&#39; (0x&#39;+DataOutPut+&#39;)&#39;;                                end;                          $6 :  // 0x6 = REG_LINK (world famous reg link that is *only* created with windows API..)                                begin                                  DataOutput := &#39;<Not Supported>&#39;;                                end;                          $7 :  // 0x7 = REG_MULTI_SZ                                // not supporting UNICODE (yet)                                // 4 initial bytes are size                                // each letter is followed by 00 (just like Unicode)                                // the sequence ends when there is at least a 00 00 00 00                                // !!!!! --> this is limited to ASCII data                               begin                                 if DataLocation = $8000                                   then RawFile.Position := RawFile.Position + 4; // skip the size                               DataOutPut := &#39;"&#39;;                               SetLength(TempByte, ValueDataSize - 4);                               RawFile.Read(TempByte[0], ValueDataSize - 4);                               for i := 0 to ValueDataSize - 4                                do                                 begin                                     if (TempByte[i] > 32) and (TempByte[i] < 127)                                          then DataOutPut := DataOutPut + Chr(TempByte[i]);                                     if (TempByte[i]=$00)and(TempByte[i+1]=$00)                                      and (TempByte[i+2]=$00)and(TempByte[i+3]=$00)                                      then begin                                              DataOutPut := DataOutPut + &#39;"&#39;;                                              break;                                           end;                                     if (TempByte[i]=$00)and(TempByte[i+1]=$00)and(TempByte[i+2]=$00)                                      then DataOutPut := DataOutPut + &#39;","&#39;;                                  end; // for                                  if Length(DataOutPut) = 1 then DataOutPut := &#39;&#39;; // remove the " added on top                                  DataInput := DataOutPut;                                 end;                          $8, $9, $A  :  // 0xA = REG_RESOURCE_REQUIREMENTS_LIST                                  begin                               DataOutPut := &#39;&#39;; // working good                               SetLength(TempByte, ValueDataSize);                               RawFile.Read(TempByte[0], ValueDataSize);                               for i := 0 to ValueDataSize -1 do                                DataOutPut := DataOutPut + &#39; &#39; + IntToHex(TempByte[i],2);                                DataInput := DataOutput;                                   end;                          $0B :  // 0x7 = REG_QWORD                                begin  // working good                                  RawFile.Read(TempInt, SizeOf(TempInt));                                  DataInput  := IntToStr(TempInt);                                  DataOutPut := DataInput + &#39; (0x&#39;+IntToHex(tempInt,16)+&#39;)&#39;;                                 end;                        else                         DataOutput := &#39;<Not Recognized>&#39;;                         DataInput := &#39;&#39;;                       end;           end;

I think you can create a new value key, define the type and write raw data to it, this snippet should help to understand how it can be correctly written back in binary format.

The code still needs some tests to support unicode - under delphi I think widechars or a widestring could be used but I haven't yet tried it out.

[robinj]

I have been playing with LiveXP and SP3. Build seems to work fine and with Holgers revised script, networking (Ghost multicasting) works better than with SP2.

One flaw I seem to have found is that drag and drop copying seems to be broken. Cannot locate a reason for this. It shows as enabled in the Start Menu, but beyond that, I don't really know where to look.

Robin

[pscEx]

Today I found an issue with SP3 (at least German):

On trying to start, aLL MMC apps show the error message 'Access denied' and do not start.

That happens with 074 as well as with 075 beta 1

Peter

[nikzzzz]

Today I found an issue with SP3 (at least German):

On trying to start, aLL MMC apps show the error message 'Access denied' and do not start.

That happens with 074 as well as with 075 beta 1

Peter

The same problem arose at assemblage Win 2003 (Russian)

Regards,
Nikzzzz.

[pscEx]

Today I found an issue with SP3 (at least German):

On trying to start, aLL MMC apps show the error message 'Access denied' and do not start.

That happens with 074 as well as with 075 beta 1

Peter

MMC scripts run from XP SP3, if FIPS.Script version 2 is included.

Peter

[paraglider]

Don't think the problem its necessarily a problem with SP3. I use XP + SP3 ( US English ) as the source for my BartPE XPE CD. Computer Management / Services / Disk Management all work ok.

[pscEx]

Don't think the problem its necessarily a problem with SP3. I use XP + SP3 ( US English ) as the source for my BartPE XPE CD. Computer Management / Services / Disk Management all work ok.

You are right that it is not necessaryly an issue of SP3.

But it is an issue of 'same WB project using SP2 or SP3'

In my opinion the problem is caused by a certain (unknown) registry constellation (built by the project) which causes SP3 files to do some things which are not done in SP2.

And here some Crypt functionality by FIPS.Script helps.

Voodoo?

Peter