How-To Write a Slic-OEM driver x64 ( educational purpose only )

Discussion in 'Windows 7' started by secr9tos, Nov 24, 2009.

Thread Status:
Not open for further replies.
  1. Hazar

    Hazar MDL Guru

    Jul 29, 2009
    2,507
    456
    90
    lol not quite...

    need to make an inf for them
     
  2. tuvi123

    tuvi123 MDL Addicted

    Jul 29, 2009
    623
    86
    30
    secr9tos
    just some suggestion..
    a lot of user don't not know how to install the driver... it will be better if you will explain in detail on how to install the drivers in the first post, so more uers will be able to give feedback.
     
  3. PAYMYRENT

    PAYMYRENT MDL Developer

    Jul 28, 2009
    1,460
    420
    60
    lol or they could be lazy and download my app thats in the first post :p
     
  4. tuvi123

    tuvi123 MDL Addicted

    Jul 29, 2009
    623
    86
    30
    yes but it's not the Pre Final version..
    I will wait for your new version with the updated driver and the watermark remover..
    I know how to install the driver but I still want (and prefer) your one click program and want to test/see how it works.
     
  5. Mr Jinje

    Mr Jinje MDL Expert

    Aug 19, 2009
    1,770
    1,101
    60
    #105 Mr Jinje, Jan 25, 2010
    Last edited: Jan 25, 2010
    I know it was only a suggestion a few posts back, but there is a community of readers who do not trust any third party programmer (even ourselves) to inject any form of encrypted data into our boot sector or allow it kernel access. On top of that we also have to trust that the encryption does not include any root-kit which can be as small as 3Kb these days, and that is just not a risk some of us are willing to take.

    Please leave the option for some of us to use a non-encrypted non-random named file. That sort of protection doesn't work for trojan/malware, why do people assume it will work now, many of us believe it is a pointless endeavor. (even though every newb seems to thinks it's so important) Microsoft will stop your driver based on it's GUID and a simple recompile will be needed for each service pack. They do not need to prove the driver file contains anything, (encrypted or not), they just need to make the service pack not allow installation to a driver with matching GUID (globally unique identifier for the newbs)

    Check out rootkit.com or google the stoned bootkit for greater details.
     
  6. secr9tos

    secr9tos MDL Addicted

    Jul 28, 2009
    999
    133
    30
    #106 secr9tos, Jan 25, 2010
    Last edited: Jan 25, 2010
    (OP)
    created a simple tool for installing ( x86 & x64 ) and also fixed a bug in the 32-bit version so... happy testing.

    After the test stage I'll publish the source code so no one needs to be afraid of rootkits.. but if so, send me a PM or post here and I'll upload the current source code... same for installer tool.
     
  7. tuvi123

    tuvi123 MDL Addicted

    Jul 29, 2009
    623
    86
    30
    #107 tuvi123, Jan 25, 2010
    Last edited: Jan 25, 2010
    secr9tos
    the Pre final driver does not work for me ony my windows 7 pro x64 hebrew virtual machine.
    after I installled the driver with your tool, it does a system repair after restart (weird..)
    and then it show windows is not activated..
    btw-
    what is the SLIC in the driver?
    I want to manually install the correct cert to see if that is the problem.
    I have also tried paymyrent tool, same problem.

    also tested the x86 driver and it did not work with your tool on my windows 7 ultimate x86 vm..
    windows is not activated.
     
  8. secr9tos

    secr9tos MDL Addicted

    Jul 28, 2009
    999
    133
    30
    #108 secr9tos, Jan 25, 2010
    Last edited: Jan 25, 2010
    (OP)
    just take a look in the FAQ:

    The slic is acer2.1 since I own an acer machine but u can change it using PAYMYRENT's tool cause the slp is embedded.

    Btw.. can u post an RW-Everything or Slic Dump toolkit report for ur x86 system in case it does not work?
    Strange anyway 'cause I've tried the driver on two notebooks ( acpi1.0 - x86 & acpi2.0 -x64 ), VMware ( x86/x64 ) & VirtualBox ( x86/x64 ) and it works in all mentioned cases..
     
  9. tuvi123

    tuvi123 MDL Addicted

    Jul 29, 2009
    623
    86
    30
    #109 tuvi123, Jan 25, 2010
    Last edited: Jan 25, 2010
    secr9tos
    OK I installed the x64 driver again on my windows 7 pro x64 hebrew machine using your installer tool..
    and then I click yes to restart and I pressed F8 during boot to disable Driver Signature Enforcement.. (now it does not boot into repair mode)
    but my windows is still not activated..
    then I installed only acer cert and acer pro oemslp key manually, but windows is still not activated (+windows not genuine watermark).
    so I guees it's some problem with the driver..
     
  10. secr9tos

    secr9tos MDL Addicted

    Jul 28, 2009
    999
    133
    30
    So it's time to post an report... do u have RW-Everything or Slic Dump toolkit...?
     
  11. tuvi123

    tuvi123 MDL Addicted

    Jul 29, 2009
    623
    86
    30
  12. secr9tos

    secr9tos MDL Addicted

    Jul 28, 2009
    999
    133
    30
    #112 secr9tos, Jan 25, 2010
    Last edited: Jan 25, 2010
    (OP)
    Thanks, I'll try to analyze and fix...

    EDIT:

    lol. two problems I've discovered so far.:D

    1. RSDT base address + length = 0x55AF08D1 + 0x38 ( == 56 ) = 0x55AF0909 so there is no space to append another ptr!!

    2. is this pic when the driver is applied or not?? If no the driver fails cause in case no space is available for another ptr it will make free space ( gathering the lowest table and realloc )... but this won't work in this case.. hehe this is funny^^
     
  13. tuvi123

    tuvi123 MDL Addicted

    Jul 29, 2009
    623
    86
    30
    :D
    so what should I do?

    how do I check it?
    I have installed the driver with your tool and disable the Driver Signature Enforcement.
    (when I re-run your tool, it only offer me an option to uninstall the driver).
     
  14. secr9tos

    secr9tos MDL Addicted

    Jul 28, 2009
    999
    133
    30
    Can u please uninstall the driver, reboot and run slic dump toolkit again -> post screen? would be very kind of u...:) 'cause I think I know where the problem is ...:D
     
  15. PAYMYRENT

    PAYMYRENT MDL Developer

    Jul 28, 2009
    1,460
    420
    60
    secr9tos are the drivers with your tool even signed?
     
  16. secr9tos

    secr9tos MDL Addicted

    Jul 28, 2009
    999
    133
    30
    no cause x86 does not require signing and for testing on x64 press F8 at bootup and select "Disable Driver Signature Enforcement"
     
  17. secr9tos

    secr9tos MDL Addicted

    Jul 28, 2009
    999
    133
    30
  18. secr9tos

    secr9tos MDL Addicted

    Jul 28, 2009
    999
    133
    30
    K I just need to remove some useless stuff from the code sample ( slic patch and such stuff ). Well with this sample u are able to edit PCI bus 0 - 255, Dev 0 - 31 & Func 0 - 7. just wait a little bit..