diderius6, please hide WinDBG reports to "spoiler" tag for much better reading this topic )

Zitat von daniel_k im Beitrag #2142

---

@Mov AX, 0xDEAD

1
2
3
4
 

If (LGreaterEqual (OSYS, 0x07D6))
{
	And (PDBM, 0xFFFFFFFFFFFFFFF9, PDBM) /* \_SB_.PCI0.XHC_.PDBM */
}
 

Instead of skipping the code, what do you think of changing the 64-bit value to a 32-bit one as the higher order part is ignored anyway in this operation?

1
 

And (PDBM, 0xFFFFFFF9, PDBM)
 

---

I played little with length IO range of IOTR at H110 MB (starting adress is always 0xFF00):
0 - OK, device disapear in DevManager
1<->0xA0 - OK
0xA0-0xE0 - Not tested
0xE0-0xFF - Conflict

so hooking of BufferOp is possible, after movsd & movsb we have at EDI struct of bytes:
11 0D 0A 0A 47 01 00 00 00 00 01 FF 79 00

pseudo-code:
sub edi, 0xe ; back edi to start of buffer
cmpl	[edi], 0x11 0D 0A 0A
jnz nopatch
cmpl	[edi+4], 0x47 01 00 00
jnz nopatch
cmpl	[edi+8], 0x00 00 01 FF
jnz nopatch
cmpw [edi+c], 0x79 00
jnz nopatch
patch:
moveb [edi+b], 0x00 ; edi+b=length
nopatch: jmp _back
 

im not sure about full bufer, maybe in edi will be only 0A 0A 47 01 00 00 00 00 01 FF 79 00

Zitat von diderius6 im Beitrag #2050

---

@Mov AX, 0xDEAD
Asrock fatal1ty z370 gaming k6 board

---

Zitat von daniel_k im Beitrag #2033

---

@Mov AX, 0xDEAD
Interesting that the ACPI.SYS 5048 does an additional check in CreateByteField which leads to a BSOD.
VISTA 5048

1
2
3
 

15ED4: BF080014C0                     mov          edi,0C0140008
15ED9: B8090014C0                     mov          eax,0C0140009
 
 

---

15F07: 4A                             dec          edx
15F08: 4A                             dec          edx
15F09: 7567                           jnz          000015F72
15F0B: 6683390F                       cmp          w,[ecx],00F 
 

at ip=15F0B EDX was decremented to 41+1+1+1+2+2=48h="H"
so _ValidateArgTypes was called with 2nd arg = pointer to string with "H" char inside

at winxp_5512 exist C, I, O, A, B, D, .. but not "H"
at vosta_5048 i see two calls with H "LoadTable" & "Unload" opcode, but we dont see this in dsdt, do double check about place of BSOD

.del

Zitat von daniel_k im Beitrag #2010

---

@Mov AX, 0xDEAD
2) Sorry, don't understand. You mean pop stack back in the original function itself or in the code after the call?

---

Zitat von daniel_k im Beitrag #1997

---

I'm trying to patch Vista beta 4008, which has one missing import, whose code is really simple.
Original:

1
2
 

3A129: E8920FFFFF                     call         HalConvertIdtToIrql
 

My patch:

1
2
3
4
5
6
7
 

3A129: E8E2610000                     call        40310
 
40310: 8B442404                       mov          eax,[esp][4]
40314: C1E804                         shr          eax,4
40317: 83C004                         add          eax,4
4031A: C20400                         retn         4 
 

---

dancing with IOTRAPS:
win7 x64, IO range = Only One adress 0xFF00


winxp 32 orig acpi.sys+acpi2.0 opcodes, IO range = Only One adress 0xFF00:


in both OS device manager show different range 0-254:

Zitat von diderius6 im Beitrag #1994

---

I tried to disable ACPI\PNP0C02\IOTRAPS
in registry of XP
and also in devicemanager (motherboard resources)
but without success.
May be, that can be done without modding DSDT

---