I am trying to create an extended kernel for NT4

The Windows XP before Windows XP.
Post Reply
User avatar
WIN2000WARRIOR
 

Posts: 30
Joined: 18 Oct 2021, 06:34
Has thanked: 13 times
Been thanked: 16 times
France

I am trying to create an extended kernel for NT4

Post by WIN2000WARRIOR »

I'm trying to create an extended kernel for NT4, but I'm having trouble finding the real base Address :(.
The reason for searching for the new base address I know is because I got this error after adding function:


I was able to get Memory.dmp by running nt4 on an old real computer but I couldn't find the real base Address. I tried entering the base address ollyDumpEX specified for me but it didn't work :



but the error changed :



kernel32 can not relocate address, so if i move it to the working address , it goes BSoD , at first , kernel32 use critial base address, so it goes BSoD suddenly. at next kernel32 use bad base address so it tried to move address , but kernel32 does not allow relocate address , so it shows such BSoD.

I think the range of the addresses not to use for Kernel32.dll.

Dealing with NT4 is difficult and it is not as easy to handle with it unlike 2000 and XP. But I am really surprised how junior600 in MSFN finds the real base Address .

He was saying he's working on CFFexplorer like I do !
Windows 2000 Warrior
User avatar
roytam1
Developers
 

Posts: 3
Joined: 09 Mar 2022, 10:35
Been thanked: 4 times
Hong Kong

Re: I am trying to create an extended kernel for NT4

Post by roytam1 »

User avatar
WIN2000WARRIOR
 

Posts: 30
Joined: 18 Oct 2021, 06:34
Has thanked: 13 times
Been thanked: 16 times
France

Re: I am trying to create an extended kernel for NT4

Post by WIN2000WARRIOR »

roytam1 wrote: 19 Mar 2022, 08:52 /me remembers this:
https://msfn.org/board/topic/176748-windows-nt-40-api-wrapper/
Hi roytam1, thank you for trying to help me, I read this article and Junior600 never mentioned this problem.
I suspect that the new section should be before .reloc because when creating a new section ".xdata" in my case, the ntdll.dll clause is broken meaning that the ntdll.dll it needs to be relocated. Who knows an app that can create a new section before .reloc section
Windows 2000 Warrior
User avatar
Ximonite
Kernel Extenders
 

Posts: 14
Joined: 18 Jun 2021, 21:46
Location: ntoskrnl.exe
Has thanked: 8 times
Been thanked: 26 times
Contact:
United States of America

Re: I am trying to create an extended kernel for NT4

Post by Ximonite »

WIN2000WARRIOR wrote: 19 Mar 2022, 10:12
roytam1 wrote: 19 Mar 2022, 08:52 /me remembers this:
https://msfn.org/board/topic/176748-windows-nt-40-api-wrapper/
Hi roytam1, thank you for trying to help me, I read this article and Junior600 never mentioned this problem.
I suspect that the new section should be before .reloc because when creating a new section ".xdata" in my case, the ntdll.dll clause is broken meaning that the ntdll.dll it needs to be relocated. Who knows an app that can create a new section before .reloc section
PETool by WildBill can add a section before .rsrc and .reloc
Post Reply

Users browsing this forum: No registered users and 2 guests