also with new PnP stack, we can probably expect much wider hardware support

also we can probably expect dmca takedown from MSFT bcuz github is now belong to MSFT and he's IDA-ing Windows Server 2003 checked build with debug symbols

So he just disassembles w2k3 PnP stack and implementing it via C code. Or I can't understand how he implements these Pi*() functions o_O

also we can probably expect dmca takedown from MSFT bcuz github is now belong to MSFT and he's IDA-ing Windows Server 2003 checked build with debug symbols

Is this confirmed information from him or anybody else?

Is this confirmed information from him or anybody else?

of course not

Or just your own assumptions? 🤔

I just can't understand HOW?

Or just your own assumptions? 🤔

yes

Is this confirmed information from him or anybody else?

we can probably

Well, there can be info about it in MSDN?

I'm not too sure

Well, there can be info about it in MSDN?

Some functions are in MSDN, some are NOT. And that's why I am thinking so.

well, that is suspicious

well, that is suspicious

PpDeviceRegistration()

https://github.com/vgalnt/reactos/commit/af4058800bd3088ac6c72a8ea6e7cfe768157678

Try to find THIS one

(taken from some chinesee blog that is researching WRK)

The only search results I can find are from WRK

The only search results I can find are from WRK

See?

I wish I understood russian damn

I wish I understood russian damn

Привет - Hello Пока - Goodbye Как дела? - How are you? Как тебя зовут? - What's your name?

well, legally speaking, if he hasn't seen it himself, but someone else has told him, MS can't do anything

Привет - Hello Пока - Goodbye Как дела? - How are you? Как тебя зовут? - What's your name?

I am bad Russain language teacher. But I somehow can understand English xD

like someone else has explained

well, legally speaking, if he hasn't seen it himself, but someone else has told him, MS can't do anything

Hmmm... okay...

But still strange, isn't it?

I am bad Russain language teacher. But I somehow can understand English xD

It's a good starting point to go off of.

That's deffinetely strange.

That's deffinetely strange.

https://www.cnblogs.com/ahuo/archive/2011/05/29/2062398.html this page containing a list of WRK functions. This is one and only place where you can find these functions. But not the code.

Can we trust this work?

It's really suspicious

Can we trust this work?

yes, bcuz he is russian, I am russian, we are russians (not in this chat ofc)

jk

It's really suspicious

it is

well, legally speaking, if he hasn't seen it himself, but someone else has told him, MS can't do anything

Well, I hope that his work was done in that way

There's zero information on Microsoft's own sites about this

and the naming is exact to WRK

well, legally speaking, if he hasn't seen it himself, but someone else has told him, MS can't do anything

... was told him, .... A Microsoft employee?

and the naming is exact to WRK

Names may come from MS's debugging symbols

and the naming is exact to WRK

Well that can be explained, he wants windows drivers to work in ReactOS. So he need to name functions like that's done in WRK.

I don't think we're allowed to do that if we're *clean* room reverse engineering.

Names may come from MS's debugging symbols

Hmm... yes... because WinDBG pdb server is public

Using IDA or anything else to reverse the PNP stack from Server 2003 would instantly fail the principles of contribution and ruin his credibility.

since it wasn't obtained in a clear way

Though, we shouldn't fearmonger until facts are presented.

Though, we shouldn't fearmonger until facts are presented.

Indeed

and it would be caught during review process anyways

Well that can be explained, he wants windows drivers to work in ReactOS. So he need to name functions like that's done in WRK.

Even if so, this is kernel mode PnP, which is a interface to user mode PnP

Kernel mode PnP isn't much talked about by Microsoft due to user mode interface being used by drivers

Kernel mode PnP isn't much talked about by Microsoft due to user mode interface being used by drivers

Well Galyant has not reached user-mode PnP

He is only modifying files in ntoskrnl folder right now)

and hal

He's doing kernel mode PnP, and it's not documented either due to driver developers having to use user-mode PnP

If you want, you can make an account in VK (russian social network) and write a message to him. Don't worry, it has English language, and you can register via Facebook.

He's doing kernel mode PnP, and it's not documented either due to driver developers having to use user-mode PnP

So you think replacing user-mode PnP will be faster than somehow replacing kernel-mode PnP?

I'm just saying that kernel-mode PnP isn't documented by Microsoft, and if he's getting exact namings of functions used there, it's even more suspicious

I'm just saying that kernel-mode PnP isn't documented by Microsoft, and if he's getting exact namings of functions used there, it's even more suspicious

https://www.cnblogs.com/ahuo/archive/2011/05/29/2062398.html - names of the WRK functions

But ONLY NAMES

Not their src

public documentation

not from WRK

public documentation

MSDN?

None in MSDN

not from WRK

Well, this site is public

legal public documentation*

WRK is not deemed legal for ReactOS

WRK is not deemed legal for ReactOS

You can ask Galyant himself "what docs he is reading?"

But you need to create a VK account. He doesn't have a Telegram profile

Well, you already have an account, you can do it right now

Well, you already have an account, you can do it right now

O_o how are you reading these functions? Are you just IDA-ing windows?

Already did, (blue light means he has not readed my message)

if he is IDA-ing, that means he's breaking the rules

and therefore his contributions can't be trusted

It'd be sad if that's the case.

It'd be sad if that's the case.

Also it'd be sad if he downloaded w2k or wrk src somewhere.

We need to wait for an answer

He was online 2hrs ago, last commit was also done 2hrs ago, maybe he is sleeping.

isn't it early?

isn't it early?

Well GMT is different