0xbadfca11

1. Add kernel32.lib to Ignore Specific Default Libraries.
   But don't remove kernel32.lib from Additional Dependencies.
2. Set Additional Dependencies to fileextd.lib;ntdll.lib;%(AdditionalDependencies).
   Order is important. fileextd.lib must come before kernel32.lib.
3. FileExtd.lib was not created with __declspec(dllimport) in mind. Need to take precautions against the _imp__ symbol.
   Do either.
   • #define WINBASEAPI before #include <windows.h>. Although this is easy, keep in mind that it affects the entire source file.

• Override __imp__SetFileInformationByHandle@16 using assembly.

0xbadfca11

This article is no longer updated

Please see other gists for updated information. https://gist.github.com/XenoPanther/15d8fad49fbd51c6bd946f2974084ef8

0xbadfca11

• ゲストでsdelete -z→シャットダウンして→Optimize-VHD -Mode Prezeroed
• ホストでMount-VHD→sdelete -z→Dismount-VHD→Optimize-VHD -Mode Prezeroed

これらは時間と書き込み量を浪費しているだけだから今すぐ止めて
Mount-VHD <VHD> [-NoDriveLetter] -ReadOnly -Passthru | Optimize-VHD [-Mode {Quick|Full}] -Passthru | Dismount-VHD
を使うべき。

なんで？

読み取り専用でマウントしている時に Optimize-VHD をすればディスクイメージ内の NTFS から得られる空き領域情報を利用するから。

0xbadfca11

Summary

Windows Server 2016 ReFS driver crashes when trying to mount ReFS 3.4 that disguised ReFS 3.1.

Affect

• Windows Server 2016
  Tested with KB4483229 applied

Not affect

• Windows 10 v1809
• Windows Server 2019

How to crash

1. Boot from Install media of Windows 10 v1809.

0xbadfca11

#include <fenv.h>
#include <stdint.h>
#include <stdio.h>

extern "C" int64_t fto132proc(/* Passing by ST(0) */);

int main()
{
	double f = UINT32_MAX + 0.9;
	uint32_t h, l;

0xbadfca11

Not goal of this document

• Pass-through USB device as USB device.

Goal of this document

• Using USB storage as pass-through disk.

USB-HDD and Windows To Go certified USB stick

This is easy.

Normal USB sticks

0xbadfca11

#define WIN32_LEAN_AND_MEAN
#define _ATL_NO_AUTOMATIC_NAMESPACE
#include <windows.h>
#include <atlbase.h>
#include <winternl.h>
#include <cstdio>
#include <cstdlib>
#pragma comment(lib, "ntdll")

#ifndef FILE_CS_FLAG_CASE_SENSITIVE_DIR

0xbadfca11

TL;DR Don’t use GetImageConfigInformation.

GetImageConfigInformation bug

GetImageConfigInformation is hard coded that the Image Config Directory is 64 bytes.
It will not work in most environments.
Don’t use GetImageConfigInformation. This API is waste.

GetImageConfigInformation Implementation

0xbadfca11

Summary

Windows ReFS driver crashes when enabling integrity streams of large file.

Affect

• Windows Server 2012
• Windows Server 2012 R2
• Windows Server 2016 (with ReFS 1.2)
• Windows 10 v1703 (with ReFS 1.2)

Not affect

• Windows Server 2016 (with ReFS 3.1)

0xbadfca11

EXPORTS
	WslLaunch