Disable PatchGuard & Driver Signing

[Gelip]

How patch winload.efi instead winload.exe from Win7 SP1 ?

Edited
=====
OK, I make second mk_bcdentry_UEFI.cmd script for UEFI:

ECHO OFF

ECHO.
ECHO Copy of required files...
ECHO.

set PATCHTEMP=%CD%
cd %PATCHTEMP%
echo y | copy %WINDIR%\SYSTEM32\winload.efi %PATCHTEMP%\osloader.efi
echo y | copy %WINDIR%\SYSTEM32\ntoskrnl.exe %PATCHTEMP%\ntkrnlmp.exe

set OLD_GUID={46595952-454E-4F50-4747-554944FFFFFF}
set ENTRY_GUID={46595952-454E-4F50-4747-554944FEEEEE}

ECHO.
ECHO Delete BCD Entries, if existing...
bcdedit -delete %ENTRY_GUID%
bcdedit -delete %OLD_GUID%
ECHO.

ECHO.
ECHO Creating BCD Entry...
ECHO.

bcdedit -create %ENTRY_GUID% -d "PatchGuard Disabled v3" -application OSLOADER
bcdedit -set %ENTRY_GUID% device partition=%SYSTEMDRIVE%
bcdedit -set %ENTRY_GUID% osdevice partition=%SYSTEMDRIVE%
bcdedit -set %ENTRY_GUID% systemroot \Windows
bcdedit -set %ENTRY_GUID% path \Windows\system32\osloader.efi
bcdedit -set %ENTRY_GUID% kernel ntkrnlmp.exe
bcdedit -set %ENTRY_GUID% recoveryenabled 0
bcdedit -set %ENTRY_GUID% nx OptIn
bcdedit -set %ENTRY_GUID% nointegritychecks 1
bcdedit -set %ENTRY_GUID% inherit {bootloadersettings}

bcdedit -displayorder %ENTRY_GUID% -addlast
bcdedit -timeout 10

ECHO.
ECHO Setting PEAUTH service to manual... (avoid BSOD at login screen)
ECHO.
sc config peauth start= demand

ECHO.
ECHO Calling patcher!  Please press "Patch", next "Exit" before continue here...
ECHO.
%PATCHTEMP%\no_ds_pg.exe
ECHO.
ECHO.

ECHO.
ECHO Copy of required files...
ECHO.
echo y | copy %PATCHTEMP%\osloader.efi %WINDIR%\SYSTEM32\osloader.efi
echo y | copy %PATCHTEMP%\ntkrnlmp.exe %WINDIR%\SYSTEM32\ntkrnlmp.exe
ECHO.

ECHO.
ECHO Process complete.  Upon reboot system and select "PatchGuard Disabled v3".
ECHO.

pause

You need select file osloader.efi to patch manually. Tested on Win7 SP1 17514

[Fyyre]

Hi Gelip!

Did this work for you? If so -- wonderful! =)

I will note:

hFiref0x and I created UPGDSED based on my "disable PG/DS" idea and research.

I'm not sure if you tried using it... it should still work fine, although the project is no longer updated.

Perhaps someone released a more modern way to disable DSE and PatchGuard? However I am unfamiliar with what alternatives are.

Be well!
-Fyyre

Originally Posted by Gelip

How patch winload.efi instead winload.exe from Win7 SP1 ?

Edited
=====
OK, I make second mk_bcdentry_UEFI.cmd script for UEFI:

ECHO OFF

ECHO.
ECHO Copy of required files...
ECHO.

set PATCHTEMP=%CD%
cd %PATCHTEMP%
echo y | copy %WINDIR%\SYSTEM32\winload.efi %PATCHTEMP%\osloader.efi
echo y | copy %WINDIR%\SYSTEM32\ntoskrnl.exe %PATCHTEMP%\ntkrnlmp.exe

set OLD_GUID={46595952-454E-4F50-4747-554944FFFFFF}
set ENTRY_GUID={46595952-454E-4F50-4747-554944FEEEEE}

ECHO.
ECHO Delete BCD Entries, if existing...
bcdedit -delete %ENTRY_GUID%
bcdedit -delete %OLD_GUID%
ECHO.

ECHO.
ECHO Creating BCD Entry...
ECHO.

bcdedit -create %ENTRY_GUID% -d "PatchGuard Disabled v3" -application OSLOADER
bcdedit -set %ENTRY_GUID% device partition=%SYSTEMDRIVE%
bcdedit -set %ENTRY_GUID% osdevice partition=%SYSTEMDRIVE%
bcdedit -set %ENTRY_GUID% systemroot \Windows
bcdedit -set %ENTRY_GUID% path \Windows\system32\osloader.efi
bcdedit -set %ENTRY_GUID% kernel ntkrnlmp.exe
bcdedit -set %ENTRY_GUID% recoveryenabled 0
bcdedit -set %ENTRY_GUID% nx OptIn
bcdedit -set %ENTRY_GUID% nointegritychecks 1
bcdedit -set %ENTRY_GUID% inherit {bootloadersettings}

bcdedit -displayorder %ENTRY_GUID% -addlast
bcdedit -timeout 10

ECHO.
ECHO Setting PEAUTH service to manual... (avoid BSOD at login screen)
ECHO.
sc config peauth start= demand

ECHO.
ECHO Calling patcher!  Please press "Patch", next "Exit" before continue here...
ECHO.
%PATCHTEMP%\no_ds_pg.exe
ECHO.
ECHO.

ECHO.
ECHO Copy of required files...
ECHO.
echo y | copy %PATCHTEMP%\osloader.efi %WINDIR%\SYSTEM32\osloader.efi
echo y | copy %PATCHTEMP%\ntkrnlmp.exe %WINDIR%\SYSTEM32\ntkrnlmp.exe
ECHO.

ECHO.
ECHO Process complete.  Upon reboot system and select "PatchGuard Disabled v3".
ECHO.

pause

You need select file osloader.efi to patch manually. Tested on Win7 SP1 17514

[Gelip]

Originally Posted by Fyyre

Hi Gelip!
Did this work for you? If so -- wonderful! =)

Yes, but Win7 must be activate or work only 30 day from fresh install OS. I test driver signing BeepXP:

Normal boot - digital signature error (service beepxp not running)
https://i.ibb.co/YpYgg7z/normal-boot.png
PatchGuard Disabled v3 - service beepxp running, driver works :
https://i.ibb.co/XtvmbdG/patch-works.png
https://i.ibb.co/6Dj1vSz/UEFI.png

How test PatchGuard?

[Fyyre]

Originally Posted by Gelip

Yes, but Win7 must be activate or work only 30 day from fresh install OS. I test driver signing BeepXP:

Normal boot - digital signature error (service beepxp not running)
https://i.ibb.co/YpYgg7z/normal-boot.png
PatchGuard Disabled v3 - service beepxp running, driver works :):
https://i.ibb.co/XtvmbdG/patch-works.png
https://i.ibb.co/6Dj1vSz/UEFI.png

How test PatchGuard?

Do something Microsoft doesn't like such as modify the SSDT or Shadow SSDT. Better yet, I can send you some ancient source for a x64 process hider I made, that also does the trick.

[ahmadmansoor]

Originally Posted by Fyyre

Do something Microsoft doesn't like such as modify the SSDT or Shadow SSDT. Better yet, I can send you some ancient source for a x64 process hider I made, that also does the trick.

Maybe u can share it with all of us
Thanks

[Fyyre]

Originally Posted by ahmadmansoor

Maybe u can share it with all of us :D
Thanks

Certainly, I will :) let me clean it up and see that it still loads

[Gelip]

Originally Posted by Fyyre

Do something Microsoft doesn't like such as modify the SSDT or Shadow SSDT. Better yet, I can send you some ancient source for a x64 process hider I made, that also does the trick.

Yes, please.

[Gelip]

Originally Posted by Fyyre

Hi Gelip!

Did this work for you? If so -- wonderful! =)

-Fyyre

Hi. Fyyre. Please help patch same for 32-bit winload.efi 5472.5
https://www.mediafire.com/file/us8erkvjbka1jrr/5472.zip/file
https://msfn.org/board/topic/186779-how-disbale-check-signature-enforcement/

Thx.