Closed Hellohi3654 closed 3 years ago
Oh btw I only really want to use your tool for fan control Thanks
Well, seems like Dell start to utilize Alienware design. How cute!
If you only need fan control, better use my Alienfan-tools project, it's pure fan control without anything other.
Ok, back to business. I never meet Ryzen-based notebooks, so i don't surprised it have some difference. Can you please:
I'll take a look and will try to support it.
ok thanks for the reply I'll do that now
[Link removed]
Also when I try and run Alienfan-tools I get this error I have made sure that my antivirus is disabled and that it's running as administrator
Aha. Ok, go it, thanks, please give me some time to analyze (it's later evening here, so expect my reply tomorrow).
Aha. Ok, go it, thanks, please give me some time to analyze (it's later evening here, so expect my reply tomorrow).
Don't worry it's late for me too
Good night
So... I check your dump.
It's close to Alienware, but different in small details - so i need to check why you got error. By the way, you have 2 power modes, but only one can be selected by power select call!
... Ok, wait for the new release (maybe beta) to test.
PS: Also, maybe admin will not need anymore if driver already run.
So... I check your dump.
It's close to Alienware, but different in small details - so i need to check why you got error. By the way, you have 2 power modes, but only one can be selected by power select call!
... Ok, wait for the new release (maybe beta) to test.
PS: Also, maybe admin will not need anymore if driver already run.
Ok thanks I have a button on my keyboard that enables "high performance mode" Not sure if that switches power modes
Also how would I log the error when I open Alienfan-tools
Thanks
Ok. Can you please run this debug version - Alienfan-Debug.zip
It has both GUI and CLI tools.
First, try GUI. If it is not started, you will have one of 2 possible error messages:
alienfan-cli direct=13,1,32
and show me output.PS: In fact, direct
command is forced access to hardware interface. You can open your dump, search for "Method(WMAX" string, then check what parameters are available.
Ok. Can you please run this debug version - Alienfan-Debug.zip
It has both GUI and CLI tools.
First, try GUI. If it is not started, you will have one of 2 possible error messages:
"Can't install driver, check system configuration!" - in this case, the issue is into your system configuration. What you can do for test:
- Disable Secure Boot in BIOS. Is it work after it?
- Check readme and issue TestMode command, reboot. Is it work?
- If both not work, tell me for deep diagnostic.
"Supported hardware not detected!" - this will mean i have bug in hardware detection, but - according to your dump, you device should be detected. You can try other way:
- Open Command prompt as Administartor
- Run CLI -
alienfan-cli direct=13,1,32
and show me output.PS: In fact,
direct
command is forced access to hardware interface. You can open your dump, search for "Method(WMAX" string, then check what parameters are available.
ah so I run the GUI from alienfandebug and it made my laptop BSOD
I ran the GUI again and it didn't BSOD it said Supported hardware not detected
so I followed your steps
I also ran the normal cli
opened the dump and found this
Wow! BSOD is possible, but very interesting how you got it. Hmm, "Direct call failed". So you have function, but access denied. Seems like ACPI chain is different for your gear. Ok, now i understand the issues now, let me think a bit and provide other test version.
PS: Yes WMAX is a fan/power control routine from Alienware. I only use this commands, so it's safe for hardware.
UPD: Ohh.... I found.
Path is different - my device have _SB.AMW1.WMAX, yours - _SB.AMW3.WMAX ! Ok, i'll patch this.
UPD: Ohh.... I found.
Path is different - my device have _SB.AMW1.WMAX, yours - _SB.AMW3.WMAX ! Ok, i'll patch this.
oh cool thanks
Wow! BSOD is possible, but very interesting how you got it. Hmm, "Direct call failed". So you have function, but access denied. Seems like ACPI chain is different for your gear. Ok, now i understand the issues now, let me think a bit and provide other test version.
PS: Yes WMAX is a fan/power control routine from Alienware. I only use this commands, so it's safe for hardware.
ok thanks
Let's try this one
First, try alienfan-cli direct=13,1,32
- it should return 1. Also, it should detect fans, powers and sensors (you only have 2 sensors instead of 7 on mine...).
If it's ok, try other CLI commands, like "rpm". If ok, try GUI.
sorry for late reply been away this morning
i'll try now
so it made my laptop BSOD again when trying to do alienfan-cli direct=13,1,32
tried again and it returned value 1
Yes, it should work now. But BSOD... I think we need to investigate it. Can you help me?
Yes, it should work now. But BSOD... I think we need to investigate it. Can you help me?
Yeah sure it seems to only do it the first time I try to do alienfan-cli direct=13,1,32
Also when I try opening the gui it just opens in the background and nothing is displayed
it also seems to fully load one thread
Hmmm... So it hangs or looped before UI. Did tray icon visible? Ok, kill it and let me check and add some tests.
Log Name: System
Source: Microsoft-Windows-WER-SystemErrorReporting
Date: 12/09/2021 3:00:59 PM
Event ID: 1001
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: DESKTOP-J718USC
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x0000001e (0xffffffffc0000005, 0xfffff8023ad56ebf, 0x0000000000000000, 0x0000000000000044). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 920be000-14b7-46de-8a63-aa070df98a22.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2021-09-12T05:00:59.6493349Z" />
<EventRecordID>15138</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>DESKTOP-J718USC</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">0x0000001e (0xffffffffc0000005, 0xfffff8023ad56ebf, 0x0000000000000000, 0x0000000000000044)</Data>
<Data Name="param2">C:\Windows\MEMORY.DMP</Data>
<Data Name="param3">920be000-14b7-46de-8a63-aa070df98a22</Data>
</EventData>
</Event>
I think that's what caused the BSOD
- What BSOD about? You can check in Event Viewer. Is it protection or driver fault?
- Let's try to install driver manually:
- Reboot to unload it
- At folder you unpack debug, it's sub-folder named KDU.
- Copy hwacc.sys (better from release version, but from this OK too) into this folder
- Issue the command `kdu.exe -prv 6 -scv 3 -drvn HwAcc -map HwAcc.sys" If it BSOD, let me check other ways. If not - i'll to to check into app.
Hmmm... So it hangs or looped before UI. Did tray icon visible? Ok, kill it and let me check and add some tests.
I restarted then
I copied the .sys file in kdu and ran kdu.exe -prv 6 -scv 3 -drvn HwAcc -map HwAcc.sys
it didn't BSOD and returned value 1
Ok, try new version - Alienfan-Debug.zip
It will provide message boxes upon loading to trace where it loops.
Also, can you run CLI without parameters and show me output? (Hint: you can copy text, not picture - let's save the nature %)
UPD: BSOD is access violation from my driver. Quite strange it only happened from time to time, should be stable in this case. I check.
Ran CLI without parameters
C:\Windows\system32>cd C:\Alienfan\Alienfan-Debug
C:\Alienfan\Alienfan-Debug>alienfan-cli.exe
AlienFan-cli v1.1.1.0
[#] Kernel Driver Utility v1.1.1 started, (c)2020 - 2021 KDU Project
[#] Build at Fri May 14 22:25:32 2021, header checksum 0x3E810
[#] Supported x64 OS : Windows 7 and above
[*] Windows version: 10.0 build 19042
[*] SecureBoot is enabled on this machine
[+] Selected provider: 6
[*] Driver mapping using shellcode version: 3
[+] Driver object name: "HwAcc"
[+] No driver registry key name specified, driver object name will be used instead
[+] Input driver file loaded at 0x00007FF6CB000000
[+] Provider: G.SKILL Trident Z Lighting Control, Name "EneIo64"
[+] Drivers database "drv64.dll" loaded at 0x0000016DDC4B0002
[+] Extracting vulnerable driver as "C:\Alienfan\Alienfan-Debug\EneIo64.sys"
[+] Vulnerable driver "EneIo64" loaded
[+] Vulnerable driver opened
[+] Executing post-open callback for given provider
[+] Driver device security descriptor set successfully
[+] Victim driver map attempt 1 of 3
[+] Extracting victim driver "PROCEXP152" as "C:\Users\zachh\AppData\Local\Temp\PROCEXP152.sys"
[+] Victim driver loaded, handle 0x00000000000000D0
[+] Reading FILE_OBJECT at 0xFFFFD409DCA3DAE0
[+] Reading DEVICE_OBJECT at 0xFFFFD409D9BCAA70
[+] Reading DRIVER_OBJECT at 0xFFFFD409D3770850
[+] Victim IRP_MJ_DEVICE_CONTROL 0xFFFFF804D8892220
[+] Victim DriverUnload 0xFFFFF804D8893280
[+] Loaded ntoskrnl base 0xFFFFF80480400000
[+] Ntoskrnl.exe mapped at 0x7FF77C0E0000
[+] Resolving kernel import for input driver
[+] Resolving payload import
[*] IoDriverObjectType 0xFFFFF804810FB5A0
[*] ObCreateObject 0xFFFFF80480A0E8D0
[*] ObInsertObject 0xFFFFF80480A0D1E0
[*] ObMakeTemporaryObject 0xFFFFF80480B0A9C0
[*] ZwMakeTemporaryObject 0xFFFFF804807F58A0
[*] ZwClose 0xFFFFF804807F38A0
[+] Resolving base shellcode import
[*] MmSectionObjectType 0xFFFFF804810FB510
[*] ExAllocatePoolWithTag 0xFFFFF80480DB2160
[*] ExFreePoolWithTag 0xFFFFF80480DB2140
[*] IofCompleteRequest 0xFFFFF80480684F30
[*] ZwMapViewOfSection 0xFFFFF804807F3BC0
[*] ZwUnmapViewOfSection 0xFFFFF804807F3C00
[*] ObReferenceObjectByHandle 0xFFFFF804809F5BC0
[*] ObfDereferenceObject 0xFFFFF80480608270
[*] KeSetEvent 0xFFFFF80480686B50
[+] Bootstrap code size = 0x4E1
[+] Driver IRP_MJ_DEVICE_CONTROL handler code modified
[+] Run shellcode
[~] Shellcode result: NTSTATUS (0x0)
[+] Victim driver unloaded
[+] Vulnerable driver unloaded
[+] Vulnerable driver file removed
[+] Return value: 1. Bye-bye!
Tried running alienfan-gui.exe
Press OK for continue ^_^ - it will be a pack of messages.
Press OK for continue ^_^ - it will be a pack of messages.
nothing displays after I press ok
Aha! Loop in probe.
Can you run alienfan-cli rpm
? What output did it have?
Ran alienfan-cli rpm
AlienFan-cli v1.1.1.0
[#] Kernel Driver Utility v1.1.1 started, (c)2020 - 2021 KDU Project
[#] Build at Fri May 14 22:25:32 2021, header checksum 0x3E810
[#] Supported x64 OS : Windows 7 and above
[*] Windows version: 10.0 build 19042
[*] SecureBoot is enabled on this machine
[+] Selected provider: 6
[*] Driver mapping using shellcode version: 3
[+] Driver object name: "HwAcc"
[+] No driver registry key name specified, driver object name will be used instead
[+] Input driver file loaded at 0x00007FF7EA940000
[+] Provider: G.SKILL Trident Z Lighting Control, Name "EneIo64"
[+] Drivers database "drv64.dll" loaded at 0x0000017F94490002
[+] Extracting vulnerable driver as "C:\Alienfan\Alienfan-Debug\EneIo64.sys"
[+] Vulnerable driver "EneIo64" loaded
[+] Vulnerable driver opened
[+] Executing post-open callback for given provider
[+] Driver device security descriptor set successfully
[+] Victim driver map attempt 1 of 3
[+] Extracting victim driver "PROCEXP152" as "C:\Users\zachh\AppData\Local\Temp\PROCEXP152.sys"
[+] Victim driver loaded, handle 0x00000000000000D0
[+] Reading FILE_OBJECT at 0xFFFFDB082193BA30
[+] Reading DEVICE_OBJECT at 0xFFFFDB081EA69E10
[+] Reading DRIVER_OBJECT at 0xFFFFDB081B60E7B0
[+] Victim IRP_MJ_DEVICE_CONTROL 0xFFFFF805A5EB2220
[+] Victim DriverUnload 0xFFFFF805A5EB3280
[+] Loaded ntoskrnl base 0xFFFFF8054E600000
[+] Ntoskrnl.exe mapped at 0x7FF7F5080000
[+] Resolving kernel import for input driver
[+] Resolving payload import
[*] IoDriverObjectType 0xFFFFF8054F2FB5A0
[*] ObCreateObject 0xFFFFF8054EC0E8D0
[*] ObInsertObject 0xFFFFF8054EC0D1E0
[*] ObMakeTemporaryObject 0xFFFFF8054ED0A9C0
[*] ZwMakeTemporaryObject 0xFFFFF8054E9F58A0
[*] ZwClose 0xFFFFF8054E9F38A0
[+] Resolving base shellcode import
[*] MmSectionObjectType 0xFFFFF8054F2FB510
[*] ExAllocatePoolWithTag 0xFFFFF8054EFB2160
[*] ExFreePoolWithTag 0xFFFFF8054EFB2140
[*] IofCompleteRequest 0xFFFFF8054E884F30
[*] ZwMapViewOfSection 0xFFFFF8054E9F3BC0
[*] ZwUnmapViewOfSection 0xFFFFF8054E9F3C00
[*] ObReferenceObjectByHandle 0xFFFFF8054EBF5BC0
[*] ObfDereferenceObject 0xFFFFF8054E808270
[*] KeSetEvent 0xFFFFF8054E886B50
[+] Bootstrap code size = 0x4E1
[+] Driver IRP_MJ_DEVICE_CONTROL handler code modified
[+] Run shellcode
[~] Shellcode result: NTSTATUS (0x0)
[+] Victim driver unloaded
[+] Vulnerable driver unloaded
[+] Vulnerable driver file removed
[+] Return value: 1. Bye-bye!
It's log from KDU, not from alienfan-cli! Ah... I see... Funny.... Ok, let me check.
Found. My ACPI return -1 in case of error, yours - 0. Ok, wait for new version.
Found. My ACPI return -1 in case of error, yours - 0. Ok, wait for new version.
oh ok thanks
Better try CLI first, if it shows data below KDU - try gui.
Better try CLI first, if it shows data below KDU - try gui.
ok thanks trying now
yeah cli seems to be working fine now not showing any kdu stuff
KDU is used one time per session (until reboot) to load the driver. But did it finish or still in loop?
ok everything seems to be working now what does the gpu slider do?
actually the cpu fan doesn't seem to be working at all
gpu fan works fine
actually the cpu fan doesn't seem to be working at all
Can you explain please? What do you mean "don't work"?
GPU slider alter GPU power limit for some systems (i can check yours as well) - left one no limit, right one high limit. At my gear left one 90W, right one 65W.
so if I set Power to manual and set the gpu to 0 it will be low power but if I set it to 4 it will be high power? I only have level 1 and manual in my Power dropdown
Oh also I don't think fan control is actually working at all When I set temp 20 boost 100 and temp 100 boost 100 on both my fans they do nothing
so if I set Power to manual and set the gpu to 0 it will be low power but if I set it to 4 it will be high power? I only have level 1 and manual in my Power dropdown
Oh also I don't think fan control is actually working at all When I set temp 20 boost 100 and temp 100 boost 100 on both my fans they do nothing
once I close the GUI fan#1 follows my fan curve but fan#0 is still off
Hi I have a https://www.dell.com/en-au/shop/gaming-and-games/g15-ryzen-edition-gaming-laptop/spd/g-series-15-5515-laptop/hng551503au and I cannot get your tool to work not sure if it's compatible just checking
Thanks