mirror of https://github.com/lianthony/NT4.0
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
100 lines
2.0 KiB
100 lines
2.0 KiB
/*++
|
|
|
|
Copyright (c) 1995 Microsoft Corporation
|
|
|
|
Module Name:
|
|
|
|
machine.cpp
|
|
|
|
Abstract:
|
|
|
|
This file implements the CreateMachApiThunk() function. This
|
|
function is responsible for emitting the individual API thunks
|
|
for the i386 architecture.
|
|
|
|
Author:
|
|
|
|
Wesley Witt (wesw) 28-June-1995
|
|
|
|
Environment:
|
|
|
|
User Mode
|
|
|
|
--*/
|
|
|
|
#include "apidllp.h"
|
|
#pragma hdrstop
|
|
|
|
|
|
|
|
PUCHAR
|
|
CreateMachApiThunk(
|
|
PULONG IatAddress,
|
|
PUCHAR Text,
|
|
PDLL_INFO DllInfo,
|
|
PAPI_INFO ApiInfo
|
|
)
|
|
|
|
/*++
|
|
|
|
Routine Description:
|
|
|
|
Emits the machine specific code for the API thunks.
|
|
|
|
Arguments:
|
|
|
|
IatAddress - Pointer to the IAT fir this API
|
|
Text - Pointer to a buffer to place the generated code
|
|
DllInfo - Pointer to the DLL_INFO structure
|
|
ApiInfo - Pointer to the API_INFO structure
|
|
|
|
Return Value:
|
|
|
|
Pointer to the next byte to place more generated code.
|
|
|
|
--*/
|
|
|
|
{
|
|
if (ApiInfo->ThunkAddress) {
|
|
*IatAddress = ApiInfo->ThunkAddress;
|
|
return Text;
|
|
}
|
|
|
|
*IatAddress = (ULONG)Text;
|
|
ApiInfo->ThunkAddress = *IatAddress;
|
|
PUCHAR Code = (PUCHAR)Text;
|
|
|
|
Code[0] = 0x68;
|
|
Code += 1;
|
|
*(LPDWORD)Code = (ULONG)ApiInfo;
|
|
Code += sizeof(DWORD);
|
|
Code[0] = 0x68;
|
|
Code += 1;
|
|
*(LPDWORD)Code = (ULONG)DllInfo;
|
|
Code += sizeof(DWORD);
|
|
Code[0] = 0x68;
|
|
Code += 1;
|
|
if (_stricmp(DllInfo->Name,KERNEL32)==0) {
|
|
if (strcmp((LPSTR)(ApiInfo->Name+(LPSTR)MemPtr),LOADLIBRARYA)==0) {
|
|
*(LPDWORD)Code = 1;
|
|
} else
|
|
if (strcmp((LPSTR)(ApiInfo->Name+(LPSTR)MemPtr),LOADLIBRARYW)==0) {
|
|
*(LPDWORD)Code = 2;
|
|
} else
|
|
if (strcmp((LPSTR)(ApiInfo->Name+(LPSTR)MemPtr),FREELIBRARY)==0) {
|
|
*(LPDWORD)Code = 3;
|
|
} else {
|
|
*(LPDWORD)Code = 0;
|
|
}
|
|
} else {
|
|
*(LPDWORD)Code = 0;
|
|
}
|
|
Code += sizeof(DWORD);
|
|
|
|
Code[0] = 0xe9;
|
|
Code += 1;
|
|
*(LPDWORD)Code = (ULONG)((ULONG)ApiMonThunk-(((ULONG)Code-(ULONG)Text)+(ULONG)Text+4));
|
|
Code += sizeof(DWORD);
|
|
|
|
return Code;
|
|
}
|