
Prevent loading more libraries than necessary, so load WINMM the first time the bell is used and use the CRT printf functions to avoid loading USER32 at all. I was also going to remove MSVCRT, but that turned out to be more trouble than it's worth. However, a side-effect that I kept is replacing bsearch with a dedicated search routine.
90 lines
2.2 KiB
C
90 lines
2.2 KiB
C
/*
|
|
Get the RVA of a function directly from a module. This allows 64-bit code to
|
|
work with 32-bit DLLs, and eliminates (or at least reduces) the possibility
|
|
of the function already being hooked.
|
|
*/
|
|
|
|
#include "ansicon.h"
|
|
|
|
static PIMAGE_DOS_HEADER pDosHeader;
|
|
|
|
|
|
#ifdef _WIN64
|
|
DWORD GetProcRVA( LPCTSTR module, LPCSTR func, int bits )
|
|
#else
|
|
DWORD GetProcRVA( LPCTSTR module, LPCSTR func )
|
|
#endif
|
|
{
|
|
HMODULE hMod;
|
|
TCHAR buf[MAX_PATH];
|
|
UINT len;
|
|
PIMAGE_NT_HEADERS pNTHeader;
|
|
PIMAGE_EXPORT_DIRECTORY pExportDir;
|
|
PDWORD fun_table, name_table;
|
|
PWORD ord_table;
|
|
DWORD rva;
|
|
int lo, mid, hi, cmp;
|
|
|
|
#ifdef _WIN64
|
|
if (bits == 32)
|
|
len = GetSystemWow64Directory( buf, MAX_PATH );
|
|
else
|
|
#endif
|
|
len = GetSystemDirectory( buf, MAX_PATH );
|
|
buf[len++] = '\\';
|
|
wcscpy( buf + len, module );
|
|
hMod = LoadLibraryEx( buf, NULL, LOAD_LIBRARY_AS_IMAGE_RESOURCE );
|
|
if (hMod == NULL)
|
|
{
|
|
#ifdef _WIN64
|
|
DEBUGSTR( 1, "Unable to load %u-bit %S (%u)!",
|
|
bits, module, GetLastError() );
|
|
#else
|
|
DEBUGSTR( 1, "Unable to load %S (%u)!", module, GetLastError() );
|
|
#endif
|
|
return 0;
|
|
}
|
|
// The handle uses low bits as flags, so strip 'em off.
|
|
pDosHeader = (PIMAGE_DOS_HEADER)((DWORD_PTR)hMod & ~0xFFFF);
|
|
pNTHeader = MakeVA( PIMAGE_NT_HEADERS, pDosHeader->e_lfanew );
|
|
#ifdef _WIN64
|
|
if (bits == 32)
|
|
pExportDir = MakeVA( PIMAGE_EXPORT_DIRECTORY,
|
|
((PIMAGE_NT_HEADERS32)pNTHeader)->EXPORTDIR.VirtualAddress );
|
|
else
|
|
#endif
|
|
pExportDir = MakeVA( PIMAGE_EXPORT_DIRECTORY,
|
|
pNTHeader->EXPORTDIR.VirtualAddress );
|
|
fun_table = MakeVA( PDWORD, pExportDir->AddressOfFunctions );
|
|
name_table = MakeVA( PDWORD, pExportDir->AddressOfNames );
|
|
ord_table = MakeVA( PWORD, pExportDir->AddressOfNameOrdinals );
|
|
|
|
rva = 0;
|
|
lo = 0;
|
|
hi = pExportDir->NumberOfNames - 1;
|
|
while (lo <= hi)
|
|
{
|
|
mid = (lo + hi) / 2;
|
|
cmp = strcmp( func, MakeVA( LPCSTR, name_table[mid] ) );
|
|
if (cmp == 0)
|
|
{
|
|
rva = fun_table[ord_table[mid]];
|
|
break;
|
|
}
|
|
if (cmp < 0)
|
|
hi = mid - 1;
|
|
else
|
|
lo = mid + 1;
|
|
}
|
|
if (rva == 0)
|
|
{
|
|
#ifdef _WIN64
|
|
DEBUGSTR( 1, "Could not find %u-bit %s!", bits, func );
|
|
#else
|
|
DEBUGSTR( 1, "Could not find %s!", func );
|
|
#endif
|
|
}
|
|
FreeLibrary( hMod );
|
|
return rva;
|
|
}
|