2021-07-27 11:15:25 +02:00
|
|
|
/*
|
|
|
|
* WoW64 virtual memory functions
|
|
|
|
*
|
|
|
|
* Copyright 2021 Alexandre Julliard
|
|
|
|
*
|
|
|
|
* This library is free software; you can redistribute it and/or
|
|
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
|
|
* License as published by the Free Software Foundation; either
|
|
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
|
|
*
|
|
|
|
* This library is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
|
|
* Lesser General Public License for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
|
|
* License along with this library; if not, write to the Free Software
|
|
|
|
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
|
|
|
|
*/
|
|
|
|
|
|
|
|
#include <stdarg.h>
|
|
|
|
|
|
|
|
#include "ntstatus.h"
|
|
|
|
#define WIN32_NO_STATUS
|
|
|
|
#include "windef.h"
|
|
|
|
#include "winbase.h"
|
|
|
|
#include "winnt.h"
|
|
|
|
#include "winternl.h"
|
|
|
|
#include "winioctl.h"
|
|
|
|
#include "wow64_private.h"
|
|
|
|
#include "wine/debug.h"
|
|
|
|
|
|
|
|
WINE_DEFAULT_DEBUG_CHANNEL(wow);
|
|
|
|
|
|
|
|
|
|
|
|
/**********************************************************************
|
|
|
|
* wow64_NtAllocateVirtualMemory
|
|
|
|
*/
|
|
|
|
NTSTATUS WINAPI wow64_NtAllocateVirtualMemory( UINT *args )
|
|
|
|
{
|
|
|
|
HANDLE process = get_handle( &args );
|
|
|
|
ULONG *addr32 = get_ptr( &args );
|
|
|
|
ULONG_PTR zero_bits = get_ulong( &args );
|
|
|
|
ULONG *size32 = get_ptr( &args );
|
|
|
|
ULONG type = get_ulong( &args );
|
|
|
|
ULONG protect = get_ulong( &args );
|
|
|
|
|
|
|
|
void *addr;
|
|
|
|
SIZE_T size;
|
|
|
|
NTSTATUS status;
|
|
|
|
|
|
|
|
status = NtAllocateVirtualMemory( process, addr_32to64( &addr, addr32 ), get_zero_bits( zero_bits ),
|
|
|
|
size_32to64( &size, size32 ), type, protect );
|
|
|
|
if (!status)
|
|
|
|
{
|
|
|
|
put_addr( addr32, addr );
|
|
|
|
put_size( size32, size );
|
|
|
|
}
|
|
|
|
return status;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/**********************************************************************
|
|
|
|
* wow64_NtAllocateVirtualMemoryEx
|
|
|
|
*/
|
|
|
|
NTSTATUS WINAPI wow64_NtAllocateVirtualMemoryEx( UINT *args )
|
|
|
|
{
|
|
|
|
HANDLE process = get_handle( &args );
|
|
|
|
ULONG *addr32 = get_ptr( &args );
|
|
|
|
ULONG *size32 = get_ptr( &args );
|
|
|
|
ULONG type = get_ulong( &args );
|
|
|
|
ULONG protect = get_ulong( &args );
|
|
|
|
MEM_EXTENDED_PARAMETER *params = get_ptr( &args );
|
|
|
|
ULONG count = get_ulong( &args );
|
|
|
|
|
|
|
|
void *addr;
|
|
|
|
SIZE_T size;
|
|
|
|
NTSTATUS status;
|
|
|
|
|
|
|
|
if (count) FIXME( "%d extended parameters %p\n", count, params );
|
|
|
|
status = NtAllocateVirtualMemoryEx( process, addr_32to64( &addr, addr32 ), size_32to64( &size, size32 ),
|
|
|
|
type, protect, params, count );
|
|
|
|
if (!status)
|
|
|
|
{
|
|
|
|
put_addr( addr32, addr );
|
|
|
|
put_size( size32, size );
|
|
|
|
}
|
|
|
|
return status;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2021-07-27 11:21:23 +02:00
|
|
|
/**********************************************************************
|
|
|
|
* wow64_NtAreMappedFilesTheSame
|
|
|
|
*/
|
|
|
|
NTSTATUS WINAPI wow64_NtAreMappedFilesTheSame( UINT *args )
|
|
|
|
{
|
|
|
|
void *ptr1 = get_ptr( &args );
|
|
|
|
void *ptr2 = get_ptr( &args );
|
|
|
|
|
|
|
|
return NtAreMappedFilesTheSame( ptr1, ptr2 );
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2021-07-27 11:15:25 +02:00
|
|
|
/**********************************************************************
|
|
|
|
* wow64_NtFlushVirtualMemory
|
|
|
|
*/
|
|
|
|
NTSTATUS WINAPI wow64_NtFlushVirtualMemory( UINT *args )
|
|
|
|
{
|
|
|
|
HANDLE process = get_handle( &args );
|
|
|
|
ULONG *addr32 = get_ptr( &args );
|
|
|
|
ULONG *size32 = get_ptr( &args );
|
|
|
|
ULONG unknown = get_ulong( &args );
|
|
|
|
|
|
|
|
void *addr;
|
|
|
|
SIZE_T size;
|
|
|
|
NTSTATUS status;
|
|
|
|
|
|
|
|
status = NtFlushVirtualMemory( process, (const void **)addr_32to64( &addr, addr32 ),
|
|
|
|
size_32to64( &size, size32 ), unknown );
|
|
|
|
if (!status)
|
|
|
|
{
|
|
|
|
put_addr( addr32, addr );
|
|
|
|
put_size( size32, size );
|
|
|
|
}
|
|
|
|
return status;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/**********************************************************************
|
|
|
|
* wow64_NtFreeVirtualMemory
|
|
|
|
*/
|
|
|
|
NTSTATUS WINAPI wow64_NtFreeVirtualMemory( UINT *args )
|
|
|
|
{
|
|
|
|
HANDLE process = get_handle( &args );
|
|
|
|
ULONG *addr32 = get_ptr( &args );
|
|
|
|
ULONG *size32 = get_ptr( &args );
|
|
|
|
ULONG type = get_ulong( &args );
|
|
|
|
|
|
|
|
void *addr;
|
|
|
|
SIZE_T size;
|
|
|
|
NTSTATUS status;
|
|
|
|
|
|
|
|
status = NtFreeVirtualMemory( process, addr_32to64( &addr, addr32 ),
|
|
|
|
size_32to64( &size, size32 ), type );
|
|
|
|
if (!status)
|
|
|
|
{
|
|
|
|
put_addr( addr32, addr );
|
|
|
|
put_size( size32, size );
|
|
|
|
}
|
|
|
|
return status;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2021-07-27 11:21:23 +02:00
|
|
|
/**********************************************************************
|
|
|
|
* wow64_NtGetNlsSectionPtr
|
|
|
|
*/
|
|
|
|
NTSTATUS WINAPI wow64_NtGetNlsSectionPtr( UINT *args )
|
|
|
|
{
|
|
|
|
ULONG type = get_ulong( &args );
|
|
|
|
ULONG id = get_ulong( &args );
|
|
|
|
void *unknown = get_ptr( &args );
|
|
|
|
ULONG *addr32 = get_ptr( &args );
|
|
|
|
ULONG *size32 = get_ptr( &args );
|
|
|
|
|
|
|
|
void *addr;
|
|
|
|
SIZE_T size;
|
|
|
|
NTSTATUS status;
|
|
|
|
|
|
|
|
status = NtGetNlsSectionPtr( type, id, unknown, addr_32to64( &addr, addr32 ),
|
|
|
|
size_32to64( &size, size32 ));
|
|
|
|
if (!status)
|
|
|
|
{
|
|
|
|
put_addr( addr32, addr );
|
|
|
|
put_size( size32, size );
|
|
|
|
}
|
|
|
|
return status;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2021-07-27 11:24:33 +02:00
|
|
|
/**********************************************************************
|
|
|
|
* wow64_NtGetWriteWatch
|
|
|
|
*/
|
|
|
|
NTSTATUS WINAPI wow64_NtGetWriteWatch( UINT *args )
|
|
|
|
{
|
|
|
|
HANDLE handle = get_handle( &args );
|
|
|
|
ULONG flags = get_ulong( &args );
|
|
|
|
void *base = get_ptr( &args );
|
|
|
|
SIZE_T size = get_ulong( &args );
|
|
|
|
ULONG *addr_ptr = get_ptr( &args );
|
|
|
|
ULONG *count_ptr = get_ptr( &args );
|
|
|
|
ULONG *granularity = get_ptr( &args );
|
|
|
|
|
|
|
|
ULONG_PTR i, count = *count_ptr;
|
|
|
|
void **addresses;
|
|
|
|
NTSTATUS status;
|
|
|
|
|
|
|
|
if (!count || !size) return STATUS_INVALID_PARAMETER;
|
|
|
|
if (flags & ~WRITE_WATCH_FLAG_RESET) return STATUS_INVALID_PARAMETER;
|
|
|
|
if (!addr_ptr) return STATUS_ACCESS_VIOLATION;
|
|
|
|
|
2021-07-28 15:59:06 +02:00
|
|
|
addresses = Wow64AllocateTemp( count * sizeof(*addresses) );
|
2021-07-27 11:24:33 +02:00
|
|
|
if (!(status = NtGetWriteWatch( handle, flags, base, size, addresses, &count, granularity )))
|
|
|
|
{
|
|
|
|
for (i = 0; i < count; i++) addr_ptr[i] = PtrToUlong( addresses[i] );
|
|
|
|
*count_ptr = count;
|
|
|
|
}
|
|
|
|
return status;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2021-07-27 11:15:25 +02:00
|
|
|
/**********************************************************************
|
|
|
|
* wow64_NtLockVirtualMemory
|
|
|
|
*/
|
|
|
|
NTSTATUS WINAPI wow64_NtLockVirtualMemory( UINT *args )
|
|
|
|
{
|
|
|
|
HANDLE process = get_handle( &args );
|
|
|
|
ULONG *addr32 = get_ptr( &args );
|
|
|
|
ULONG *size32 = get_ptr( &args );
|
|
|
|
ULONG unknown = get_ulong( &args );
|
|
|
|
|
|
|
|
void *addr;
|
|
|
|
SIZE_T size;
|
|
|
|
NTSTATUS status;
|
|
|
|
|
|
|
|
status = NtLockVirtualMemory( process, addr_32to64( &addr, addr32 ),
|
|
|
|
size_32to64( &size, size32 ), unknown );
|
|
|
|
if (!status)
|
|
|
|
{
|
|
|
|
put_addr( addr32, addr );
|
|
|
|
put_size( size32, size );
|
|
|
|
}
|
|
|
|
return status;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2021-07-27 11:21:23 +02:00
|
|
|
/**********************************************************************
|
|
|
|
* wow64_NtMapViewOfSection
|
|
|
|
*/
|
|
|
|
NTSTATUS WINAPI wow64_NtMapViewOfSection( UINT *args )
|
|
|
|
{
|
|
|
|
HANDLE handle = get_handle( &args );
|
|
|
|
HANDLE process = get_handle( &args );
|
|
|
|
ULONG *addr32 = get_ptr( &args );
|
|
|
|
ULONG_PTR zero_bits = get_ulong( &args );
|
|
|
|
SIZE_T commit = get_ulong( &args );
|
|
|
|
const LARGE_INTEGER *offset = get_ptr( &args );
|
|
|
|
ULONG *size32 = get_ptr( &args );
|
|
|
|
SECTION_INHERIT inherit = get_ulong( &args );
|
|
|
|
ULONG alloc = get_ulong( &args );
|
|
|
|
ULONG protect = get_ulong( &args );
|
|
|
|
|
|
|
|
void *addr;
|
|
|
|
SIZE_T size;
|
|
|
|
NTSTATUS status;
|
|
|
|
|
|
|
|
status = NtMapViewOfSection( handle, process, addr_32to64( &addr, addr32 ), get_zero_bits( zero_bits ),
|
|
|
|
commit, offset, size_32to64( &size, size32 ), inherit, alloc, protect );
|
|
|
|
if (NT_SUCCESS(status))
|
|
|
|
{
|
|
|
|
put_addr( addr32, addr );
|
|
|
|
put_size( size32, size );
|
|
|
|
}
|
|
|
|
return status;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2021-07-27 11:15:25 +02:00
|
|
|
/**********************************************************************
|
|
|
|
* wow64_NtProtectVirtualMemory
|
|
|
|
*/
|
|
|
|
NTSTATUS WINAPI wow64_NtProtectVirtualMemory( UINT *args )
|
|
|
|
{
|
|
|
|
HANDLE process = get_handle( &args );
|
|
|
|
ULONG *addr32 = get_ptr( &args );
|
|
|
|
ULONG *size32 = get_ptr( &args );
|
|
|
|
ULONG new_prot = get_ulong( &args );
|
|
|
|
ULONG *old_prot = get_ptr( &args );
|
|
|
|
|
|
|
|
void *addr;
|
|
|
|
SIZE_T size;
|
|
|
|
NTSTATUS status;
|
|
|
|
|
|
|
|
status = NtProtectVirtualMemory( process, addr_32to64( &addr, addr32 ),
|
|
|
|
size_32to64( &size, size32 ), new_prot, old_prot );
|
|
|
|
if (!status)
|
|
|
|
{
|
|
|
|
put_addr( addr32, addr );
|
|
|
|
put_size( size32, size );
|
|
|
|
}
|
|
|
|
return status;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2021-07-27 12:00:27 +02:00
|
|
|
/**********************************************************************
|
|
|
|
* wow64_NtQueryVirtualMemory
|
|
|
|
*/
|
|
|
|
NTSTATUS WINAPI wow64_NtQueryVirtualMemory( UINT *args )
|
|
|
|
{
|
|
|
|
HANDLE handle = get_handle( &args );
|
|
|
|
void *addr = get_ptr( &args );
|
|
|
|
MEMORY_INFORMATION_CLASS class = get_ulong( &args );
|
|
|
|
void *ptr = get_ptr( &args );
|
|
|
|
ULONG len = get_ulong( &args );
|
|
|
|
ULONG *retlen = get_ptr( &args );
|
|
|
|
|
|
|
|
SIZE_T res_len = 0;
|
|
|
|
NTSTATUS status;
|
|
|
|
|
|
|
|
switch (class)
|
|
|
|
{
|
|
|
|
case MemoryBasicInformation: /* MEMORY_BASIC_INFORMATION */
|
|
|
|
if (len >= sizeof(MEMORY_BASIC_INFORMATION32))
|
|
|
|
{
|
|
|
|
MEMORY_BASIC_INFORMATION info;
|
|
|
|
MEMORY_BASIC_INFORMATION32 *info32 = ptr;
|
|
|
|
|
|
|
|
if (!(status = NtQueryVirtualMemory( handle, addr, class, &info, sizeof(info), &res_len )))
|
|
|
|
{
|
|
|
|
info32->BaseAddress = PtrToUlong( info.BaseAddress );
|
|
|
|
info32->AllocationBase = PtrToUlong( info.AllocationBase );
|
|
|
|
info32->AllocationProtect = info.AllocationProtect;
|
|
|
|
info32->RegionSize = info.RegionSize;
|
|
|
|
info32->State = info.State;
|
|
|
|
info32->Protect = info.Protect;
|
|
|
|
info32->Type = info.Type;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
else status = STATUS_INFO_LENGTH_MISMATCH;
|
|
|
|
res_len = sizeof(MEMORY_BASIC_INFORMATION32);
|
|
|
|
break;
|
|
|
|
|
2021-08-03 13:09:35 +02:00
|
|
|
case MemoryMappedFilenameInformation: /* MEMORY_SECTION_NAME */
|
2021-07-27 12:00:27 +02:00
|
|
|
{
|
|
|
|
MEMORY_SECTION_NAME *info;
|
|
|
|
MEMORY_SECTION_NAME32 *info32 = ptr;
|
|
|
|
SIZE_T size = len + sizeof(*info) - sizeof(*info32);
|
|
|
|
|
2021-07-28 15:59:06 +02:00
|
|
|
info = Wow64AllocateTemp( size );
|
2021-07-27 12:00:27 +02:00
|
|
|
if (!(status = NtQueryVirtualMemory( handle, addr, class, info, size, &res_len )))
|
|
|
|
{
|
|
|
|
info32->SectionFileName.Length = info->SectionFileName.Length;
|
|
|
|
info32->SectionFileName.MaximumLength = info->SectionFileName.MaximumLength;
|
|
|
|
info32->SectionFileName.Buffer = PtrToUlong( info32 + 1 );
|
|
|
|
memcpy( info32 + 1, info->SectionFileName.Buffer, info->SectionFileName.MaximumLength );
|
|
|
|
}
|
|
|
|
res_len += sizeof(*info32) - sizeof(*info);
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
|
|
|
|
case MemoryWorkingSetExInformation: /* MEMORY_WORKING_SET_EX_INFORMATION */
|
|
|
|
{
|
|
|
|
MEMORY_WORKING_SET_EX_INFORMATION32 *info32 = ptr;
|
|
|
|
MEMORY_WORKING_SET_EX_INFORMATION *info;
|
|
|
|
ULONG i, count = len / sizeof(*info32);
|
|
|
|
|
2021-07-28 15:59:06 +02:00
|
|
|
info = Wow64AllocateTemp( count * sizeof(*info) );
|
2021-07-27 12:00:27 +02:00
|
|
|
for (i = 0; i < count; i++) info[i].VirtualAddress = ULongToPtr( info32[i].VirtualAddress );
|
|
|
|
if (!(status = NtQueryVirtualMemory( handle, addr, class, info, count * sizeof(*info), &res_len )))
|
|
|
|
{
|
|
|
|
count = res_len / sizeof(*info);
|
|
|
|
for (i = 0; i < count; i++) info32[i].VirtualAttributes.Flags = info[i].VirtualAttributes.Flags;
|
|
|
|
res_len = count * sizeof(*info32);
|
|
|
|
}
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
|
2021-08-03 13:31:15 +02:00
|
|
|
case MemoryWineImageInitFuncs:
|
|
|
|
return STATUS_INVALID_INFO_CLASS;
|
|
|
|
|
2021-07-27 12:00:27 +02:00
|
|
|
default:
|
|
|
|
FIXME( "unsupported class %u\n", class );
|
|
|
|
return STATUS_INVALID_INFO_CLASS;
|
|
|
|
}
|
|
|
|
if (!status || status == STATUS_INFO_LENGTH_MISMATCH) put_size( retlen, res_len );
|
|
|
|
return status;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2021-07-27 11:15:25 +02:00
|
|
|
/**********************************************************************
|
|
|
|
* wow64_NtReadVirtualMemory
|
|
|
|
*/
|
|
|
|
NTSTATUS WINAPI wow64_NtReadVirtualMemory( UINT *args )
|
|
|
|
{
|
|
|
|
HANDLE process = get_handle( &args );
|
|
|
|
const void *addr = get_ptr( &args );
|
|
|
|
void *buffer = get_ptr( &args );
|
|
|
|
SIZE_T size = get_ulong( &args );
|
|
|
|
ULONG *retlen = get_ptr( &args );
|
|
|
|
|
|
|
|
SIZE_T ret_size;
|
|
|
|
NTSTATUS status;
|
|
|
|
|
|
|
|
status = NtReadVirtualMemory( process, addr, buffer, size, &ret_size );
|
|
|
|
put_size( retlen, ret_size );
|
|
|
|
return status;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2021-07-27 11:24:33 +02:00
|
|
|
/**********************************************************************
|
|
|
|
* wow64_NtResetWriteWatch
|
|
|
|
*/
|
|
|
|
NTSTATUS WINAPI wow64_NtResetWriteWatch( UINT *args )
|
|
|
|
{
|
|
|
|
HANDLE process = get_handle( &args );
|
|
|
|
void *base = get_ptr( &args );
|
|
|
|
SIZE_T size = get_ulong( &args );
|
|
|
|
|
|
|
|
return NtResetWriteWatch( process, base, size );
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2021-07-27 11:15:25 +02:00
|
|
|
/**********************************************************************
|
|
|
|
* wow64_NtUnlockVirtualMemory
|
|
|
|
*/
|
|
|
|
NTSTATUS WINAPI wow64_NtUnlockVirtualMemory( UINT *args )
|
|
|
|
{
|
|
|
|
HANDLE process = get_handle( &args );
|
|
|
|
ULONG *addr32 = get_ptr( &args );
|
|
|
|
ULONG *size32 = get_ptr( &args );
|
|
|
|
ULONG unknown = get_ulong( &args );
|
|
|
|
|
|
|
|
void *addr;
|
|
|
|
SIZE_T size;
|
|
|
|
NTSTATUS status;
|
|
|
|
|
|
|
|
status = NtUnlockVirtualMemory( process, addr_32to64( &addr, addr32 ),
|
|
|
|
size_32to64( &size, size32 ), unknown );
|
|
|
|
if (!status)
|
|
|
|
{
|
|
|
|
put_addr( addr32, addr );
|
|
|
|
put_size( size32, size );
|
|
|
|
}
|
|
|
|
return status;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2021-07-27 11:21:23 +02:00
|
|
|
/**********************************************************************
|
|
|
|
* wow64_NtUnmapViewOfSection
|
|
|
|
*/
|
|
|
|
NTSTATUS WINAPI wow64_NtUnmapViewOfSection( UINT *args )
|
|
|
|
{
|
|
|
|
HANDLE process = get_handle( &args );
|
|
|
|
void *addr = get_ptr( &args );
|
|
|
|
|
|
|
|
return NtUnmapViewOfSection( process, addr );
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2021-07-27 12:15:07 +02:00
|
|
|
/**********************************************************************
|
|
|
|
* wow64_NtWow64AllocateVirtualMemory64
|
|
|
|
*/
|
|
|
|
NTSTATUS WINAPI wow64_NtWow64AllocateVirtualMemory64( UINT *args )
|
|
|
|
{
|
|
|
|
HANDLE process = get_handle( &args );
|
|
|
|
void **addr = get_ptr( &args );
|
|
|
|
ULONG_PTR zero_bits = get_ulong64( &args );
|
|
|
|
SIZE_T *size = get_ptr( &args );
|
|
|
|
ULONG type = get_ulong( &args );
|
|
|
|
ULONG protect = get_ulong( &args );
|
|
|
|
|
|
|
|
return NtAllocateVirtualMemory( process, addr, zero_bits, size, type, protect );
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/**********************************************************************
|
|
|
|
* wow64_NtWow64ReadVirtualMemory64
|
|
|
|
*/
|
|
|
|
NTSTATUS WINAPI wow64_NtWow64ReadVirtualMemory64( UINT *args )
|
|
|
|
{
|
|
|
|
HANDLE process = get_handle( &args );
|
|
|
|
void *addr = (void *)(ULONG_PTR)get_ulong64( &args );
|
|
|
|
void *buffer = get_ptr( &args );
|
|
|
|
SIZE_T size = get_ulong64( &args );
|
|
|
|
SIZE_T *ret_size = get_ptr( &args );
|
|
|
|
|
|
|
|
return NtReadVirtualMemory( process, addr, buffer, size, ret_size );
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/**********************************************************************
|
|
|
|
* wow64_NtWow64WriteVirtualMemory64
|
|
|
|
*/
|
|
|
|
NTSTATUS WINAPI wow64_NtWow64WriteVirtualMemory64( UINT *args )
|
|
|
|
{
|
|
|
|
HANDLE process = get_handle( &args );
|
|
|
|
void *addr = (void *)(ULONG_PTR)get_ulong64( &args );
|
|
|
|
const void *buffer = get_ptr( &args );
|
|
|
|
SIZE_T size = get_ulong64( &args );
|
|
|
|
SIZE_T *ret_size = get_ptr( &args );
|
|
|
|
|
|
|
|
return NtWriteVirtualMemory( process, addr, buffer, size, ret_size );
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2021-07-27 11:15:25 +02:00
|
|
|
/**********************************************************************
|
|
|
|
* wow64_NtWriteVirtualMemory
|
|
|
|
*/
|
|
|
|
NTSTATUS WINAPI wow64_NtWriteVirtualMemory( UINT *args )
|
|
|
|
{
|
|
|
|
HANDLE process = get_handle( &args );
|
|
|
|
void *addr = get_ptr( &args );
|
|
|
|
const void *buffer = get_ptr( &args );
|
|
|
|
SIZE_T size = get_ulong( &args );
|
|
|
|
ULONG *retlen = get_ptr( &args );
|
|
|
|
|
|
|
|
SIZE_T ret_size;
|
|
|
|
NTSTATUS status;
|
|
|
|
|
|
|
|
status = NtWriteVirtualMemory( process, addr, buffer, size, &ret_size );
|
|
|
|
put_size( retlen, ret_size );
|
|
|
|
return status;
|
|
|
|
}
|