ReceiveTempSMS
/
Sweden-Number
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

ntoskrnl.exe: Implement PsGetProcessSectionBaseAddress() function. 

Signed-off-by: Paul Gofman <pgofman@codeweavers.com>
Signed-off-by: Alexandre Julliard <julliard@winehq.org>
This commit is contained in:
Paul Gofman 2020-05-31 18:26:20 +03:00 committed by Alexandre Julliard
parent f3faf6b2ad
commit e58073dbf8
3 changed files with 32 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
dlls/ntoskrnl.exe/ntoskrnl.c
View File

@ -4248,3 +4248,33 @@ void WINAPI KeSignalCallDpcDone(void *barrier)
{
InterlockedDecrement((LONG *)barrier);
}
void * WINAPI PsGetProcessSectionBaseAddress(PEPROCESS process)
{
void *image_base;
NTSTATUS status;
SIZE_T size;
HANDLE h;
TRACE("process %p.\n", process);
if ((status = ObOpenObjectByPointer(process, 0, NULL, PROCESS_ALL_ACCESS, NULL, KernelMode, &h)))
{
WARN("Error opening process object, status %#x.\n", status);
return NULL;
}
status = NtReadVirtualMemory(h, &process->info.PebBaseAddress->ImageBaseAddress,
&image_base, sizeof(image_base), &size);
NtClose(h);
if (status || size != sizeof(image_base))
{
WARN("Error reading process memory, status %#x, size %lu.\n", status, size);
return NULL;
}
TRACE("returning %p.\n", image_base);
return image_base;
}

2
dlls/ntoskrnl.exe/ntoskrnl.exe.spec
View File

@ -904,7 +904,7 @@
@ stub PsGetProcessJob
@ stub PsGetProcessPeb
@ stub PsGetProcessPriorityClass
@ stub PsGetProcessSectionBaseAddress
@ stdcall PsGetProcessSectionBaseAddress(ptr)
@ stub PsGetProcessSecurityPort
@ stub PsGetProcessSessionId
@ stub PsGetProcessWin32Process

1
include/ddk/ntddk.h
View File

@ -229,6 +229,7 @@ NTSTATUS WINAPI KeExpandKernelStackAndCallout(PEXPAND_STACK_CALLOUT,void*,SIZE_
void WINAPI KeSetTargetProcessorDpc(PRKDPC,CCHAR);
BOOLEAN WINAPI MmIsAddressValid(void *);
HANDLE WINAPI PsGetProcessId(PEPROCESS);
void * WINAPI PsGetProcessSectionBaseAddress(PEPROCESS);
HANDLE WINAPI PsGetThreadId(PETHREAD);
HANDLE WINAPI PsGetThreadProcessId(PETHREAD);
NTSTATUS WINAPI PsRemoveLoadImageNotifyRoutine(PLOAD_IMAGE_NOTIFY_ROUTINE);