/* * Copyright 1994 Eric Youndale & Erik Bos * Copyright 1995 Martin von Löwis * Copyright 1996-98 Marcus Meissner * * based on Eric Youndale's pe-test and: * * ftp.microsoft.com:/pub/developer/MSDN/CD8/PEFILE.ZIP * make that: * ftp.microsoft.com:/developr/MSDN/OctCD/PEFILE.ZIP */ /* Notes: * Before you start changing something in this file be aware of the following: * * - There are several functions called recursively. In a very subtle and * obscure way. DLLs can reference each other recursively etc. * - If you want to enhance, speed up or clean up something in here, think * twice WHY it is implemented in that strange way. There is usually a reason. * Though sometimes it might just be lazyness ;) * - In PE_MapImage, right before fixup_imports() all external and internal * state MUST be correct since this function can be called with the SAME image * AGAIN. (Thats recursion for you.) That means MODREF.module and * NE_MODULE.module32. * - No, you (usually) cannot use Linux mmap() to mmap() the images directly. * * The problem is, that there is not direct 1:1 mapping from a diskimage and * a memoryimage. The headers at the start are mapped linear, but the sections * are not. For x86 the sections are 512 byte aligned in file and 4096 byte * aligned in memory. Linux likes them 4096 byte aligned in memory (due to * x86 pagesize, this cannot be fixed without a rather large kernel rewrite) * and 'blocksize' file-aligned (offsets). Since we have 512/1024/2048 (CDROM) * and other byte blocksizes, we can't do this. However, this could be less * difficult to support... (See mm/filemap.c). * - All those function map things into a new addresspace. From the wrong * process and the wrong thread. So calling other API functions will mess * things up badly sometimes. */ #include #include #include #include #include #include #include #include #include #include "windows.h" #include "winbase.h" #include "callback.h" #include "file.h" #include "neexe.h" #include "peexe.h" #include "process.h" #include "thread.h" #include "pe_image.h" #include "module.h" #include "global.h" #include "task.h" #include "debug.h" static void PE_InitDLL(PE_MODREF* modref, DWORD type, LPVOID lpReserved); /* convert PE image VirtualAddress to Real Address */ #define RVA(x) ((unsigned int)load_addr+(unsigned int)(x)) void dump_exports( HMODULE32 hModule ) { char *Module; int i, j; u_short *ordinal; u_long *function,*functions; u_char **name; unsigned int load_addr = hModule; DWORD rva_start = PE_HEADER(hModule)->OptionalHeader .DataDirectory[IMAGE_DIRECTORY_ENTRY_EXPORT].VirtualAddress; DWORD rva_end = rva_start + PE_HEADER(hModule)->OptionalHeader .DataDirectory[IMAGE_DIRECTORY_ENTRY_EXPORT].Size; IMAGE_EXPORT_DIRECTORY *pe_exports = (IMAGE_EXPORT_DIRECTORY*)RVA(rva_start); Module = (char*)RVA(pe_exports->Name); TRACE(win32,"*******EXPORT DATA*******\n"); TRACE(win32,"Module name is %s, %ld functions, %ld names\n", Module, pe_exports->NumberOfFunctions, pe_exports->NumberOfNames); ordinal=(u_short*) RVA(pe_exports->AddressOfNameOrdinals); functions=function=(u_long*) RVA(pe_exports->AddressOfFunctions); name=(u_char**) RVA(pe_exports->AddressOfNames); TRACE(win32," Ord RVA Addr Name\n" ); for (i=0;iNumberOfFunctions;i++, function++) { if (!*function) continue; /* No such function */ if (TRACE_ON(win32)){ dbg_decl_str(win32, 1024); dsprintf(win32,"%4ld %08lx %08x", i + pe_exports->Base, *function, RVA(*function) ); /* Check if we have a name for it */ for (j = 0; j < pe_exports->NumberOfNames; j++) if (ordinal[j] == i) dsprintf(win32, " %s", (char*)RVA(name[j]) ); if ((*function >= rva_start) && (*function <= rva_end)) dsprintf(win32, " (forwarded -> %s)", (char *)RVA(*function)); TRACE(win32,"%s\n", dbg_str(win32)); } } } /* Look up the specified function or ordinal in the exportlist: * If it is a string: * - look up the name in the Name list. * - look up the ordinal with that index. * - use the ordinal as offset into the functionlist * If it is a ordinal: * - use ordinal-pe_export->Base as offset into the functionlist */ FARPROC32 PE_FindExportedFunction( PDB32 *process, HMODULE32 hModule, LPCSTR funcName) { IMAGE_EXPORT_DIRECTORY *exports; unsigned load_addr; u_short * ordinal; u_long * function; u_char ** name, *ename; int i; PE_MODREF *pem; u_long rva_start, rva_end, addr; char * forward; pem = process->modref_list; while (pem && (pem->module != hModule)) pem=pem->next; if (!pem) { fprintf(stderr,"No MODREF found for PE_MODULE %08x in process %p\n",hModule,process); return NULL; } load_addr = hModule; exports = pem->pe_export; if (HIWORD(funcName)) TRACE(win32,"(%s)\n",funcName); else TRACE(win32,"(%d)\n",(int)funcName); if (!exports) { fprintf(stderr,"Module %08x/MODREF %p doesn't have a exports table.\n",hModule,pem); return NULL; } ordinal = (u_short*) RVA(exports->AddressOfNameOrdinals); function= (u_long*) RVA(exports->AddressOfFunctions); name = (u_char **) RVA(exports->AddressOfNames); forward = NULL; rva_start = PE_HEADER(hModule)->OptionalHeader .DataDirectory[IMAGE_DIRECTORY_ENTRY_EXPORT].VirtualAddress; rva_end = rva_start + PE_HEADER(hModule)->OptionalHeader .DataDirectory[IMAGE_DIRECTORY_ENTRY_EXPORT].Size; if (HIWORD(funcName)) { for(i=0; iNumberOfNames; i++) { ename=(char*)RVA(*name); if(!strcmp(ename,funcName)) { addr = function[*ordinal]; if (!addr) return NULL; if ((addr < rva_start) || (addr >= rva_end)) return (FARPROC32)RVA(addr); forward = (char *)RVA(addr); break; } ordinal++; name++; } } else { if (LOWORD(funcName)-exports->Base > exports->NumberOfFunctions) { TRACE(win32," ordinal %d out of range!\n", LOWORD(funcName)); return NULL; } addr = function[(int)funcName-exports->Base]; if (!addr) return NULL; if ((addr < rva_start) || (addr >= rva_end)) return (FARPROC32)RVA(addr); forward = (char *)RVA(addr); } if (forward) { HMODULE32 hMod; char module[256]; char *end = strchr(forward, '.'); if (!end) return NULL; strncpy(module, forward, (end - forward)); module[end-forward] = 0; hMod = MODULE_HANDLEtoHMODULE32( MODULE_FindModule(module) ); return PE_FindExportedFunction( process, hMod, end + 1); } return NULL; } DWORD fixup_imports (PDB32 *process,PE_MODREF *pem) { IMAGE_IMPORT_DESCRIPTOR *pe_imp; int fixup_failed = 0; unsigned int load_addr = pem->module; int i; char *modname; if (pem->pe_export) modname = (char*) RVA(pem->pe_export->Name); else modname = ""; /* OK, now dump the import list */ TRACE(win32, "Dumping imports list\n"); /* first, count the number of imported non-internal modules */ pe_imp = pem->pe_import; if (!pe_imp) ERR(win32, "no import directory????\n"); /* FIXME: should terminate on 0 Characteristics */ for (i = 0; pe_imp->Name; pe_imp++) i++; /* load the imported modules. They are automatically * added to the modref list of the process. */ /* FIXME: should terminate on 0 Characteristics */ for (i = 0, pe_imp = pem->pe_import; pe_imp->Name; pe_imp++) { HMODULE32 res; PE_MODREF *xpem,**ypem; char *name = (char *) RVA(pe_imp->Name); /* don't use MODULE_Load, Win32 creates new task differently */ res = PE_LoadLibraryEx32A( name, process, 0, 0 ); if (res <= (HMODULE32) 32) { char buffer[1024]; /* Try with prepending the path of the current module */ if (GetModuleFileName32A( pem->module, buffer, sizeof (buffer))) { char *p; if (!(p = strrchr (buffer, '\\'))) p = buffer; strcpy (p + 1, name); res = PE_LoadLibraryEx32A( buffer, process, 0, 0 ); } else ERR(win32,"cannot find the module just loaded!\n"); } if (res <= (HMODULE32) 32) { fprintf (stderr, "Module %s not found\n", name); return res; } res = MODULE_HANDLEtoHMODULE32(res); xpem = pem->next; while (xpem) { if (xpem->module == res) break; xpem = xpem->next; } if (xpem) { /* It has been loaded *BEFORE* us, so we have to initialize * it before us. We cannot just link in the xpem before pem, * since xpem might reference more dlls which would be in the * wrong order after that. * Instead we link in pem right AFTER xpem, which should keep * the correct order. (I am not 100% sure about that.) */ /* unlink pem from chain */ ypem = &(process->modref_list); while (*ypem) { if ((*ypem)==pem) break; ypem = &((*ypem)->next); } *ypem = pem->next; /* link pem directly AFTER xpem */ pem->next = xpem->next; xpem->next = pem; } i++; } pe_imp = pem->pe_import; while (pe_imp->Name) { char *Module; IMAGE_IMPORT_BY_NAME *pe_name; LPIMAGE_THUNK_DATA import_list,thunk_list; HMODULE32 hImpModule; Module = (char *) RVA(pe_imp->Name); hImpModule = MODULE_HANDLEtoHMODULE32( MODULE_FindModule(Module) ); TRACE(win32, "%s\n", Module); /* FIXME: forwarder entries ... */ if (pe_imp->u.OriginalFirstThunk != 0) { /* original MS style */ TRACE(win32, "Microsoft style imports used\n"); import_list =(LPIMAGE_THUNK_DATA) RVA(pe_imp->u.OriginalFirstThunk); thunk_list = (LPIMAGE_THUNK_DATA) RVA(pe_imp->FirstThunk); while (import_list->u1.Ordinal) { if (IMAGE_SNAP_BY_ORDINAL(import_list->u1.Ordinal)) { int ordinal = IMAGE_ORDINAL(import_list->u1.Ordinal); TRACE(win32, "--- Ordinal %s,%d\n", Module, ordinal); thunk_list->u1.Function=(LPDWORD)PE_FindExportedFunction( process, hImpModule, (LPCSTR)ordinal); if (!thunk_list->u1.Function) { fprintf(stderr,"No implementation for %s.%d, setting to NULL\n", Module, ordinal); /* fixup_failed=1; */ } } else { /* import by name */ pe_name = (LPIMAGE_IMPORT_BY_NAME)RVA(import_list->u1.AddressOfData); TRACE(win32, "--- %s %s.%d\n", pe_name->Name, Module, pe_name->Hint); thunk_list->u1.Function=(LPDWORD)PE_FindExportedFunction( process, hImpModule, pe_name->Name); if (!thunk_list->u1.Function) { fprintf(stderr,"No implementation for %s.%d(%s), setting to NULL\n", Module,pe_name->Hint,pe_name->Name); /* fixup_failed=1; */ } } import_list++; thunk_list++; } } else { /* Borland style */ TRACE(win32, "Borland style imports used\n"); thunk_list = (LPIMAGE_THUNK_DATA) RVA(pe_imp->FirstThunk); while (thunk_list->u1.Ordinal) { if (IMAGE_SNAP_BY_ORDINAL(thunk_list->u1.Ordinal)) { /* not sure about this branch, but it seems to work */ int ordinal = IMAGE_ORDINAL(thunk_list->u1.Ordinal); TRACE(win32,"--- Ordinal %s.%d\n",Module,ordinal); thunk_list->u1.Function=(LPDWORD)PE_FindExportedFunction( process, hImpModule, (LPCSTR) ordinal); if (!thunk_list->u1.Function) { fprintf(stderr, "No implementation for %s.%d, setting to NULL\n", Module,ordinal); /* fixup_failed=1; */ } } else { pe_name=(LPIMAGE_IMPORT_BY_NAME) RVA(thunk_list->u1.AddressOfData); TRACE(win32,"--- %s %s.%d\n", pe_name->Name,Module,pe_name->Hint); thunk_list->u1.Function=(LPDWORD)PE_FindExportedFunction( process, hImpModule, pe_name->Name ); if (!thunk_list->u1.Function) { fprintf(stderr, "No implementation for %s.%d, setting to NULL\n", Module, pe_name->Hint); /* fixup_failed=1; */ } } thunk_list++; } } pe_imp++; } if (fixup_failed) return 22; return 0; } static int calc_vma_size( HMODULE32 hModule ) { int i,vma_size = 0; IMAGE_SECTION_HEADER *pe_seg = PE_SECTIONS(hModule); TRACE(win32, "Dump of segment table\n"); TRACE(win32, " Name VSz Vaddr SzRaw Fileadr *Reloc *Lineum #Reloc #Linum Char\n"); for (i = 0; i< PE_HEADER(hModule)->FileHeader.NumberOfSections; i++) { TRACE(win32, "%8s: %4.4lx %8.8lx %8.8lx %8.8lx %8.8lx %8.8lx %4.4x %4.4x %8.8lx\n", pe_seg->Name, pe_seg->Misc.VirtualSize, pe_seg->VirtualAddress, pe_seg->SizeOfRawData, pe_seg->PointerToRawData, pe_seg->PointerToRelocations, pe_seg->PointerToLinenumbers, pe_seg->NumberOfRelocations, pe_seg->NumberOfLinenumbers, pe_seg->Characteristics); vma_size = MAX(vma_size, pe_seg->VirtualAddress+pe_seg->SizeOfRawData); pe_seg++; } return vma_size; } static void do_relocations(PE_MODREF *pem) { int delta = pem->module - PE_HEADER(pem->module)->OptionalHeader.ImageBase; unsigned int load_addr= pem->module; IMAGE_BASE_RELOCATION *r = pem->pe_reloc; int hdelta = (delta >> 16) & 0xFFFF; int ldelta = delta & 0xFFFF; /* int reloc_size = */ if(delta == 0) /* Nothing to do */ return; while(r->VirtualAddress) { char *page = (char*) RVA(r->VirtualAddress); int count = (r->SizeOfBlock - 8)/2; int i; TRACE(fixup, "%x relocations for page %lx\n", count, r->VirtualAddress); /* patching in reverse order */ for(i=0;iTypeOffset[i] & 0xFFF; int type = r->TypeOffset[i] >> 12; TRACE(fixup,"patching %x type %x\n", offset, type); switch(type) { case IMAGE_REL_BASED_ABSOLUTE: break; case IMAGE_REL_BASED_HIGH: *(short*)(page+offset) += hdelta; break; case IMAGE_REL_BASED_LOW: *(short*)(page+offset) += ldelta; break; case IMAGE_REL_BASED_HIGHLOW: #if 1 *(int*)(page+offset) += delta; #else { int h=*(unsigned short*)(page+offset); int l=r->TypeOffset[++i]; *(unsigned int*)(page + offset) = (h<<16) + l + delta; } #endif break; case IMAGE_REL_BASED_HIGHADJ: fprintf(stderr, "Don't know what to do with IMAGE_REL_BASED_HIGHADJ\n"); break; case IMAGE_REL_BASED_MIPS_JMPADDR: fprintf(stderr, "Is this a MIPS machine ???\n"); break; default: fprintf(stderr, "Unknown fixup type\n"); break; } } r = (IMAGE_BASE_RELOCATION*)((char*)r + r->SizeOfBlock); } } /********************************************************************** * PE_LoadImage * Load one PE format DLL/EXE into memory * * Unluckily we can't just mmap the sections where we want them, for * (at least) Linux does only support offsets which are page-aligned. * * BUT we have to map the whole image anyway, for Win32 programs sometimes * want to access them. (HMODULE32 point to the start of it) */ static HMODULE32 PE_LoadImage( HFILE32 hFile ) { HMODULE32 hModule; HANDLE32 mapping; /* map the PE file somewhere */ mapping = CreateFileMapping32A( hFile, NULL, PAGE_READONLY | SEC_COMMIT, 0, 0, NULL ); if (!mapping) { fprintf( stderr, "PE_LoadImage: CreateFileMapping error %ld\n", GetLastError() ); return 0; } hModule = (HMODULE32)MapViewOfFile( mapping, FILE_MAP_READ, 0, 0, 0 ); CloseHandle( mapping ); if (!hModule) { fprintf( stderr, "PE_LoadImage: MapViewOfFile error %ld\n", GetLastError() ); return 0; } if (PE_HEADER(hModule)->Signature != IMAGE_NT_SIGNATURE) { fprintf(stderr,"image doesn't have PE signature, but 0x%08lx\n", PE_HEADER(hModule)->Signature ); goto error; } if (PE_HEADER(hModule)->FileHeader.Machine != IMAGE_FILE_MACHINE_I386) { fprintf(stderr,"trying to load PE image for unsupported architecture ("); switch (PE_HEADER(hModule)->FileHeader.Machine) { case IMAGE_FILE_MACHINE_UNKNOWN: fprintf(stderr,"Unknown"); break; case IMAGE_FILE_MACHINE_I860: fprintf(stderr,"I860"); break; case IMAGE_FILE_MACHINE_R3000: fprintf(stderr,"R3000"); break; case IMAGE_FILE_MACHINE_R4000: fprintf(stderr,"R4000"); break; case IMAGE_FILE_MACHINE_R10000: fprintf(stderr,"R10000"); break; case IMAGE_FILE_MACHINE_ALPHA: fprintf(stderr,"Alpha"); break; case IMAGE_FILE_MACHINE_POWERPC: fprintf(stderr,"PowerPC"); break; default: fprintf(stderr,"Unknown-%04x", PE_HEADER(hModule)->FileHeader.Machine); break; } fprintf(stderr,")\n"); goto error; } return hModule; error: UnmapViewOfFile( (LPVOID)hModule ); return 0; } /********************************************************************** * This maps a loaded PE dll into the address space of the specified process. */ static BOOL32 PE_MapImage( HMODULE32 *phModule, PDB32 *process, OFSTRUCT *ofs, DWORD flags ) { PE_MODREF *pem; int i, result; DWORD load_addr; IMAGE_DATA_DIRECTORY dir; char *modname; int vma_size; HMODULE32 hModule = *phModule; IMAGE_SECTION_HEADER *pe_seg; IMAGE_DOS_HEADER *dos_header = (IMAGE_DOS_HEADER *)hModule; IMAGE_NT_HEADERS *nt_header = PE_HEADER(hModule); pem = (PE_MODREF*)HeapAlloc(process->heap,HEAP_ZERO_MEMORY, sizeof(*pem)); /* NOTE: fixup_imports takes care of the correct order */ pem->next = process->modref_list; process->modref_list = pem; if (!(nt_header->FileHeader.Characteristics & IMAGE_FILE_DLL)) { if (process->exe_modref) fprintf(stderr,"overwriting old exe_modref... arrgh\n"); process->exe_modref = pem; } load_addr = nt_header->OptionalHeader.ImageBase; vma_size = calc_vma_size( hModule ); TRACE(win32, "Load addr is %lx\n",load_addr); load_addr = (DWORD)VirtualAlloc( (void*)load_addr, vma_size, MEM_RESERVE | MEM_COMMIT, PAGE_EXECUTE_READWRITE ); if (load_addr == 0) { load_addr = (DWORD)VirtualAlloc( NULL, vma_size, MEM_RESERVE | MEM_COMMIT, PAGE_EXECUTE_READWRITE ); } /* *phModule is the module32 entry in the NE_MODULE. We need to * change it here, since it can get referenced by fixup_imports() */ pem->module = *phModule = (HMODULE32)load_addr; TRACE(win32, "Load addr is really %lx, range %x\n", load_addr, vma_size); /* Store the NT header at the load addr * (FIXME: should really use mmap) */ *(IMAGE_DOS_HEADER *)load_addr = *dos_header; *(IMAGE_NT_HEADERS *)(load_addr + dos_header->e_lfanew) = *nt_header; pe_seg = PE_SECTIONS(hModule); for (i = 0; i < nt_header->FileHeader.NumberOfSections; i++, pe_seg++) { /* memcpy only non-BSS segments */ /* FIXME: this should be done by mmap(..MAP_PRIVATE|MAP_FIXED..) * but it is not possible for (at least) Linux needs * a page-aligned offset. */ if(!(pe_seg->Characteristics & IMAGE_SCN_CNT_UNINITIALIZED_DATA)) memcpy((char*)RVA(pe_seg->VirtualAddress), (char*)(hModule + pe_seg->PointerToRawData), pe_seg->SizeOfRawData ); result = RVA (pe_seg->VirtualAddress); #if 1 /* not needed, memory is zero */ if(strcmp(pe_seg->Name, ".bss") == 0) memset((void *)result, 0, pe_seg->Misc.VirtualSize ? pe_seg->Misc.VirtualSize : pe_seg->SizeOfRawData); #endif if(strcmp(pe_seg->Name, ".idata") == 0) pem->pe_import = (LPIMAGE_IMPORT_DESCRIPTOR) result; if(strcmp(pe_seg->Name, ".edata") == 0) pem->pe_export = (LPIMAGE_EXPORT_DIRECTORY) result; if(strcmp(pe_seg->Name, ".rsrc") == 0) pem->pe_resource = (LPIMAGE_RESOURCE_DIRECTORY) result; if(strcmp(pe_seg->Name, ".reloc") == 0) pem->pe_reloc = (LPIMAGE_BASE_RELOCATION) result; } /* There is word that the actual loader does not care about the section names, and only goes for the DataDirectory */ dir=nt_header->OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_EXPORT]; if(dir.Size) { if(pem->pe_export && (int)pem->pe_export!=RVA(dir.VirtualAddress)) fprintf(stderr,"wrong export directory??\n"); /* always trust the directory */ pem->pe_export = (LPIMAGE_EXPORT_DIRECTORY) RVA(dir.VirtualAddress); } dir=nt_header->OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_IMPORT]; if(dir.Size) { /* if(pem->pe_import && (int)pem->pe_import!=RVA(dir.VirtualAddress)) fprintf(stderr,"wrong import directory??\n"); */ pem->pe_import = (LPIMAGE_IMPORT_DESCRIPTOR) RVA(dir.VirtualAddress); } dir=nt_header->OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_RESOURCE]; if(dir.Size) { if(pem->pe_resource && (int)pem->pe_resource!=RVA(dir.VirtualAddress)) fprintf(stderr,"wrong resource directory??\n"); pem->pe_resource = (LPIMAGE_RESOURCE_DIRECTORY) RVA(dir.VirtualAddress); } if(nt_header->OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_EXCEPTION].Size) FIXME(win32,"Exception directory ignored\n"); if(nt_header->OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_SECURITY].Size) FIXME(win32,"Security directory ignored\n"); dir=nt_header->OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_BASERELOC]; if(dir.Size) { if(pem->pe_reloc && (int)pem->pe_reloc!= RVA(dir.VirtualAddress)) fprintf(stderr,"wrong relocation list??\n"); pem->pe_reloc = (void *) RVA(dir.VirtualAddress); } if(nt_header->OptionalHeader.DataDirectory [IMAGE_DIRECTORY_ENTRY_COPYRIGHT].Size) FIXME(win32,"Copyright string ignored\n"); if(nt_header->OptionalHeader.DataDirectory [IMAGE_DIRECTORY_ENTRY_GLOBALPTR].Size) FIXME(win32,"Global Pointer (MIPS) ignored\n"); if(nt_header->OptionalHeader.DataDirectory [IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG].Size) FIXME(win32,"Load Configuration directory ignored\n"); if(nt_header->OptionalHeader.DataDirectory [IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT].Size) FIXME(win32,"Bound Import directory ignored\n"); if(nt_header->OptionalHeader.DataDirectory [IMAGE_DIRECTORY_ENTRY_IAT].Size) FIXME(win32,"Import Address Table directory ignored\n"); if(nt_header->OptionalHeader.DataDirectory[13].Size) FIXME(win32,"Unknown directory 13 ignored\n"); if(nt_header->OptionalHeader.DataDirectory[14].Size) FIXME(win32,"Unknown directory 14 ignored\n"); if(nt_header->OptionalHeader.DataDirectory[15].Size) FIXME(win32,"Unknown directory 15 ignored\n"); if(pem->pe_reloc) do_relocations(pem); if(pem->pe_export) dump_exports(pem->module); if(pem->pe_import) { if (fixup_imports(process,pem)) { PE_MODREF **xpem; /* remove entry from modref chain */ xpem = &(process->modref_list); while (*xpem) { if (*xpem==pem) { *xpem = pem->next; break; } xpem = &((*xpem)->next); } /* FIXME: there are several more dangling references * left. Including dlls loaded by this dll before the * failed one. Unrolling is rather difficult with the * current structure and we can leave it them lying * around with no problems, so we don't care */ return 0; } } if (pem->pe_export) modname = (char*)RVA(pem->pe_export->Name); else { char *s; modname = s = ofs->szPathName; while ((s=strchr(modname,'\\'))) modname = s+1; if ((s=strchr(modname,'.'))) *s='\0'; } /* Now that we got everything at the right address, * we can unmap the previous module */ UnmapViewOfFile( (LPVOID)hModule ); return 1; } /****************************************************************************** * The PE Library Loader frontend. * FIXME: handle the flags. * internal module handling should be made better here (and in builtin.c) */ HMODULE32 PE_LoadLibraryEx32A (LPCSTR name, PDB32 *process, HFILE32 hFile, DWORD flags) { OFSTRUCT ofs; HMODULE32 hModule; NE_MODULE *pModule; PE_MODREF *pem; if ((hModule = MODULE_FindModule( name ))) { /* the .DLL is either loaded or internal */ hModule = MODULE_HANDLEtoHMODULE32(hModule); if (!HIWORD(hModule)) /* internal (or bad) */ return hModule; /* check if this module is already mapped */ pem = process->modref_list; pModule = MODULE_GetPtr(hModule); while (pem) { if (pem->module == hModule) { pModule->count++; return hModule; } pem = pem->next; } if (pModule->flags & NE_FFLAGS_BUILTIN) { IMAGE_DOS_HEADER *dh; IMAGE_NT_HEADERS *nh; IMAGE_SECTION_HEADER *sh; /* we only come here if we already have 'loaded' the * internal dll but in another process. Just create * a PE_MODREF and return. */ pem = (PE_MODREF*)HeapAlloc(process->heap, HEAP_ZERO_MEMORY,sizeof(*pem)); pem->module = hModule; dh = (IMAGE_DOS_HEADER*)pem->module; nh = (IMAGE_NT_HEADERS*)(dh+1); sh = (IMAGE_SECTION_HEADER*)(nh+1); pem->pe_export = (IMAGE_EXPORT_DIRECTORY*)(sh+2); pem->next = process->modref_list; process->modref_list = pem; return hModule; } } else { /* try to load builtin, enabled modules first */ if ((hModule = BUILTIN32_LoadModule( name, FALSE, process ))) return MODULE_HANDLEtoHMODULE32( hModule ); /* try to open the specified file */ if (HFILE_ERROR32==(hFile=OpenFile32(name,&ofs,OF_READ))) { /* Now try the built-in even if disabled */ if ((hModule = BUILTIN32_LoadModule( name, TRUE, process ))) { fprintf( stderr, "Warning: could not load Windows DLL '%s', using built-in module.\n", name ); return MODULE_HANDLEtoHMODULE32( hModule ); } return 1; } if ((hModule = MODULE_CreateDummyModule( &ofs )) < 32) { _lclose32(hFile); return hModule; } pModule = (NE_MODULE *)GlobalLock16( hModule ); pModule->flags = NE_FFLAGS_WIN32; pModule->module32 = PE_LoadImage( hFile ); CloseHandle( hFile ); if (pModule->module32 < 32) return 21; } /* recurse */ if (!PE_MapImage( &(pModule->module32), process, &ofs,flags)) { /* should free this module and the already referenced ones */ return 0; } return pModule->module32; } /***************************************************************************** * Load the PE main .EXE. All other loading is done by PE_LoadLibraryEx32A * FIXME: this function should use PE_LoadLibraryEx32A, but currently can't * due to the PROCESS_Create stuff. */ HINSTANCE16 PE_LoadModule( HFILE32 hFile, OFSTRUCT *ofs, LPCSTR cmd_line, LPCSTR env, UINT16 show_cmd ) { HMODULE16 hModule16; HMODULE32 hModule32; HINSTANCE16 hInstance; NE_MODULE *pModule; THDB *thdb = THREAD_Current(); if ((hModule16 = MODULE_CreateDummyModule( ofs )) < 32) return hModule16; pModule = (NE_MODULE *)GlobalLock16( hModule16 ); pModule->flags = NE_FFLAGS_WIN32; pModule->module32 = hModule32 = PE_LoadImage( hFile ); if (hModule32 < 32) return 21; hInstance = MODULE_CreateInstance( hModule16, (cmd_line == NULL) ); if (cmd_line && !(PE_HEADER(hModule32)->FileHeader.Characteristics & IMAGE_FILE_DLL)) { PDB32 *pdb = PROCESS_Create( pModule, cmd_line, env, hInstance, 0, show_cmd ); TDB *pTask = (TDB *)GlobalLock16( pdb->task ); thdb = pTask->thdb; } if (!PE_MapImage( &(pModule->module32), thdb->process, ofs, 0 )) { /* FIXME: should destroy the task created and free referenced stuff */ return 0; } /* FIXME: Yuck. Is there no other good place to do that? */ PE_InitTls( thdb ); return hInstance; } int PE_UnloadImage( HMODULE32 hModule ) { fprintf(stderr,"PEunloadImage() called!\n"); /* free resources, image, unmap */ return 1; } /* Called if the library is loaded or freed. * NOTE: if a thread attaches a DLL, the current thread will only do * DLL_PROCESS_ATTACH. Only new created threads do DLL_THREAD_ATTACH * (SDK) */ static void PE_InitDLL(PE_MODREF *pem, DWORD type,LPVOID lpReserved) { if (type==DLL_PROCESS_ATTACH) pem->flags |= PE_MODREF_PROCESS_ATTACHED; /* DLL_ATTACH_PROCESS: * lpreserved is NULL for dynamic loads, not-NULL for static loads * DLL_DETACH_PROCESS: * lpreserved is NULL if called by FreeLibrary, not-NULL otherwise * the SDK doesn't mention anything for DLL_THREAD_* */ /* Is this a library? And has it got an entrypoint? */ if ((PE_HEADER(pem->module)->FileHeader.Characteristics & IMAGE_FILE_DLL) && (PE_HEADER(pem->module)->OptionalHeader.AddressOfEntryPoint) ) { FARPROC32 entry = (FARPROC32)RVA_PTR( pem->module, OptionalHeader.AddressOfEntryPoint ); TRACE(relay, "CallTo32(entryproc=%p,module=%08x,type=%ld,res=%p)\n", entry, pem->module, type, lpReserved ); entry( pem->module, type, lpReserved ); } } /* Call the DLLentry function of all dlls used by that process. * (NOTE: this may recursively call this function (if a library calls * LoadLibrary) ... but it won't matter) */ void PE_InitializeDLLs(PDB32 *process,DWORD type,LPVOID lpReserved) { PE_MODREF *pem; pem = process->modref_list; while (pem) { if (pem->flags & PE_MODREF_NO_DLL_CALLS) { pem = pem->next; continue; } if (type==DLL_PROCESS_ATTACH) { if (pem->flags & PE_MODREF_PROCESS_ATTACHED) { pem = pem->next; continue; } } PE_InitDLL( pem, type, lpReserved ); pem = pem->next; } } void PE_InitTls(THDB *thdb) { /* FIXME: tls callbacks ??? */ PE_MODREF *pem; IMAGE_NT_HEADERS *peh; DWORD size,datasize; LPVOID mem; LPIMAGE_TLS_DIRECTORY pdir; PDB32 *pdb = thdb->process; pem = pdb->modref_list; while (pem) { peh = PE_HEADER(pem->module); if (!peh->OptionalHeader.DataDirectory[IMAGE_FILE_THREAD_LOCAL_STORAGE].VirtualAddress) { pem = pem->next; continue; } pdir = (LPVOID)(pem->module + peh->OptionalHeader. DataDirectory[IMAGE_FILE_THREAD_LOCAL_STORAGE].VirtualAddress); if (!(pem->flags & PE_MODREF_TLS_ALLOCED)) { pem->tlsindex = THREAD_TlsAlloc(thdb); *(pdir->AddressOfIndex)=pem->tlsindex; } pem->flags |= PE_MODREF_TLS_ALLOCED; datasize= pdir->EndAddressOfRawData-pdir->StartAddressOfRawData; size = datasize + pdir->SizeOfZeroFill; mem=VirtualAlloc(0,size,MEM_RESERVE|MEM_COMMIT,PAGE_READWRITE); memcpy(mem,(LPVOID) pdir->StartAddressOfRawData, datasize); /* don't use TlsSetValue, we are in the wrong thread */ thdb->tls_array[pem->tlsindex] = mem; pem=pem->next; } } /**************************************************************************** * DisableThreadLibraryCalls (KERNEL32.74) * Don't call DllEntryPoint for DLL_THREAD_{ATTACH,DETACH} if set. */ BOOL32 WINAPI DisableThreadLibraryCalls(HMODULE32 hModule) { PDB32 *process = PROCESS_Current(); PE_MODREF *pem = process->modref_list; while (pem) { if (pem->module == hModule) pem->flags|=PE_MODREF_NO_DLL_CALLS; pem = pem->next; } return TRUE; }