2 * 386-specific Win16 dll<->dll snooping functions
4 * Copyright 1998 Marcus Meissner
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2.1 of the License, or (at your option) any later version.
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, write to the Free Software
18 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
22 #include "wine/port.h"
31 #include "wine/winbase16.h"
32 #include "wine/library.h"
33 #include "kernel_private.h"
35 #include "stackframe.h"
36 #include "builtin16.h"
38 #include "wine/debug.h"
40 WINE_DEFAULT_DEBUG_CHANNEL(snoop
);
46 extern int SNOOP16_ShowDebugmsgSnoop(const char *dll
,int ord
,const char *fname
);
48 void WINAPI
SNOOP16_Entry(FARPROC proc
, LPBYTE args
, CONTEXT86
*context
);
49 void WINAPI
SNOOP16_Return(FARPROC proc
, LPBYTE args
, CONTEXT86
*context
);
51 typedef struct tagSNOOP16_FUN
{
53 BYTE lcall
; /* 0x9a call absolute with segment */
61 typedef struct tagSNOOP16_DLL
{
65 struct tagSNOOP16_DLL
*next
;
69 typedef struct tagSNOOP16_RETURNENTRY
{
71 BYTE lcall
; /* 0x9a call absolute with segment */
78 WORD
*args
; /* saved args across a stdcall */
79 } SNOOP16_RETURNENTRY
;
81 typedef struct tagSNOOP16_RETURNENTRIES
{
82 SNOOP16_RETURNENTRY entry
[65500/sizeof(SNOOP16_RETURNENTRY
)];
84 struct tagSNOOP16_RETURNENTRIES
*next
;
85 } SNOOP16_RETURNENTRIES
;
87 typedef struct tagSNOOP16_RELAY
{
88 WORD pushbp
; /* 0x5566 */
89 BYTE pusheax
; /* 0x50 */
90 WORD pushax
; /* 0x5066 */
91 BYTE pushl
; /* 0x68 */
92 DWORD realfun
; /* SNOOP16_Return */
93 BYTE lcall
; /* 0x9a call absolute with segment */
96 WORD lret
; /* 0xcb66 */
101 static SNOOP16_DLL
*firstdll
= NULL
;
102 static SNOOP16_RETURNENTRIES
*firstrets
= NULL
;
103 static SNOOP16_RELAY
*snr
;
104 static HANDLE16 xsnr
= 0;
107 SNOOP16_RegisterDLL(NE_MODULE
*pModule
,LPCSTR name
) {
108 SNOOP16_DLL
**dll
= &(firstdll
);
111 if (!TRACE_ON(snoop
)) return;
113 TRACE("hmod=%x, name=%s\n", pModule
->self
, name
);
116 xsnr
=GLOBAL_Alloc(GMEM_ZEROINIT
,2*sizeof(*snr
),0,WINE_LDT_FLAGS_CODE
|WINE_LDT_FLAGS_32BIT
);
117 snr
= GlobalLock16(xsnr
);
118 snr
[0].pushbp
= 0x5566;
119 snr
[0].pusheax
= 0x50;
120 snr
[0].pushax
= 0x5066;
122 snr
[0].realfun
= (DWORD
)SNOOP16_Entry
;
124 snr
[0].callfromregs
= (DWORD
)__wine_call_from_16_regs
;
125 snr
[0].seg
= wine_get_cs();
126 snr
[0].lret
= 0xcb66;
128 snr
[1].pushbp
= 0x5566;
129 snr
[1].pusheax
= 0x50;
130 snr
[1].pushax
= 0x5066;
132 snr
[1].realfun
= (DWORD
)SNOOP16_Return
;
134 snr
[1].callfromregs
= (DWORD
)__wine_call_from_16_regs
;
135 snr
[1].seg
= wine_get_cs();
136 snr
[1].lret
= 0xcb66;
139 if ((*dll
)->hmod
== pModule
->self
)
141 /* another dll, loaded at the same address */
142 GlobalUnlock16((*dll
)->funhandle
);
143 GlobalFree16((*dll
)->funhandle
);
146 dll
= &((*dll
)->next
);
150 *dll
= HeapReAlloc(GetProcessHeap(), HEAP_ZERO_MEMORY
, *dll
, sizeof(SNOOP16_DLL
)+strlen(name
));
152 *dll
= HeapAlloc(GetProcessHeap(), HEAP_ZERO_MEMORY
, sizeof(SNOOP16_DLL
)+strlen(name
));
155 (*dll
)->hmod
= pModule
->self
;
156 if ((s
=strrchr(name
,'\\')))
158 strcpy( (*dll
)->name
, name
);
159 if ((s
=strrchr((*dll
)->name
,'.')))
161 (*dll
)->funhandle
= GlobalHandleToSel16(GLOBAL_Alloc(GMEM_ZEROINIT
,65535,0,WINE_LDT_FLAGS_CODE
));
162 (*dll
)->funs
= GlobalLock16((*dll
)->funhandle
);
164 HeapFree(GetProcessHeap(),0,*dll
);
165 FIXME("out of memory\n");
171 SNOOP16_GetProcAddress16(HMODULE16 hmod
,DWORD ordinal
,FARPROC16 origfun
) {
172 SNOOP16_DLL
*dll
= firstdll
;
174 NE_MODULE
*pModule
= NE_GetPtr(hmod
);
178 if (!TRACE_ON(snoop
) || !pModule
|| !HIWORD(origfun
))
180 if (!*(LPBYTE
)MapSL((SEGPTR
)origfun
)) /* 0x00 is an imposs. opcode, poss. dataref. */
183 if (hmod
== dll
->hmod
)
187 if (!dll
) /* probably internal */
189 if (ordinal
>65535/sizeof(SNOOP16_FUN
))
191 fun
= dll
->funs
+ordinal
;
194 fun
->snr
= MAKELONG(0,xsnr
);
195 fun
->origfun
= origfun
;
197 return (FARPROC16
)(SEGPTR
)MAKELONG(((char*)fun
-(char*)dll
->funs
),dll
->funhandle
);
198 cpnt
= (unsigned char *)pModule
+ pModule
->name_table
;
200 cpnt
+= *cpnt
+ 1 + sizeof(WORD
);
201 if (*(WORD
*)(cpnt
+*cpnt
+1) == ordinal
) {
202 sprintf(name
,"%.*s",*cpnt
,cpnt
+1);
206 /* Now search the non-resident names table */
208 if (!*cpnt
&& pModule
->nrname_handle
) {
209 cpnt
= (char *)GlobalLock16( pModule
->nrname_handle
);
211 cpnt
+= *cpnt
+ 1 + sizeof(WORD
);
212 if (*(WORD
*)(cpnt
+*cpnt
+1) == ordinal
) {
213 sprintf(name
,"%.*s",*cpnt
,cpnt
+1);
220 fun
->name
= HeapAlloc(GetProcessHeap(),0,strlen(name
)+1);
221 strcpy( fun
->name
, name
);
224 fun
->name
= HeapAlloc(GetProcessHeap(),HEAP_ZERO_MEMORY
,1); /* empty string */
226 if (!SNOOP16_ShowDebugmsgSnoop(dll
->name
, ordinal
, fun
->name
))
229 /* more magic. do not try to snoop thunk data entries (MMSYSTEM) */
230 if (strchr(fun
->name
,'_')) {
231 char *s
=strchr(fun
->name
,'_');
233 if (!strncasecmp(s
,"_thunkdata",10)) {
234 HeapFree(GetProcessHeap(),0,fun
->name
);
240 fun
->snr
= MAKELONG(0,xsnr
);
241 fun
->origfun
= origfun
;
243 return (FARPROC16
)(SEGPTR
)MAKELONG(((char*)fun
-(char*)dll
->funs
),dll
->funhandle
);
246 #define CALLER1REF (*(DWORD*)(MapSL( MAKESEGPTR(context->SegSs,LOWORD(context->Esp)+4))))
247 void WINAPI
SNOOP16_Entry(FARPROC proc
, LPBYTE args
, CONTEXT86
*context
) {
249 DWORD entry
=(DWORD
)MapSL( MAKESEGPTR(context
->SegCs
,LOWORD(context
->Eip
)) )-5;
250 WORD xcs
= context
->SegCs
;
251 SNOOP16_DLL
*dll
= firstdll
;
252 SNOOP16_FUN
*fun
= NULL
;
253 SNOOP16_RETURNENTRIES
**rets
= &firstrets
;
254 SNOOP16_RETURNENTRY
*ret
;
258 if (xcs
== dll
->funhandle
) {
259 fun
= (SNOOP16_FUN
*)entry
;
260 ordinal
= fun
-dll
->funs
;
266 FIXME("entrypoint 0x%08lx not found\n",entry
);
270 for (i
=0;i
<sizeof((*rets
)->entry
)/sizeof((*rets
)->entry
[0]);i
++)
271 if (!(*rets
)->entry
[i
].origreturn
)
273 if (i
!=sizeof((*rets
)->entry
)/sizeof((*rets
)->entry
[0]))
275 rets
= &((*rets
)->next
);
278 HANDLE16 hand
= GlobalHandleToSel16(GLOBAL_Alloc(GMEM_ZEROINIT
,65535,0,WINE_LDT_FLAGS_CODE
));
279 *rets
= GlobalLock16(hand
);
280 (*rets
)->rethandle
= hand
;
281 i
= 0; /* entry 0 is free */
283 ret
= &((*rets
)->entry
[i
]);
285 ret
->snr
= MAKELONG(sizeof(SNOOP16_RELAY
),xsnr
);
286 ret
->origreturn
= (FARPROC16
)CALLER1REF
;
287 CALLER1REF
= MAKELONG((char*)&(ret
->lcall
)-(char*)((*rets
)->entry
),(*rets
)->rethandle
);
290 ret
->ordinal
= ordinal
;
291 ret
->origSP
= LOWORD(context
->Esp
);
293 context
->Eip
= LOWORD(fun
->origfun
);
294 context
->SegCs
= HIWORD(fun
->origfun
);
297 DPRINTF("%04lx:CALL %s.%ld: %s(",GetCurrentThreadId(), dll
->name
,ordinal
,fun
->name
);
298 if (fun
->nrofargs
>0) {
302 DPRINTF("%04x%s",*(WORD
*)((char *) MapSL( MAKESEGPTR(context
->SegSs
,LOWORD(context
->Esp
)) )+8+sizeof(WORD
)*i
),i
?",":"");
303 if (max
!=fun
->nrofargs
)
305 } else if (fun
->nrofargs
<0) {
306 DPRINTF("<unknown, check return>");
307 ret
->args
= HeapAlloc(GetProcessHeap(),0,16*sizeof(WORD
));
308 memcpy(ret
->args
,(LPBYTE
)((char *) MapSL( MAKESEGPTR(context
->SegSs
,LOWORD(context
->Esp
)) )+8),sizeof(WORD
)*16);
310 DPRINTF(") ret=%04x:%04x\n",HIWORD(ret
->origreturn
),LOWORD(ret
->origreturn
));
313 void WINAPI
SNOOP16_Return(FARPROC proc
, LPBYTE args
, CONTEXT86
*context
) {
314 SNOOP16_RETURNENTRY
*ret
= (SNOOP16_RETURNENTRY
*)((char *) MapSL( MAKESEGPTR(context
->SegCs
,LOWORD(context
->Eip
)) )-5);
316 /* We haven't found out the nrofargs yet. If we called a cdecl
317 * function it is too late anyway and we can just set '0' (which
318 * will be the difference between orig and current SP
319 * If pascal -> everything ok.
321 if (ret
->dll
->funs
[ret
->ordinal
].nrofargs
<0) {
322 ret
->dll
->funs
[ret
->ordinal
].nrofargs
=(LOWORD(context
->Esp
)-ret
->origSP
-4)/2;
324 context
->Eip
= LOWORD(ret
->origreturn
);
325 context
->SegCs
= HIWORD(ret
->origreturn
);
326 DPRINTF("%04lx:RET %s.%ld: %s(",
327 GetCurrentThreadId(),ret
->dll
->name
,ret
->ordinal
,
328 ret
->dll
->funs
[ret
->ordinal
].name
);
332 max
= ret
->dll
->funs
[ret
->ordinal
].nrofargs
;
339 DPRINTF("%04x%s",ret
->args
[i
],i
?",":"");
340 if (max
!=ret
->dll
->funs
[ret
->ordinal
].nrofargs
)
342 HeapFree(GetProcessHeap(),0,ret
->args
);
345 DPRINTF(") retval = %04x:%04x ret=%04x:%04x\n",
346 (WORD
)context
->Edx
,(WORD
)context
->Eax
,
347 HIWORD(ret
->origreturn
),LOWORD(ret
->origreturn
));
348 ret
->origreturn
= NULL
; /* mark as empty */
350 #else /* !__i386__ */
351 void SNOOP16_RegisterDLL(NE_MODULE
*pModule
,LPCSTR name
) {
352 if (!TRACE_ON(snoop
)) return;
353 FIXME("snooping works only on i386 for now.\n");
356 FARPROC16
SNOOP16_GetProcAddress16(HMODULE16 hmod
,DWORD ordinal
,FARPROC16 origfun
) {
359 #endif /* !__i386__ */