ntuserpfn.c File Reference

#include <rtl.h>
#include <ndk/rtlfuncs.h>
#include <debug.h>

Include dependency graph for ntuserpfn.c:

Go to the source code of this file.

Classes
struct	_NTUSER_PFN

Macros
#define	NDEBUG

Typedefs
typedef struct _NTUSER_PFN	NTUSER_PFN
typedef struct _NTUSER_PFN *	PNTUSER_PFN

Functions
NTSTATUS NTAPI	RtlInitializeNtUserPfn (_In_reads_bytes_(SizeOfWndProcsA) LPCVOID WndProcsA, _In_ SIZE_T SizeOfWndProcsA, _In_reads_bytes_(SizeOfWndProcsW) LPCVOID WndProcsW, _In_ SIZE_T SizeOfWndProcsW, _In_reads_bytes_(SizeOfWorkerProcs) LPCVOID WorkerProcs, _In_ SIZE_T SizeOfWorkerProcs)
NTSTATUS NTAPI	RtlRetrieveNtUserPfn (_Outptr_ const VOID **NtdllWndProcsA, _Outptr_ const VOID **NtdllWndProcsW, _Outptr_ const VOID **NtdllWorkerProcs)

Variables
const NTUSER_PFN	RtlpNtUserPfns = { 0 }
const NTUSER_PFN	NtDllUserStubs
static BOOLEAN	NtUserPfnsInitialized

Macro Definition Documentation

NDEBUG

#define NDEBUG

Definition at line 11 of file ntuserpfn.c.

Typedef Documentation

NTUSER_PFN

typedef struct _NTUSER_PFN NTUSER_PFN

PNTUSER_PFN

typedef struct _NTUSER_PFN * PNTUSER_PFN

Function Documentation

RtlInitializeNtUserPfn()

NTSTATUS NTAPI RtlInitializeNtUserPfn	(	_In_reads_bytes_(SizeOfWndProcsA) LPCVOID	WndProcsA,
		_In_ SIZE_T	SizeOfWndProcsA,
		_In_reads_bytes_(SizeOfWndProcsW) LPCVOID	WndProcsW,
		_In_ SIZE_T	SizeOfWndProcsW,
		_In_reads_bytes_(SizeOfWorkerProcs) LPCVOID	WorkerProcs,
		_In_ SIZE_T	SizeOfWorkerProcs
	)

Definition at line 29 of file ntuserpfn.c.

{
    ULONG OldProtect;
    PVOID BaseAddress;
    SIZE_T RegionSize;
    NTSTATUS Status;
 
    /* Validate parameters */
    if ((SizeOfWndProcsA != sizeof(RtlpNtUserPfns.WndProcsA)) ||
        (SizeOfWndProcsW != sizeof(RtlpNtUserPfns.WndProcsW)) ||
        (SizeOfWorkerProcs != sizeof(RtlpNtUserPfns.WorkerProcs)))
    {
        return STATUS_INVALID_PARAMETER;
    }
 
    /* Check if already initialized */
    if (NtUserPfnsInitialized != FALSE)
    {
        return STATUS_INVALID_PARAMETER;
    }
 
    /* Change page protection, so we can set up the PFNs */
    BaseAddress = (PVOID)&RtlpNtUserPfns;
    RegionSize = sizeof(RtlpNtUserPfns);
    Status = NtProtectVirtualMemory(NtCurrentProcess(),
                                    &BaseAddress,
                                    &RegionSize,
                                    PAGE_READWRITE,
                                    &OldProtect);
    if (!NT_SUCCESS(Status))
    {
        return Status;
    }
 
    RtlCopyMemory((PVOID)RtlpNtUserPfns.WndProcsA, WndProcsA, SizeOfWndProcsA);
    RtlCopyMemory((PVOID)RtlpNtUserPfns.WndProcsW, WndProcsW, SizeOfWndProcsW);
    RtlCopyMemory((PVOID)RtlpNtUserPfns.WorkerProcs, WorkerProcs, SizeOfWorkerProcs);
 
    /* Restore original page protection */
    Status = NtProtectVirtualMemory(NtCurrentProcess(),
                                    &BaseAddress,
                                    &RegionSize,
                                    OldProtect,
                                    &OldProtect);
    if (!NT_SUCCESS(Status))
    {
        return Status;
    }
 
    NtUserPfnsInitialized = TRUE;
 
    return STATUS_SUCCESS;
}

RtlRetrieveNtUserPfn()

NTSTATUS NTAPI RtlRetrieveNtUserPfn	(	_Outptr_ const VOID **	NtdllWndProcsA,
		_Outptr_ const VOID **	NtdllWndProcsW,
		_Outptr_ const VOID **	NtdllWorkerProcs
	)

Definition at line 92 of file ntuserpfn.c.

{
    if (NtUserPfnsInitialized == FALSE)
    {
        return STATUS_INVALID_PARAMETER;
    }
 
    *NtdllWndProcsA = NtDllUserStubs.WndProcsA;
    *NtdllWndProcsW = NtDllUserStubs.WndProcsW;
    *NtdllWorkerProcs = NtDllUserStubs.WorkerProcs;
 
    return STATUS_SUCCESS;
}

Variable Documentation

NtDllUserStubs

const NTUSER_PFN NtDllUserStubs

extern

Referenced by RtlRetrieveNtUserPfn().

NtUserPfnsInitialized

BOOLEAN NtUserPfnsInitialized

static

Definition at line 25 of file ntuserpfn.c.

Referenced by RtlInitializeNtUserPfn(), and RtlRetrieveNtUserPfn().

RtlpNtUserPfns

const NTUSER_PFN RtlpNtUserPfns = { 0 }

Definition at line 21 of file ntuserpfn.c.

Referenced by RtlInitializeNtUserPfn().