[15551] | 1 | ; $Id: SUPDrvA-win.asm 67954 2017-07-13 21:06:09Z vboxsync $
|
---|
| 2 | ;; @file
|
---|
| 3 | ; VirtualBox Support Driver - Windows NT specific assembly parts.
|
---|
| 4 | ;
|
---|
| 5 |
|
---|
| 6 | ;
|
---|
[62490] | 7 | ; Copyright (C) 2006-2016 Oracle Corporation
|
---|
[15551] | 8 | ;
|
---|
| 9 | ; This file is part of VirtualBox Open Source Edition (OSE), as
|
---|
| 10 | ; available from http://www.virtualbox.org. This file is free software;
|
---|
| 11 | ; you can redistribute it and/or modify it under the terms of the GNU
|
---|
| 12 | ; General Public License (GPL) as published by the Free Software
|
---|
| 13 | ; Foundation, in version 2 as it comes in the "COPYING" file of the
|
---|
| 14 | ; VirtualBox OSE distribution. VirtualBox OSE is distributed in the
|
---|
| 15 | ; hope that it will be useful, but WITHOUT ANY WARRANTY of any kind.
|
---|
| 16 | ;
|
---|
| 17 | ; The contents of this file may alternatively be used under the terms
|
---|
| 18 | ; of the Common Development and Distribution License Version 1.0
|
---|
| 19 | ; (CDDL) only, as it comes in the "COPYING.CDDL" file of the
|
---|
| 20 | ; VirtualBox OSE distribution, in which case the provisions of the
|
---|
| 21 | ; CDDL are applicable instead of those of the GPL.
|
---|
| 22 | ;
|
---|
| 23 | ; You may elect to license modified versions of this file under the
|
---|
| 24 | ; terms and conditions of either the GPL or the CDDL or both.
|
---|
| 25 | ;
|
---|
| 26 |
|
---|
| 27 | ;*******************************************************************************
|
---|
| 28 | ;* Header Files *
|
---|
| 29 | ;*******************************************************************************
|
---|
[25336] | 30 | %include "iprt/asmdefs.mac"
|
---|
[15551] | 31 |
|
---|
| 32 | BEGINCODE
|
---|
| 33 |
|
---|
[51789] | 34 | %ifdef VBOX_WITH_HARDENING
|
---|
| 35 |
|
---|
| 36 | %ifdef RT_ARCH_X86
|
---|
[51770] | 37 | ;
|
---|
| 38 | ; Faking up ZwQueryVirtualMemory on XP and W2K3 where it's not exported.
|
---|
[51958] | 39 | ; Using ZwOpenFile as a helper as it has the name number of parameters.
|
---|
[51770] | 40 | ;
|
---|
[51958] | 41 | extern IMPNAME(ZwOpenFile@24)
|
---|
[51770] | 42 |
|
---|
| 43 | BEGINPROC supdrvNtQueryVirtualMemory_Xxx
|
---|
[51789] | 44 | %macro NtQueryVirtualMemorySyscall 1
|
---|
| 45 | GLOBALNAME supdrvNtQueryVirtualMemory_ %+ %1
|
---|
[51770] | 46 | mov eax, %1
|
---|
| 47 | jmp supdrvNtQueryVirtualMemory_Jump
|
---|
[51789] | 48 | %endm
|
---|
[51770] | 49 | NtQueryVirtualMemorySyscall 0xAF
|
---|
| 50 | NtQueryVirtualMemorySyscall 0xB0
|
---|
| 51 | NtQueryVirtualMemorySyscall 0xB1
|
---|
| 52 | NtQueryVirtualMemorySyscall 0xB2
|
---|
| 53 | NtQueryVirtualMemorySyscall 0xB3
|
---|
| 54 | NtQueryVirtualMemorySyscall 0xB4
|
---|
| 55 | NtQueryVirtualMemorySyscall 0xB5
|
---|
| 56 | NtQueryVirtualMemorySyscall 0xB6
|
---|
| 57 | NtQueryVirtualMemorySyscall 0xB7
|
---|
| 58 | NtQueryVirtualMemorySyscall 0xB8
|
---|
| 59 | NtQueryVirtualMemorySyscall 0xB9
|
---|
| 60 | NtQueryVirtualMemorySyscall 0xBA
|
---|
| 61 | NtQueryVirtualMemorySyscall 0xBB
|
---|
| 62 | NtQueryVirtualMemorySyscall 0xBC
|
---|
| 63 | NtQueryVirtualMemorySyscall 0xBD
|
---|
| 64 | NtQueryVirtualMemorySyscall 0xBE
|
---|
| 65 |
|
---|
| 66 | supdrvNtQueryVirtualMemory_Jump:
|
---|
[51958] | 67 | mov edx, IMP2(ZwOpenFile@24)
|
---|
[51770] | 68 | lea edx, [edx + 5]
|
---|
| 69 | jmp edx
|
---|
| 70 | ENDPROC supdrvNtQueryVirtualMemory_Xxx
|
---|
| 71 |
|
---|
[51789] | 72 | %endif
|
---|
[51770] | 73 |
|
---|
[51789] | 74 | %ifdef RT_ARCH_AMD64
|
---|
[51770] | 75 | ;
|
---|
| 76 | ; Faking up ZwQueryVirtualMemory on XP64 and W2K3-64 where it's not exported.
|
---|
| 77 | ; The C code locates and verifies the essentials in ZwRequestWaitReplyPort.
|
---|
| 78 | ;
|
---|
| 79 | extern NAME(g_pfnKiServiceLinkage)
|
---|
| 80 | extern NAME(g_pfnKiServiceInternal)
|
---|
| 81 | BEGINPROC supdrvNtQueryVirtualMemory_Xxx
|
---|
[51789] | 82 | %macro NtQueryVirtualMemorySyscall 1
|
---|
| 83 | GLOBALNAME supdrvNtQueryVirtualMemory_ %+ %1
|
---|
[51770] | 84 | mov eax, %1
|
---|
| 85 | jmp supdrvNtQueryVirtualMemory_Jump
|
---|
[51789] | 86 | %endm
|
---|
[51770] | 87 |
|
---|
| 88 | NtQueryVirtualMemorySyscall 0x1F
|
---|
| 89 | NtQueryVirtualMemorySyscall 0x20
|
---|
| 90 | NtQueryVirtualMemorySyscall 0x21
|
---|
| 91 | NtQueryVirtualMemorySyscall 0x22
|
---|
| 92 | NtQueryVirtualMemorySyscall 0x23
|
---|
| 93 |
|
---|
| 94 | supdrvNtQueryVirtualMemory_Jump:
|
---|
| 95 | cli
|
---|
| 96 | mov r10, rsp ; save call frame pointer.
|
---|
| 97 | mov r11, [NAME(g_pfnKiServiceLinkage) wrt rip]
|
---|
| 98 | push 0
|
---|
| 99 | push 0
|
---|
| 100 | push r10 ; call frame pointer (incoming rsp).
|
---|
| 101 | pushfq
|
---|
| 102 | push 10h
|
---|
| 103 | push r11 ; r11 = KiServiceLinkage (ret w/ unwind info)
|
---|
| 104 | jmp qword [NAME(g_pfnKiServiceInternal) wrt rip]
|
---|
| 105 | ENDPROC supdrvNtQueryVirtualMemory_Xxx
|
---|
[51789] | 106 | %endif
|
---|
[51770] | 107 |
|
---|
[51789] | 108 | %endif ; VBOX_WITH_HARDENING
|
---|
| 109 |
|
---|