mirrors/fort
1
0
Fork 0
mirror of https://github.com/tnodir/fort synced 2024-11-15 10:25:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

Driver: Forward "HAL.dll" imports to "ntoskrnl.exe" on Win10+

Browse Source
This commit is contained in:
Nodir Temirkhodjaev 2023-01-11 12:14:59 +03:00
parent 4adb5a08c2
commit 926a7dbc9e
1 changed files with 5 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
src/driver/loader/fortmm_imp.c
View File

@ -81,7 +81,6 @@ static NTSTATUS BuildImportTableEntriesBegin(
UNUSED(pModule);
UNUSED(pHeaders);
#if defined(FORT_WIN7_COMPAT)
PLOADEDMODULE kernelModule = &moduleImp->kernelModule;
{
const BOOL isWindows7 = (moduleImp->osMajorVersion == 6 && moduleImp->osMinorVersion == 1);
@ -90,9 +89,6 @@ static NTSTATUS BuildImportTableEntriesBegin(
moduleImp->getModuleInfoFallback(moduleImp, kernelModule, "ntoskrnl.exe");
}
}
#else
UNUSED(moduleImp);
#endif
return STATUS_SUCCESS;
}
@ -107,16 +103,12 @@ static void BuildImportTableLibraryBegin(PFORT_MODULE_IMP moduleImp, LPCSTR libN
{
moduleImp->forwardModule = NULL;
#if defined(FORT_WIN7_COMPAT)
PLOADEDMODULE kernelModule = &moduleImp->kernelModule;
if (kernelModule->codeBase != NULL && moduleImp->strICmp(libName, "hal.dll") == 0) {
/* Functions of HAL.dll are exported from kernel on Windows 8+ */
IMP_LOG("Loader Module: Forward to kernel: %s\n", libName);
moduleImp->forwardModule = kernelModule;
}
#else
UNUSED(libName);
#endif
}
FORT_API void InitModuleImporter(
@ -159,5 +151,10 @@ NTSTATUS DriverImportsSetup(PFORT_MODULE_IMP moduleImp)
moduleImp->getModuleInfoFallback = GetModuleInfoFallback;
moduleImp->moduleGetProcAddressFallback = ModuleGetProcAddressFallback;
moduleImp->buildImportTableEntriesBegin = BuildImportTableEntriesBegin;
moduleImp->buildImportTableEntriesEnd = BuildImportTableEntriesEnd;
moduleImp->buildImportTableLibraryBegin = BuildImportTableLibraryBegin;
return STATUS_SUCCESS;
}