Re: [Shrinker] Another landmine

2002-01-03 Thread J.Brown (Ender/Amigo)
Of course, one could do a search on Google for something like Undocumented Windows NT ebook and look at the bottom of the page. Of course, that person better have already ordered a copy! :) - Ender There's also a book called Undocumented Windows NT. That would probably be the best hope of

Re: [Shrinker] Another landmine

2002-01-02 Thread Robert Baruch
Hi Dan, Windows NT/2000 Native API Reference by Gary Nebbett http://www.amazon.com/exec/obidos/ASIN/1578701996/ according to my friend who wrote one of the competitors to Shrinker. I don't know... I looked at its index on amazon.com, and it had no reference to LdrAccessResource. So I

Re: [Shrinker] Another landmine

2002-01-02 Thread David Welch
On Wed, Jan 02, 2002 at 03:28:22PM -0500, Robert Baruch wrote: Hi Dan, Windows NT/2000 Native API Reference by Gary Nebbett http://www.amazon.com/exec/obidos/ASIN/1578701996/ according to my friend who wrote one of the competitors to Shrinker. I don't know... I looked at its index

Re: [Shrinker] Another landmine

2002-01-02 Thread Andreas Mohr
On Wed, Jan 02, 2002 at 03:28:22PM -0500, Robert Baruch wrote: Hi Dan, Windows NT/2000 Native API Reference by Gary Nebbett http://www.amazon.com/exec/obidos/ASIN/1578701996/ according to my friend who wrote one of the competitors to Shrinker. I don't know... I looked at its index

Re: [Shrinker] Another landmine

2002-01-01 Thread Dan Kegel
Robert Baruch wrote: Well, Shrinker is getting kind of ridiculous with its required checks for the genuine Microsoft NTDLL.DLL. Also I can't find LdrAccessResource documented anywhere. Smacks of anticompetitiveness and monopolistic intentions to me :) Is there a book on undocumented NT/2000?

Re: [Shrinker] Another landmine

2001-12-26 Thread Alexandre Julliard
Robert Baruch [EMAIL PROTECTED] writes: So anyway, if we implemented this internal function (in C), then in theory it wouldn't be much of a big deal to code LdrAccessResource in assembly. Although it will raise a few eyebrows, we can always put in a comment similar to the one that will go in

Re: [Shrinker] Another landmine

2001-12-26 Thread Robert Baruch
On 26 Dec 2001 12:46:33 -0800 Alexandre Julliard [EMAIL PROTECTED] wrote: But unlike EXC_CallHandler there is no good reason to do that, except to work around Shrinker stupidity. And for all we know there might be 20 more similar tests (and if not, they may be added in the next Shrinker

Re: [Shrinker] Another landmine

2001-12-24 Thread Alexandre Julliard
Robert Baruch [EMAIL PROTECTED] writes: More stepping through the code, comparing Windbg to gdb, and I found another landmine. Shrinker gets the address of the NTDLL procedure LdrAccessResource, and looks for this code: FF74 push [esp+X] E8 call Instead, it finds an

Re: [Shrinker] Another landmine

2001-12-24 Thread Dimitrie O. Paun
On Mon, 24 Dec 2001, Alexandre Julliard wrote: hard, but I doubt you'll get gcc to generate exactly the above code; and writing LdrAccessResource in assembly is not really an option. Yes, but can't we write a trivial wrapper in assembly that simply calls an internal function (written in C)

Re: [Shrinker] Another landmine

2001-12-24 Thread Robert Baruch
On 24 Dec 2001 12:33:50 -0800 Alexandre Julliard [EMAIL PROTECTED] wrote: Instead, it finds an unimplemented procedure in Wine. So now I will look at LdrAccessResource (and friends) to see what's involved in implementing it, whatever it is. Sounds much more problematic.

[Shrinker] Another landmine

2001-12-23 Thread Robert Baruch
More stepping through the code, comparing Windbg to gdb, and I found another landmine. Shrinker gets the address of the NTDLL procedure LdrAccessResource, and looks for this code: FF74 push [esp+X] E8 call Instead, it finds an unimplemented procedure in Wine. So now I will