1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
|
#pragma once
#include "EfiGuardDxe.h"
#include <Protocol/LoadedImage.h>
//
// Stalls CPU for N milliseconds
//
EFI_STATUS
EFIAPI
RtlSleep(
IN UINTN Milliseconds
);
//
// Prints info about a loaded image
//
VOID
EFIAPI
PrintLoadedImageInfo(
IN EFI_LOADED_IMAGE *ImageInfo
);
//
// Similar to Print(), but for use during the kernel patching phase.
// Do not call this unless the message is specifically intended for (delayed) display output only.
// Instead use the PRINT_KERNEL_PATCH_MSG() macro so the boot debugger receives messages with no delay.
//
VOID
EFIAPI
AppendKernelPatchMessage(
IN CONST CHAR16 *Format,
...
);
//
// Prints the contents of the kernel patch string buffer to the screen using OutputString() calls.
// This is a separate function because the buffer consists of zero or more null-terminated strings,
// which are printed sequentially to prevent issues with platforms that have small Print() buffer limits
//
VOID
EFIAPI
PrintKernelPatchInfo(
);
//
// Waits for a key to be pressed before continuing execution.
// Returns FALSE if ESC was pressed to abort, TRUE otherwise.
//
BOOLEAN
EFIAPI
WaitForKey(
);
//
// Sets the foreground colour while preserving the background colour and optionally clears the screen.
// Returns the original console mode attribute.
//
INT32
EFIAPI
SetConsoleTextColour(
IN UINTN TextColour,
IN BOOLEAN ClearScreen
);
//
// Finds a byte pattern starting at the specified address
//
EFI_STATUS
EFIAPI
FindPattern(
IN CONST UINT8* Pattern,
IN UINT8 Wildcard,
IN UINT32 PatternLength,
IN VOID* Base,
IN UINT32 Size,
OUT VOID **Found
);
//
// Finds a byte pattern starting at the specified address (with lots of debug spew)
//
EFI_STATUS
EFIAPI
FindPatternVerbose(
IN CONST UINT8* Pattern,
IN UINT8 Wildcard,
IN UINT32 PatternLength,
IN VOID* Base,
IN UINT32 Size,
OUT VOID **Found
);
typedef struct ZydisFormatter_ ZydisFormatter;
//
// Initializes a ZydisDecoder instance.
// If ZYDIS_DISABLE_FORMATTER is defined, Formatter must be NULL.
// Otherwise it is a required argument.
//
ZyanStatus
EFIAPI
ZydisInit(
IN PEFI_IMAGE_NT_HEADERS NtHeaders,
OUT ZydisDecoder *Decoder,
OUT ZydisFormatter *Formatter OPTIONAL
);
//
// Finds the start of a function given an address within it, scanning downwards.
// Returns NULL if StartAddress is NULL (this simplifies error checking logic in calling functions).
// Returns NULL is LowerBound is reached and no function boundary was found.
//
UINT8*
EFIAPI
BacktrackToFunctionStart(
IN CONST UINT8* StartAddress,
IN CONST UINT8* LowerBound
);
|