Switch ruptura_main from stdcall to cdecl.

We don't use CreateRemoteThread to invoke it directly, so using cdecl simplifies finding the symbol for 32-bit (no stdcall name mangling). Part of #5.
vezel-dev · Jul 6, 2022 · dd5c06d · dd5c06d
1 parent 5d17e92
commit dd5c06d
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/src/injection/AssemblyInjector.cs b/src/injection/AssemblyInjector.cs
@@ -254,6 +254,7 @@ async Task InjectModuleAsync(string modulePath, nuint parameterArea, MemoryMappe
 
                     asm.push(__dword_ptr[esp + 4]);
                     asm.call(eax);
+                    asm.add(esp, 4);
                     asm.jmp(done);
 
                     asm.Label(ref failure);

diff --git a/src/module/main.h b/src/module/main.h
@@ -11,4 +11,4 @@ typedef struct
     uint32_t main_thread_id;
 } ruptura_parameters;
 
-__declspec(dllexport) uint32_t __stdcall ruptura_main(ruptura_parameters *nonnull parameters);
+__declspec(dllexport) uint32_t ruptura_main(ruptura_parameters *nonnull parameters);