This commit is contained in:
Mario Fetka
2026-05-23 19:08:40 +02:00
parent faabab1f9f
commit 01d654c76b
3 changed files with 564 additions and 235 deletions

View File

@@ -23,8 +23,9 @@ public _Net_Call
public _C32_LoadNios_Probe
public _C32_GetFunc_Probe
public _C32_CallVersion_Nios_Probe
public _C32_MapLock_Probe
public _C32_NCP87_Raw_Probe
public _Net_Call_VLM_Raw
public _Net_Call_NWCVLMREQ
_IPXinit proc far
push bp
@@ -593,115 +594,455 @@ c32ver_name db 'CLIENT32GetVersion',0
_C32_CallVersion_Nios_Probe endp
; int Net_Call_NWCVLMREQ(UI flags, void *regblk, UI p1, UI p2, UI p3)
; int C32_MapLock_Probe(void *ptr, UI len, void *outbuf)
;
; 16-bit wrapper that reproduces the DeveloperNet NWCVLMREQ register-block
; calling convention, but without using Novell globals.
; Probe d32wrap.o __MapLockFlat / __UnlockFlat:
; INT 2F AX=D8C1
; ESI resolver returned by D8C1 is used with command 2 and 3:
; push len_hi
; push len_lo
; push seg
; push off
; push 0
; push 2
; call ESI ; returns flat DX:AX
;
; regblk layout, same as dvlmreq.o:
; +00 SI
; +02 DS
; +04 DI
; +06 ES
; +08 AX
; +0A BX
; +0C CX
; +0E DX
; push len_hi
; push len_lo
; push flat_hi
; push flat_lo
; push 0
; push 3
; call ESI ; unlock
;
; It calls the VLM entry returned by INT 2F AX=7A20.
; Stack args are pushed as p3,p2,p1, exactly like NWCVLMREQ.
_Net_Call_NWCVLMREQ proc far
; outbuf:
; +00 load AX
; +02 ESI off
; +04 ESI seg
; +06 map AX low
; +08 map DX high
; +0A unlock AX
; +0C unlock DX
_C32_MapLock_Probe proc far
push bp
mov bp, sp
sub sp, 4
sub sp, 8
push ds
push es
push si
push di
push es
mov ax, 7A20h
xor bx, bx
; clear ECX/ESI
db 66h, 33h, 0C9h
db 66h, 33h, 0F6h
mov ax, 0D8C1h
int 2Fh
; save ESI resolver at [bp-4]
db 66h, 89h, 76h, 0FCh
push ax ; load AX
or ax, ax
jz nwcvlm_found
jne mapflat_fail
mov ax, 88FFh
jmp short nwcvlm_done
nwcvlm_found:
; save VLM entry ES:BX in [bp-4]
mov [bp-4], bx
mov ax, es
mov [bp-2], ax
les bx, dword ptr [bp+8] ; regblk
; Match NWCVLMREQ defaulting:
; if !(flags & 2), set regblk.ES to current ES.
; We normally pass flags=2, so this is skipped.
test word ptr [bp+6], 2
jne nwcvlm_skip_es
mov ax, es
mov word ptr es:[bx+6], ax
nwcvlm_skip_es:
; if !(flags & 1), set regblk.DS to current DS.
test word ptr [bp+6], 1
jne nwcvlm_skip_ds
mov ax, ds
mov word ptr es:[bx+2], ax
nwcvlm_skip_ds:
; Load target registers from regblk.
mov ax, word ptr es:[bx+0Ah]
push ax ; target BX
mov ax, word ptr es:[bx+6]
push ax ; target ES
mov ax, word ptr es:[bx+8]
mov cx, word ptr es:[bx+0Ch]
mov dx, word ptr es:[bx+0Eh]
mov si, word ptr es:[bx+0]
mov di, word ptr es:[bx+4]
mov ds, word ptr es:[bx+2]
pop es
pop bx
push word ptr [bp+10h] ; p3
push word ptr [bp+0eh] ; p2
push word ptr [bp+0ch] ; p1
; MapLockFlat(ptr, len)
push 0
push word ptr [bp+10] ; len
push word ptr [bp+8] ; ptr seg
push word ptr [bp+6] ; ptr off
push 0
push 2
call dword ptr [bp-4]
add sp, 0cH
; Store registers back into regblk.
push bx
push es
; save mapped flat DX:AX at [bp-8]
mov word ptr [bp-8], ax
mov word ptr [bp-6], dx
les bx, dword ptr [bp+8]
mov word ptr es:[bx+8], ax
pop ax
mov word ptr es:[bx+6], ax
pop ax
mov word ptr es:[bx+0Ah], ax
mov word ptr es:[bx+0Ch], cx
mov word ptr es:[bx+0Eh], dx
mov word ptr es:[bx+0], si
mov word ptr es:[bx+4], di
mov word ptr es:[bx+2], ds
; UnlockFlat(flat, len)
push 0
push word ptr [bp+10] ; len
push dx
push ax
push 0
push 3
call dword ptr [bp-4]
add sp, 0cH
mov ax, word ptr es:[bx+8]
jmp short mapflat_store
mapflat_fail:
xor dx, dx
xor ax, ax
mov word ptr [bp-8], ax
mov word ptr [bp-6], dx
mapflat_store:
les di, dword ptr [bp+12]
mov bx, ax ; unlock AX
mov cx, dx ; unlock DX
pop ax ; load AX
mov es:[di+0], ax
mov ax, word ptr [bp-4]
mov es:[di+2], ax
mov ax, word ptr [bp-2]
mov es:[di+4], ax
mov ax, word ptr [bp-8]
mov es:[di+6], ax
mov ax, word ptr [bp-6]
mov es:[di+8], ax
mov es:[di+10], bx
mov es:[di+12], cx
nwcvlm_done:
pop es
pop di
pop si
pop es
pop ds
mov sp, bp
pop bp
xor ah, ah
ret
_Net_Call_NWCVLMREQ endp
_C32_MapLock_Probe endp
; int C32_NCP87_Raw_Probe(UI connLo, UI connHi,
; void *hdr, UI hdrLen,
; void *path, UI pathLen,
; void *rep0, UI rep0Len,
; void *rep1, UI rep1Len,
; void *outbuf)
;
; Specialized raw Client32 NCP87/S6 request probe.
; Reproduces d32wrap.o _COMPATNcpRequestReply mechanics:
; - INT 2F AX=D8C1
; - resolve COMPATNcpRequestReply via ESI resolver
; - MapLockFlat each fragment data buffer
; - build flat 8-byte frag tables
; - MapLockFlat frag tables and actualReplyLen
; - call ECX NIOS trampoline with command 8 and COMPATNcpRequestReply pointer
; - unlock mappings
;
; outbuf:
; +00 load AX
; +02 resolver off
; +04 resolver seg
; +06 trampoline off
; +08 trampoline seg
; +0A function off
; +0C function seg
; +0E ret AX
; +10 ret DX
; +12 actualReplyLen low
; +14 actualReplyLen high
_C32_NCP87_Raw_Probe proc far
push bp
mov bp, sp
sub sp, 100
push ds
push es
push si
push di
; clear ESI/ECX
db 66h, 33h, 0F6h
db 66h, 33h, 0C9h
mov ax, 0D8C1h
int 2Fh
; save resolver ESI at [bp-84]
db 66h, 89h, 76h, 0ACh
; save trampoline ECX at [bp-88]
db 66h, 89h, 4Eh, 0A8h
mov [bp-2], ax ; load AX
or ax, ax
jne c32raw_fail
; resolve "COMPATNcpRequestReply"
push cs
push offset c32raw_name
push 0
push 0
call dword ptr [bp-84]
add sp, 8
mov [bp-92], ax
mov [bp-90], dx
or ax, dx
jne c32raw_have_func
jmp c32raw_fail
c32raw_have_func:
; actualReplyLen local at [bp-52]
mov word ptr [bp-52], 0
mov word ptr [bp-50], 0
; Map hdr data -> [bp-56]
push 0
push word ptr [bp+0eH]
push word ptr [bp+0cH]
push word ptr [bp+0aH]
push 0
push 2
call dword ptr [bp-84]
add sp, 0cH
mov [bp-56], ax
mov [bp-54], dx
; Map path data -> [bp-60]
push 0
push word ptr [bp+14H]
push word ptr [bp+12H]
push word ptr [bp+10H]
push 0
push 2
call dword ptr [bp-84]
add sp, 0cH
mov [bp-60], ax
mov [bp-58], dx
; Map reply0 -> [bp-64]
push 0
push word ptr [bp+1aH]
push word ptr [bp+18H]
push word ptr [bp+16H]
push 0
push 2
call dword ptr [bp-84]
add sp, 0cH
mov [bp-64], ax
mov [bp-62], dx
; Map reply1 -> [bp-68]
push 0
push word ptr [bp+20H]
push word ptr [bp+1eH]
push word ptr [bp+1cH]
push 0
push 2
call dword ptr [bp-84]
add sp, 0cH
mov [bp-68], ax
mov [bp-66], dx
; Build req flat table at [bp-32], two entries:
; entry = flatptr dword + len dword
mov ax, [bp-56]
mov [bp-32], ax
mov ax, [bp-54]
mov [bp-30], ax
mov ax, [bp+0eH]
mov [bp-28], ax
mov word ptr [bp-26], 0
mov ax, [bp-60]
mov [bp-24], ax
mov ax, [bp-58]
mov [bp-22], ax
mov ax, [bp+14H]
mov [bp-20], ax
mov word ptr [bp-18], 0
; Build reply flat table at [bp-48]
mov ax, [bp-64]
mov [bp-48], ax
mov ax, [bp-62]
mov [bp-46], ax
mov ax, [bp+1aH]
mov [bp-44], ax
mov word ptr [bp-42], 0
mov ax, [bp-68]
mov [bp-40], ax
mov ax, [bp-66]
mov [bp-38], ax
mov ax, [bp+20H]
mov [bp-36], ax
mov word ptr [bp-34], 0
; Map req table [bp-32] len 16 -> [bp-72]
push 0
push 10H
push ss
lea ax, -32[bp]
push ax
push 0
push 2
call dword ptr [bp-84]
add sp, 0cH
mov [bp-72], ax
mov [bp-70], dx
; Map reply table [bp-48] len 16 -> [bp-76]
push 0
push 10H
push ss
lea ax, -48[bp]
push ax
push 0
push 2
call dword ptr [bp-84]
add sp, 0cH
mov [bp-76], ax
mov [bp-74], dx
; Map actualReplyLen [bp-52] len 4 -> [bp-80]
push 0
push 4
push ss
lea ax, -52[bp]
push ax
push 0
push 2
call dword ptr [bp-84]
add sp, 0cH
mov [bp-80], ax
mov [bp-78], dx
; Call NIOS trampoline command 8 with COMPATNcpRequestReply pointer.
push word ptr [bp-78] ; actual flat hi
push word ptr [bp-80] ; actual flat lo
push word ptr [bp-74] ; reply table flat hi
push word ptr [bp-76] ; reply table flat lo
push 0
push 2 ; num reply frags
push word ptr [bp-70] ; req table flat hi
push word ptr [bp-72] ; req table flat lo
push 0
push 2 ; num req frags
push 0
push 57H ; NCP function 87
push 0
push 0
push word ptr [bp+8] ; conn high
push word ptr [bp+6] ; conn low
push 0
push 8
push word ptr [bp-90] ; function seg
push word ptr [bp-92] ; function off
call dword ptr [bp-88]
add sp, 28H
mov [bp-96], ax
mov [bp-94], dx
; unlock mapped actual/table/data. Ignore returns.
push 0
push 4
push word ptr [bp-78]
push word ptr [bp-80]
push 0
push 3
call dword ptr [bp-84]
add sp, 0cH
push 0
push 10H
push word ptr [bp-74]
push word ptr [bp-76]
push 0
push 3
call dword ptr [bp-84]
add sp, 0cH
push 0
push 10H
push word ptr [bp-70]
push word ptr [bp-72]
push 0
push 3
call dword ptr [bp-84]
add sp, 0cH
push 0
push word ptr [bp+20H]
push word ptr [bp-66]
push word ptr [bp-68]
push 0
push 3
call dword ptr [bp-84]
add sp, 0cH
push 0
push word ptr [bp+1aH]
push word ptr [bp-62]
push word ptr [bp-64]
push 0
push 3
call dword ptr [bp-84]
add sp, 0cH
push 0
push word ptr [bp+14H]
push word ptr [bp-58]
push word ptr [bp-60]
push 0
push 3
call dword ptr [bp-84]
add sp, 0cH
push 0
push word ptr [bp+0eH]
push word ptr [bp-54]
push word ptr [bp-56]
push 0
push 3
call dword ptr [bp-84]
add sp, 0cH
jmp short c32raw_store
c32raw_fail:
mov word ptr [bp-92], 0
mov word ptr [bp-90], 0
mov word ptr [bp-96], 0FFFFH
mov word ptr [bp-94], 0FFFFH
mov word ptr [bp-52], 0
mov word ptr [bp-50], 0
c32raw_store:
les di, dword ptr [bp+22H]
mov ax, [bp-2]
mov es:[di+0], ax
mov ax, [bp-84]
mov es:[di+2], ax
mov ax, [bp-82]
mov es:[di+4], ax
mov ax, [bp-88]
mov es:[di+6], ax
mov ax, [bp-86]
mov es:[di+8], ax
mov ax, [bp-92]
mov es:[di+10], ax
mov ax, [bp-90]
mov es:[di+12], ax
mov ax, [bp-96]
mov es:[di+14], ax
mov ax, [bp-94]
mov es:[di+16], ax
mov ax, [bp-52]
mov es:[di+18], ax
mov ax, [bp-50]
mov es:[di+20], ax
pop di
pop si
pop es
pop ds
mov sp, bp
pop bp
xor ah, ah
ret
c32raw_name db 'COMPATNcpRequestReply',0
_C32_NCP87_Raw_Probe endp
end