Solved

Restart Windows?

Posted on 1999-01-08
2
217 Views
Last Modified: 2010-04-04
 In 16bit Delphi1 program, calling ExitWindows(EW_RestartWindows, 0) will cause Windows to restart itself. The computer will not reboot.

  In 32bit Delphi4 program , calling ExitWindows(EW_RestartWindows, 0) can only logoff current user. Because ExitWindows is actually function resides in 16bit User.exe, so that cannot be called directly in 32bit programs. Following line is source code extracted from Delphi4 RTL source file Windows.pas:
function ExitWindows(dwReserved: DWORD; Code: Word): BOOL;
begin
  Result := ExitWindowsEx(EWX_LOGOFF, 0);
end;

So, we can only turn to THUNK: calling 16bit DLL functions from 32bit program, Such as following code:
{$StackFrames On}  //QT_Thunk needs a stack frame, Thunking call to 16-bit USER.EXE. The ThunkTrash argument allocates space on the stack for QT_Thunk
function LoadLibrary16(LibraryName: PChar): THandle; stdcall; external kernel32 index 35;
procedure FreeLibrary16(HInstance: THandle); stdcall; external kernel32 index 36;
function GetProcAddress16(Hinstance: THandle; ProcName: PChar): Pointer; stdcall; external kernel32 index 37;
procedure QT_Thunk; cdecl; external kernel32 name 'QT_Thunk';
var
  hInst16: THandle;
  GFSR: Pointer;
function RestartWindows: WordBool;
var
  ThunkTrash: array[0..$20] of Word;
begin
  if Win32Platform = VER_PLATFORM_WIN32_NT then
  begin
    Result := False;
    Exit;
  end;
  ThunkTrash[0] := hInst16; //Prevent the optimizer from getting rid of ThunkTrash
  hInst16 := LoadLibrary16('user.exe');
  if hInst16 < 32 then
    raise Exception.Create('Cannot load USER.EXE');
  FreeLibrary16(hInst16); //Decrement the usage count. This doesn't really free the library, since USER.EXE is always loaded
  GFSR := GetProcAddress16(hInst16, 'ExitWindows'); //Get the function pointer for the 16-bit function in USER.EXE
  if GFSR = nil then
    raise Exception.Create('Cannot get address of ExitWindows');
  asm  //Thunk down to USER.EXE
    push EW_RestartWindows  { push arguments }
    push 0
    mov edx, GFSR     { load 16-bit procedure pointer }
    call QT_Thunk     { call thunk }
    mov Result, ax    { save the result }
  end;
end;
{$StackFrames Off}

Guess what happened. calling above RestartWindows function will cause computer be shutdown. The same function as:
ExitWindowsEx(EWX_FORCE or EWX_SHUTDOWN, 0); I have tested it on several computer running Windows95 and Windows98.
 
I don't know what is wrong and why this happened. We know, in Windows95 shutdown dialog, select option "Reboot computer", then press Shift+Enter(or press Shift then click "Yes") , Windows DO restart itself. Obviously, the SHELL make it. but how?
0
Comment
Question by:delphi1
2 Comments
 
LVL 20

Accepted Solution

by:
Madshi earned 50 total points
ID: 1355226
delphi1,

I'm not sure what is wrong with your code. I think there's a problem with your pushs because you have to push one dword and one word value and I don't know what your code pushes...

However, you can use my code. It works:

function RestartWindows : boolean;  // function ExitWindows(code: dword; res: word) : bool; stdcall;
var thunkTrash : array [0..$20] of word;
    fp,qfp     : pointer;
    huser16    : cardinal;
    c1         : cardinal;
    w1         : word;
begin
  result:=false;
  AddExcStack([unitName,'RestartWindows']);
  try try
    huser16:=LoadLibrary16('user.exe');
    if huser16<>0 then
      try
        thunkTrash[0]:=huser16;
        fp:=GetProcAddress16(huser16, 'ExitWindows');
        qfp:=GetProcAddress(GetModuleHandle(kernel32), 'QT_Thunk');
        c1:=$42; w1:=0;
        if (fp<>nil) and (qfp<>nil) then begin
          asm
            push c1
            push w1
            mov edx, fp
            call qfp
            mov w1, ax
          end;
          result:=w1<>0;
        end;
      finally FreeLibrary16(huser16) end;
  except ExceptionProc end finally DelExcStack end;
end;

Regards, Madshi.
0
 

Author Comment

by:delphi1
ID: 1355227
Yes. the problem is my pushs. Your code works. Thank you!

Regards, Yang.
0

Featured Post

Live: Real-Time Solutions, Start Here

Receive instant 1:1 support from technology experts, using our real-time conversation and whiteboard interface. Your first 5 minutes are always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

The uses clause is one of those things that just tends to grow and grow. Most of the time this is in the main form, as it's from this form that all others are called. If you have a big application (including many forms), the uses clause in the in…
Hello everybody This Article will show you how to validate number with TEdit control, What's the TEdit control? TEdit is a standard Windows edit control on a form, it allows to user to write, read and copy/paste single line of text. Usua…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

808 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question