/*
 * CVE-2026-81963 - non-destructive DPX load marker
 *
 * Laboratory purpose only. This DLL demonstrates that the prepatch
 * UpdateAgent.dll loader accepts an unsigned sibling named dpx.dll from the
 * writable OnePackage metadata directory. It does not create a process,
 * display UI, write a file, change servicing state, or install a package.
 *
 * Expected evidence in an attached debugger:
 *   [CVE-2026-81963] DpxMarker.dll loaded inside the test process.
 *
 * DpxNewJob deliberately returns E_NOTIMPL with a null output pointer so the
 * test fails closed if execution reaches the exported function.
 */

#include <Windows.h>

namespace {

constexpr wchar_t kLoadMarker[] =
    L"[CVE-2026-81963] DpxMarker.dll loaded inside the test process.\n";
constexpr wchar_t kCallMarker[] =
    L"[CVE-2026-81963] Exported DpxNewJob was called; returning E_NOTIMPL.\n";

}  // namespace

extern "C" __declspec(dllexport) HRESULT WINAPI
DpxNewJob(const wchar_t* /*working_directory*/, void** job) noexcept {
    if (job != nullptr) {
        *job = nullptr;
    }

    OutputDebugStringW(kCallMarker);
    return E_NOTIMPL;
}

BOOL WINAPI DllMain(HINSTANCE instance, DWORD reason, LPVOID /*reserved*/) {
    if (reason == DLL_PROCESS_ATTACH) {
        DisableThreadLibraryCalls(instance);
        OutputDebugStringW(kLoadMarker);
    }

    return TRUE;
}