windows_maps.h File Reference

#include <rz_core.h>

Go to the source code of this file.

Functions
RZ_API RzList *	rz_w32_dbg_modules (RzDebug *dbg)
RZ_API RzList *	rz_w32_dbg_maps (RzDebug *dbg)

Function Documentation

rz_w32_dbg_maps()

RZ_API RzList* rz_w32_dbg_maps

(

RzDebug *

dbg

)

Definition at line 245 of file windows_maps.c.

                                             {
    if (dbg->pid == -1) {
        return NULL;
    }
    SYSTEM_INFO si = { 0 };
    LPVOID cur_addr;
    MEMORY_BASIC_INFORMATION mbi;
    RWinModInfo mod_inf = { 0 };
    RzList *map_list = rz_list_newf((RzListFree)rz_debug_map_free), *mod_list = NULL;
    W32DbgWInst *wrap = dbg->plugin_data;
 
    GetSystemInfo(&si);
    cur_addr = si.lpMinimumApplicationAddress;
    /* get process modules list */
    mod_list = rz_w32_dbg_modules(dbg);
    /* process memory map */
    while (cur_addr < si.lpMaximumApplicationAddress &&
        VirtualQueryEx(wrap->pi.hProcess, cur_addr, &mbi, sizeof(mbi)) != 0) {
        if (mbi.State != MEM_FREE) {
            switch (mbi.Type) {
            case MEM_IMAGE:
                proc_mem_img(wrap->pi.hProcess, map_list, mod_list, &mod_inf, &si, &mbi);
                break;
            case MEM_MAPPED:
                proc_mem_map(wrap->pi.hProcess, map_list, &mbi);
                break;
            default:
                add_map_reg(map_list, "", &mbi);
            }
        }
        cur_addr = (LPVOID)(size_t)((ut64)(size_t)mbi.BaseAddress + mbi.RegionSize);
    }
    free(mod_inf.sect_hdr);
    rz_list_free(mod_list);
    return map_list;
}

References add_map_reg(), dbg, free(), NULL, W32DbgWInst::pi, rz_debug_t::pid, rz_debug_t::plugin_data, proc_mem_img(), proc_mem_map(), rz_debug_map_free(), rz_list_free(), rz_list_newf(), rz_w32_dbg_modules(), RWinModInfo::sect_hdr, si, and ut64().

rz_w32_dbg_modules()

RZ_API RzList* rz_w32_dbg_modules

(

RzDebug *

dbg

)

Definition at line 76 of file windows_maps.c.

                                                {
    if (dbg->pid == -1) {
        return NULL;
    }
    MODULEENTRY32 me;
    RzList *list = rz_list_newf((RzListFree)rz_debug_map_free);
    DWORD flags = TH32CS_SNAPMODULE | TH32CS_SNAPMODULE32;
    HANDLE h_mod_snap = CreateToolhelp32Snapshot(flags, dbg->pid);
 
    if (h_mod_snap == INVALID_HANDLE_VALUE) {
        // Suppress if process is still initializing
        if (GetLastError() != ERROR_PARTIAL_COPY || rz_list_length(dbg->threads) > 1) {
            rz_sys_perror("rz_w32_dbg_modules/CreateToolhelp32Snapshot");
        }
        goto err_w32_dbg_modules;
    }
    me.dwSize = sizeof(MODULEENTRY32);
    if (!Module32First(h_mod_snap, &me)) {
        rz_sys_perror("rz_w32_dbg_modules/Module32First");
        goto err_w32_dbg_modules;
    }
    do {
        ut64 baddr = (ut64)(size_t)me.modBaseAddr;
        char *mod_name = rz_sys_conv_win_to_utf8(me.szModule);
        RzDebugMap *dbgmap = rz_debug_map_new(mod_name, baddr, baddr + me.modBaseSize, 0, 0);
        free(mod_name);
        if (dbgmap) {
            dbgmap->file = rz_sys_conv_win_to_utf8(me.szExePath);
            if (dbgmap->file) {
                rz_list_append(list, dbgmap);
            }
        }
    } while (Module32Next(h_mod_snap, &me));
err_w32_dbg_modules:
    if (h_mod_snap && h_mod_snap != INVALID_HANDLE_VALUE) {
        CloseHandle(h_mod_snap);
    }
    return list;
}

References baddr(), dbg, DWORD, rz_debug_map_t::file, flags, free(), HANDLE, INVALID_HANDLE_VALUE, list(), NULL, rz_debug_t::pid, rz_debug_map_free(), rz_debug_map_new(), rz_list_append(), rz_list_length(), rz_list_newf(), rz_sys_perror, rz_debug_t::threads, and ut64().

Referenced by GetHeapGlobalsOffset(), and rz_w32_dbg_maps().