implement process modules

This commit is contained in:
2024-12-30 16:52:02 +00:00
parent 45ecf9bed6
commit ff7674615d
4 changed files with 87 additions and 11 deletions
+3 -3
View File
@@ -2,11 +2,11 @@ use thiserror::Error;
#[derive(Debug, Error)] #[derive(Debug, Error)]
pub enum Error { pub enum Error {
#[error("couldn't get handle to process")] #[error("failed to obtain handle")]
HandleError(String), HandleError(String),
#[error("couldn't create instance of process")] #[error("failed to create instance")]
ProcessError(String), ProcessError(String),
#[error("couldn't create snapshot")] #[error("failed to create snapshot")]
SnapshotError(String), SnapshotError(String),
#[error("failed to convert integer")] #[error("failed to convert integer")]
IntegerConversionError(#[from] std::num::TryFromIntError), IntegerConversionError(#[from] std::num::TryFromIntError),
+3 -3
View File
@@ -21,7 +21,7 @@ impl Drop for Handle {
if self.0 != INVALID_HANDLE_VALUE { if self.0 != INVALID_HANDLE_VALUE {
unsafe { unsafe {
if let Err(why) = CloseHandle(**self) { if let Err(why) = CloseHandle(**self) {
eprintln!("couldn't close handle: {why}"); eprintln!("failed to close handle: {why}");
}; };
} }
} }
@@ -35,13 +35,13 @@ impl Handle {
.or_else(|_| OpenProcess(PROCESS_VM_READ | PROCESS_VM_WRITE, false, pid)) .or_else(|_| OpenProcess(PROCESS_VM_READ | PROCESS_VM_WRITE, false, pid))
.map_err(|why| { .map_err(|why| {
crate::Error::HandleError(format!( crate::Error::HandleError(format!(
"couldn't open process with needed access: {why}", "failed to open process with needed access: {why}",
)) ))
})? })?
}; };
if handle == INVALID_HANDLE_VALUE { if handle == INVALID_HANDLE_VALUE {
return Err(crate::Error::HandleError( return Err(crate::Error::HandleError(
"couldn't get a valid handle".to_string(), "failed to get a valid handle".to_string(),
)); ));
} }
Ok(Self(handle)) Ok(Self(handle))
+15 -1
View File
@@ -2,6 +2,7 @@ use super::{handle::Handle, snapshot};
use derive_more::derive::Display; use derive_more::derive::Display;
#[allow(dead_code)]
#[derive(Debug, Default)] #[derive(Debug, Default)]
pub struct Process { pub struct Process {
name: String, name: String,
@@ -28,7 +29,7 @@ impl Process {
}; };
let Some(snapshot) = snapshot else { let Some(snapshot) = snapshot else {
return Err(crate::Error::ProcessError(format!( return Err(crate::Error::ProcessError(format!(
"couldn't find a process with identifier `{identifier}`", "failed to find a process with identifier `{identifier}`",
))); )));
}; };
let process = Self { let process = Self {
@@ -47,4 +48,17 @@ impl Process {
pub fn with_name(name: &str) -> Result<Self, crate::Error> { pub fn with_name(name: &str) -> Result<Self, crate::Error> {
Self::from(&Identifier::Name(name.to_string())) Self::from(&Identifier::Name(name.to_string()))
} }
pub fn module(&self, name: &str) -> Result<snapshot::Module, crate::Error> {
dbg!(snapshot::Module::get_modules(self.id)?);
let Some(module) = snapshot::Module::get_modules(self.id)?
.into_iter()
.find(|snapshot| snapshot.name == name)
else {
return Err(crate::Error::ProcessError(format!(
"failed to find a module with identifier `{name}`",
)));
};
Ok(module)
}
} }
+66 -4
View File
@@ -1,8 +1,9 @@
use windows::Win32::System::Diagnostics::ToolHelp::{ use windows::Win32::System::Diagnostics::ToolHelp::{
CreateToolhelp32Snapshot, Process32FirstW, Process32NextW, PROCESSENTRY32W, TH32CS_SNAPPROCESS, CreateToolhelp32Snapshot, Module32FirstW, Module32NextW, Process32FirstW, Process32NextW,
MODULEENTRY32W, PROCESSENTRY32W, TH32CS_SNAPMODULE, TH32CS_SNAPMODULE32, TH32CS_SNAPPROCESS,
}; };
#[derive(Debug, Default)] #[derive(Debug)]
pub struct Process { pub struct Process {
pub id: u32, pub id: u32,
pub name: String, pub name: String,
@@ -15,7 +16,7 @@ impl Process {
Ok(snapshot) => snapshot, Ok(snapshot) => snapshot,
Err(why) => { Err(why) => {
return Err(crate::Error::SnapshotError(format!( return Err(crate::Error::SnapshotError(format!(
"couldn't create snapshot: {why}" "failed to create process snapshot: {why}"
))) )))
} }
} }
@@ -29,7 +30,7 @@ impl Process {
Ok(()) => {} Ok(()) => {}
Err(why) => { Err(why) => {
return Err(crate::Error::SnapshotError(format!( return Err(crate::Error::SnapshotError(format!(
"couldn't get first process from snapshot: {why}" "failed to get first process from snapshot: {why}"
))) )))
} }
}; };
@@ -53,3 +54,64 @@ impl Process {
Ok(processes) Ok(processes)
} }
} }
#[derive(Debug)]
pub struct Module {
pub process_id: u32,
pub name: String,
pub path: String,
pub base_address: usize,
pub base_size: usize,
}
impl Module {
pub fn get_modules(pid: u32) -> Result<Vec<Self>, crate::Error> {
let snapshot = unsafe {
match CreateToolhelp32Snapshot(TH32CS_SNAPMODULE | TH32CS_SNAPMODULE32, pid) {
Ok(snapshot) => snapshot,
Err(why) => {
return Err(crate::Error::SnapshotError(format!(
"failed to create module snapshot: {why}"
)))
}
}
};
let mut module_entry_32_w = MODULEENTRY32W {
dwSize: u32::try_from(size_of::<MODULEENTRY32W>())?,
..Default::default()
};
unsafe {
match Module32FirstW(snapshot, &mut module_entry_32_w) {
Ok(()) => {}
Err(why) => {
return Err(crate::Error::SnapshotError(format!(
"failed to get first module from snapshot: {why}"
)))
}
}
}
let mut modules = Vec::new();
loop {
let name = String::from_utf16_lossy(&module_entry_32_w.szModule)
.trim_end_matches('\0')
.to_string();
let path = String::from_utf16_lossy(&module_entry_32_w.szExePath)
.trim_end_matches('\0')
.to_string();
let module = Module {
process_id: pid,
name,
path,
base_address: module_entry_32_w.modBaseAddr as usize,
base_size: module_entry_32_w.modBaseSize as usize,
};
modules.push(module);
unsafe {
if Module32NextW(snapshot, &mut module_entry_32_w).is_err() {
break;
}
}
}
Ok(modules)
}
}