Return to probe.c CVS log

Up to [WindowsNT SDKs] / mstools / samples / sdktools / walker

Annotation of mstools/samples/sdktools/walker/probe.c, revision 1.1.1.1

1.1       root        1: #include "pwalk.h"
                      2: 
                      3: 
                      4: /* process  globals */
                      5: HANDLE             hMMFile = 0;
                      6: LPPROBE            lpProbe = NULL;
                      7: CONTEXT            gContext;
                      8: DWORD              gReturn;
                      9: LPVOID             gLocation;
                     10: CRITICAL_SECTION    gCS;
                     11: 
                     12: 
                     13: BOOL   WINAPI ProbeProcess (HANDLE);
                     14: void   WINAPI FreeProbe ();
                     15: void   WINAPI GetFuncAddrInChildProc (char *, char *, DBGDLL *, LPVOID *);
                     16: 
                     17: 
                     18: /* entry point for DLL loading and unloading */
                     19: BOOL WINAPI DllMain (
                     20:     HANDLE    hModule,
                     21:     DWORD     dwFunction,
                     22:     LPVOID    lpNot)
                     23: {
                     24:     switch (dwFunction)
                     25:        {
                     26:        case DLL_PROCESS_ATTACH:
                     27:            ProbeProcess (hModule);
                     28:            break;
                     29: 
                     30:        case DLL_PROCESS_DETACH:
                     31:            FreeProbe ();
                     32:            break;
                     33: 
                     34:        default:
                     35:            break;
                     36:        }
                     37: 
                     38:     return TRUE;
                     39: }
                     40: 
                     41: 
                     42: 
                     43: /* function initializes port structures */
                     44: BOOL WINAPI ProbeProcess (
                     45:     HANDLE    hDLL)
                     46: {
                     47:     char       szMapFileName[MAX_PATH];
                     48: 
                     49:     /* load name for global file mapping */
                     50:     LoadString (hDLL, IDS_MAPFILENAME, szMapFileName, MAX_PATH);
                     51: 
                     52:     /* ProcessWalker creates file mapping then child process attaches */
                     53:     if ((hMMFile = OpenFileMapping (FILE_MAP_WRITE, FALSE, szMapFileName)))
                     54:        {
                     55:        /* map global view of file for hook function access */
                     56:        lpProbe = (LPPROBE)MapViewOfFile (hMMFile, FILE_MAP_WRITE, 0, 0, 0);
                     57: 
                     58:        /* initialize known process specific information in probe */
                     59:        lpProbe->hProcess = GetCurrentProcess ();
                     60:        lpProbe->hDefHeap = GetProcessHeap ();
                     61:        }
                     62: 
                     63:     else
                     64:        if (!(hMMFile = CreateFileMapping ((HANDLE)0xffffffff,
                     65:                                           NULL,
                     66:                                           PAGE_READWRITE,
                     67:                                           0,
                     68:                                           0x100000,
                     69:                                           szMapFileName)))
                     70:            return FALSE;
                     71:        else
                     72:            {
                     73:            lpProbe = (LPPROBE)MapViewOfFile (hMMFile, FILE_MAP_WRITE, 0, 0, 0);
                     74:            ResetProbe ();
                     75:            }
                     76: 
                     77:     /* success */
                     78:     return TRUE;
                     79: }
                     80: 
                     81: 
                     82: 
                     83: 
                     84: /* release process objects */
                     85: void WINAPI FreeProbe ()
                     86: {
                     87:     if (lpProbe != NULL)
                     88:        /* remove child process objects */
                     89:        UnmapViewOfFile ((char *)lpProbe);
                     90: 
                     91:     CloseHandle (hMMFile);
                     92: }
                     93: 
                     94: 
                     95: 
                     96: 
                     97: /* function passes pointer to probe info back to ProcessWalker */
                     98: LPPROBE  WINAPI RetrieveProbeData ()
                     99: {
                    100:     return lpProbe;
                    101: }
                    102: 
                    103: 
                    104: 
                    105: 
                    106: /* reset probe data to null */
                    107: void  WINAPI ResetProbe ()
                    108: {
                    109:     lpProbe->hProcess = NULL;
                    110:     lpProbe->hDefHeap = NULL;
                    111: }

This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.