vmread-sys 0.1.5

Raw FFI bindings to vmread
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68

#include "hlapi.h"

WinExportIteratableList::iterator WinExportIteratableList::begin()
{
	windll->VerifyExportList();
	return iterator(&list);
}

WinExportIteratableList::iterator WinExportIteratableList::end()
{
	windll->VerifyExportList();
	return iterator(&list, list.size);
}

size_t WinExportIteratableList::getSize()
{
	windll->VerifyExportList();
	return list.size;
}

uint64_t WinDll::GetProcAddress(const char* procName)
{
	VerifyExportList();
	return ::FindProcAddress(exports.list, procName);
}

WinDll::WinDll()
{
	process = nullptr;
	exports.list.list = nullptr;
	exports.list.size = 0;
	exports.windll = this;
}

WinDll::WinDll(const WinProcess* p, WinModule& i)
	: WinDll()
{
	process = p;
	info = i;
}

WinDll::WinDll(WinDll&& rhs)
{
	info = rhs.info;
	process = rhs.process;
	proc = rhs.proc;
	exports = rhs.exports;
	exports.windll = this;
	rhs.exports.list.list = nullptr;
	rhs.exports.list.size = 0;
}

WinDll::~WinDll()
{
	FreeExportList(exports.list);
}

void WinDll::VerifyExportList()
{
	if (proc.dirBase != process->proc.dirBase) {
		proc = process->proc;
		FreeExportList(exports.list);
		memset(&exports.list, 0, sizeof(exports.list));
	}

	if (!exports.list.list)
		GenerateExportList(process->ctx, &proc, info.baseAddress, &exports.list);
}