-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathps.c
More file actions
126 lines (102 loc) · 2.6 KB
/
ps.c
File metadata and controls
126 lines (102 loc) · 2.6 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
/*
LTRACE32.C -- cruddy win32 trace program.
Copyright (C) 2002 johnbrazel@gmail.com
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
*/
/* Process.c
* Mini win32 'ps' command.
*/
#include <windows.h>
#include <stdio.h>
#include <psapi.h>
#include "icommon.h"
#include "ptrace.h"
#include "write.h"
extern int debug;
static void
DoModules(HANDLE proc)
{
DWORD needed;
HMODULE *hlist;
MODULEINFO modinfo;
char basename[MAX_PATH];
unsigned int i;
hlist = (HMODULE*)malloc(ENUMPROC_SZ);
if (!hlist) {
perror("malloc()");
return;
}
if (!EnumProcessModules(proc,hlist,ENUMPROC_SZ,&needed))
{
WinPerror("EnumProcessModules()");
return;
}
else if (needed > ENUMPROC_SZ)
{
error("HELP! Array required by EnumProcessModules > ENUMPROC_SZ (%u)\n",
ENUMPROC_SZ);
abort();
}
for(i=0;i<needed/sizeof(HMODULE);i++)
{
if (GetModuleInformation(proc,hlist[i],&modinfo,sizeof(modinfo)))
{
GetModuleBaseName(proc,hlist[i],basename,sizeof(basename));
printf("\t%s\t0x%08x\t%u bytes\tentry:0x%08x\n",
basename,
modinfo.lpBaseOfDll, modinfo.SizeOfImage, modinfo.EntryPoint);
}
if (!debug)
break;
}
free(hlist);
}
static void
DoProcess(DWORD pid)
{
HANDLE proc;
proc = OpenProcess(PROCESS_QUERY_INFORMATION |
PROCESS_VM_OPERATION |
PROCESS_VM_READ |
PROCESS_VM_WRITE |
SYNCHRONIZE,
FALSE,
pid);
if (proc == NULL)
{
printf("%u\t??? (OpenProcess() failed -- %u)\n",pid, GetLastError());
return;
}
if (debug)
{
printf("%u:\n",pid);
DoModules(proc);
printf("\n");
}
else
{
printf("%u ", pid);
DoModules(proc);
}
CloseHandle(proc);
}
void
DoProcesses()
{
DWORD plist[6400], clen;
int n_processes, i;
EnumProcesses(plist,sizeof(plist),&clen);
n_processes = clen / sizeof(DWORD);
for(i=0;i<n_processes;i++)
DoProcess(plist[i]);
}