windows-server-2003/inetsrv/iis/svcs/restart/iisrsta/enummod.c

/*++

Copyright (c) 1995-1997  Microsoft Corporation

Module Name:

    enummod.c

Abstract:

    This module implements a remote module enumerator.

Author:

    Keith Moore (keithmo) 16-Sep-1997

Revision History:

--*/

#include <nt.h>
#include <ntrtl.h>
#include <nturtl.h>

#include <windows.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <wchar.h>
#include <stdlib.h>

#include "inetdbgp.h"

BOOLEAN
EnumModules(
    IN HANDLE ExtensionCurrentProcess,
    IN PFN_ENUMMODULES EnumProc,
    IN PVOID Param
    )

/*++

Routine Description:

    Enumerates all loaded modules in the debugee.

Arguments:

    EnumProc - An enumeration proc that will be invoked for each module.

    Param - An uninterpreted parameter passed to the enumeration proc.

Return Value:

    BOOLEAN - TRUE if successful, FALSE otherwise.

--*/

{

    PROCESS_BASIC_INFORMATION basicInfo;
    NTSTATUS status;
    PPEB peb;
    PPEB_LDR_DATA ldr = NULL;
    PLIST_ENTRY ldrHead, ldrNext;
    PLDR_DATA_TABLE_ENTRY ldrEntry;
    LDR_DATA_TABLE_ENTRY ldrEntryData;
    WCHAR tmpName[MAX_PATH];
    MODULE_INFO moduleInfo;

    //
    // Get the process info.
    //

    status = NtQueryInformationProcess(
                 ExtensionCurrentProcess,
                 ProcessBasicInformation,
                 &basicInfo,
                 sizeof(basicInfo),
                 NULL
                 );

    if( !NT_SUCCESS(status) ) 
    {
        return FALSE;
    }

    peb = basicInfo.PebBaseAddress;

    if( peb == NULL ) 
    {
        return FALSE;
    }

    //
    // ldr = peb->Ldr
    //

    if( !ReadProcessMemory(
            ExtensionCurrentProcess,
            (LPCVOID)&peb->Ldr,
            &ldr,
            sizeof(ldr),
            NULL
            ) ) 
    {
        return FALSE;
    }

    ldrHead = &ldr->InMemoryOrderModuleList;

    //
    // ldrNext = ldrHead->Flink;
    //

    if( !ReadProcessMemory(
            ExtensionCurrentProcess,
            (LPCVOID)&ldrHead->Flink,
            &ldrNext,
            sizeof(ldrNext),
            NULL
            ) ) 
    {
        return FALSE;
    }

    while( ldrNext != ldrHead ) 
    {
        //
        // Read the LDR_DATA_TABLE_ENTRY structure and the module name.
        //

        ldrEntry = CONTAINING_RECORD(
                       ldrNext,
                       LDR_DATA_TABLE_ENTRY,
                       InMemoryOrderLinks
                       );

        if( !ReadProcessMemory(
                ExtensionCurrentProcess,
                (LPCVOID)ldrEntry,
                &ldrEntryData,
                sizeof(ldrEntryData),
                NULL
                ) ) 
        {
            return FALSE;
        }

        if( !ReadProcessMemory(
                ExtensionCurrentProcess,
                (LPCVOID)ldrEntryData.BaseDllName.Buffer,
                tmpName,
                ldrEntryData.BaseDllName.MaximumLength,
                NULL
                ) ) 
        {
            return FALSE;
        }

#pragma prefast(push)
#pragma prefast(disable:69, "Don't complain about using wsprintf being too slow") 

        // BaseName and tmpName are both MAX_PATH
        wsprintfA(
            moduleInfo.BaseName,
            "%ws",
            tmpName
            );

        if( !ReadProcessMemory(
                ExtensionCurrentProcess,
                (LPCVOID)ldrEntryData.FullDllName.Buffer,
                tmpName,
                ldrEntryData.FullDllName.MaximumLength,
                NULL
                ) ) 
        {
            return FALSE;
        }

        // FullName and tmpName are both MAX_PATH
        wsprintfA(
            moduleInfo.FullName,
            "%ws",
            tmpName
            );

#pragma prefast(pop)

        moduleInfo.DllBase = (ULONG_PTR)ldrEntryData.DllBase;
        moduleInfo.EntryPoint = (ULONG_PTR)ldrEntryData.EntryPoint;
        moduleInfo.SizeOfImage = (ULONG)ldrEntryData.SizeOfImage;

        //
        // Invoke the callback.
        //

        if( !(EnumProc)(
                Param,
                &moduleInfo
                ) ) {
            break;
        }

        ldrNext = ldrEntryData.InMemoryOrderLinks.Flink;

    }

    return TRUE;

}   // EnumModules