zjgcjy/pykd
1
0
Fork 0
mirror of https://github.com/ivellioscolin/pykd.git synced 2025-04-15 16:13:22 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

[0.3.x] added : getTypeInfoProviderFromPdb ( create typeInfo provider from pdb file )

Browse Source 
[0.3.x] added : pushStack ( push a value into a stack )
[0.3.x] added : popStack( popStack )

git-svn-id: https://pykd.svn.codeplex.com/svn@91232 9b283d60-5439-405e-af05-b73fd8c4d996
This commit is contained in:
SND\ussrhero_cp 2017-05-13 05:49:20 +00:00 committed by Mikhail I. Izmestev
parent d3b5f99a20
commit 7fc08bcadd
6 changed files with 90 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
pykd-0.3-2013.sln
View File

@ -17,6 +17,7 @@ Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "um", "um", "{EEFC9510-DFA7-
samples\um\createfile.py = samples\um\createfile.py
samples\um\critlist.py = samples\um\critlist.py
samples\um\ldr.py = samples\um\ldr.py
samples\um\virtalloc.py = samples\um\virtalloc.py
EndProjectSection
EndProject
Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = ".nuget", ".nuget", "{D1F1222A-A12B-4FD7-91A0-0AB6393A3169}"

13
pykd/pycpucontext.h
View File

@ -204,6 +204,19 @@ inline kdlib::MEMOFFSET_64 stackFree(unsigned short byteCount) {
return kdlib::stackFree(byteCount);
}
inline void pushStack( const kdlib::NumVariant& value )
{
AutoRestorePyState pystate;
return kdlib::pushInStack(value);
}
inline kdlib::NumVariant popStack() {
AutoRestorePyState pystate;
kdlib::NumVariant value;
kdlib::popFromStack(value);
return value;
}
class CPUContextAdapter
{

2
pykd/pykdver.h
View File

@ -2,7 +2,7 @@
#define PYKD_VERSION_MAJOR 0
#define PYKD_VERSION_MINOR 3
#define PYKD_VERSION_SUBVERSION 2
#define PYKD_VERSION_BUILDNO 5
#define PYKD_VERSION_BUILDNO 6
#define __VER_STR2__(x) #x
#define __VER_STR1__(x) __VER_STR2__(x)

13
pykd/pymod.cpp
View File

@ -101,7 +101,8 @@ BOOST_PYTHON_FUNCTION_OVERLOADS( Module_enumTypes, ModuleAdapter::enumTypes, 1,
BOOST_PYTHON_FUNCTION_OVERLOADS( TypeInfo_ptrTo, TypeInfoAdapter::ptrTo, 1, 2 );
BOOST_PYTHON_FUNCTION_OVERLOADS( getTypeFromSource_, pykd::getTypeFromSource, 2, 3 );
BOOST_PYTHON_FUNCTION_OVERLOADS( getTypeInfoProviderFromPdb_, pykd::getTypeInfoProviderFromPdb, 1, 2 );
BOOST_PYTHON_FUNCTION_OVERLOADS( getTypeInfoProviderFromSource_, pykd::getTypeInfoProviderFromSource, 1, 2);
namespace pykd {
@ -420,8 +421,10 @@ BOOST_PYTHON_MODULE( pykd )
python::def( "getTypeFromSource", &pykd::getTypeFromSource, getTypeFromSource_( python::args("sourceCode", "typeName", "compileOptions"),
"Create typeInfo class from C/C++ source code") );
python::def( "getTypeInfoProviderFromSource", &pykd::getTypeInfoProviderFromSource,
"Create typeInfo provider from C/C++ source code");
python::def( "getTypeInfoProviderFromSource", &pykd::getTypeInfoProviderFromSource, getTypeInfoProviderFromSource_( python::args("sourceCode", "compileOptions"),
"Create typeInfo provider from C/C++ source code") );
python::def( "getTypeInfoProviderFromPdb", &pykd::getTypeInfoProviderFromPdb, getTypeInfoProviderFromPdb_( python::args("filePath", "baseOffset"),
"Create typeInfo provider from pdb file") );
// CPU registers
python::def( "reg", pykd::getRegisterByName,
@ -486,6 +489,10 @@ BOOST_PYTHON_MODULE( pykd )
"Allocate bytes of space in the stack in the target process" );
python::def( "stackFree", pykd::stackFree,
"Free space in the stack previously allocated by stackAlloc" );
python::def( "pushStack", pykd::pushStack,
"Push a value into a stack" );
python::def( "popStack", pykd::popStack,
"Pop a value from a stack" );
// breakpoints
python::def( "setBp", &Breakpoint::setSoftwareBreakpoint,

6
pykd/pytypeinfo.h
View File

@ -67,6 +67,12 @@ inline kdlib::TypeInfoProviderPtr getTypeInfoProviderFromSource(const std::wstri
return kdlib::getTypeInfoProviderFromSource(sourceCode, compileOptions);
}
inline kdlib::TypeInfoProviderPtr getTypeInfoProviderFromPdb(const std::wstring& fileName, kdlib::MEMOFFSET_64 offset = 0UL)
{
AutoRestorePyState pystate;
return kdlib::getTypeInfoProviderFromPdb(fileName, offset);
}
struct TypeInfoAdapter : public kdlib::TypeInfo {
static std::wstring getName( kdlib::TypeInfo &typeInfo )

59
samples/um/virtalloc.py Normal file
View File

@ -0,0 +1,59 @@
import pykd
win_src = '''
typedef void* LPVOID;
typedef size_t SIZE_T;
typedef unsigned long DWORD;
typedef bool BOOL;
LPVOID
__stdcall
VirtualAlloc(
LPVOID lpAddress,
SIZE_T dwSize,
DWORD flAllocationType,
DWORD flProtect
);
BOOL
__stdcall
VirtualFree(
LPVOID lpAddress,
SIZE_T dwSize,
DWORD dwFreeType
);
DWORD
__stdcall
GetLastError(void);l
'''
MEM_COMMIT = 0x1000
MEM_RELEASE = 0x8000
PAGE_READWRITE = 0x4
winTypeProvider = pykd.getTypeInfoProviderFromSource(win_src, "-w")
kernel = pykd.module('KERNELBASE')
VirtualAlloc = pykd.typedVar(winTypeProvider.getTypeByName('VirtualAlloc'), kernel.VirtualAlloc )
VirtualFree = pykd.typedVar(winTypeProvider.getTypeByName('VirtualFree'), kernel.VirtualFree )
GetLastError = pykd.typedVar(winTypeProvider.getTypeByName('GetLastError'), kernel.GetLastError )
addr = VirtualAlloc(0, 0x1000, MEM_COMMIT, PAGE_READWRITE)
if addr:
print("Allocated memory: %x" % addr )
if VirtualFree(addr, 0, MEM_RELEASE):
print("Successfully free memory")
else:
print("Failed VirtualFree with error %x" % GetLastError() )
else:
print("Failed VirtualAlloc with error %x" % GetLastError() )