예제 #1
0
파일: mod32.c 프로젝트: shuowen/OpenNT
BOOL
StartProfileDll(
    PVOID DllHandle
)
/*++

Routine Description:

    This routine starts profiling for the specified dll

Arguments:

    Dll -- Supplies the dll to profile

Return Value:

    True if profiling started

--*/
{
    PLOADED_DLL Dll;
    NTSTATUS Status;
    UCHAR MessageString[80];

    if (DllHandle == NULL) {
        return FALSE;
    }

    Dll = DllHandle;
    if (!Dll->ProfileObject) {
        Dll->ProfileBufferSize = ((Dll->SizeOfCode +
                                   (1 << (PROFILE_BUCKET_SIZE - 1))) /
                                  (1 << PROFILE_BUCKET_SIZE)) * sizeof(ULONG);
        Dll->ProfileBuffer = malloc(Dll->ProfileBufferSize);

        if (!Dll->ProfileBuffer) {
            return FALSE;
        }

        memset(Dll->ProfileBuffer, 0, Dll->ProfileBufferSize);

        Status = NtCreateProfile(
                     &(Dll->ProfileObject),
                     Dll->Process,
                     (PVOID)(Dll->BaseOfCode),
                     Dll->SizeOfCode,
                     PROFILE_BUCKET_SIZE,
                     Dll->ProfileBuffer,
                     Dll->ProfileBufferSize
                 );

        if (!NT_SUCCESS(Status)) {

            sprintf(
                MessageString,
                "Failed to create profile object for dll %s, error code %lx",
                Dll->ImageName,
                Status
            );
            MessageBox(
                NULL,
                MessageString,
                "Segmented Profiler",
                MB_ICONSTOP | MB_OK
            );

            exit(0);
        }
    }

    Status = NtStartProfile(Dll->ProfileObject);

    if (!NT_SUCCESS(Status)) {

        sprintf(
            MessageString,
            "Failed to create profile object for dll %s, error code %lx",
            Dll->ImageName,
            Status
        );
        MessageBox(
            NULL,
            MessageString,
            "Segmented Profiler",
            MB_ICONSTOP | MB_OK
        );

        exit(0);
    }

    return TRUE;
}
예제 #2
0
main()
{
    HANDLE Profile, Profile2;
    ULONG Hack;
    PULONG Buffer;
    HANDLE CurrentProcessHandle;
    ULONG Size1;
    NTSTATUS status;

    Buffer = &Hack;

    CurrentProcessHandle = NtCurrentProcess();

    status = NtCreateProfile (&Profile,
                              CurrentProcessHandle,
                              NULL,
                              0xFFFFFFFF,
                              16,
                              Buffer,
                              (ULONG)64*1024,
                              ProfileTime,
                              (KAFFINITY)-1);

    if (status != STATUS_SUCCESS) {
        DbgPrint("(Expected) create profile #1 failed - status %lx\n", status);
    }

    status = NtStartProfile (Profile);
    if (status != STATUS_SUCCESS) {
        DbgPrint("(Expected) start profile #1 failed - status %lx\n", status);
    }

    status = NtStopProfile (Profile);
    if (status != STATUS_SUCCESS) {
        DbgPrint("(Expected) stop profile #1 failed - status %lx\n", status);
    }

    Size1 = 1024*64;
    Buffer = NULL;

    status = NtAllocateVirtualMemory (CurrentProcessHandle, (PVOID *)&Buffer,
                        0, &Size1, MEM_RESERVE | MEM_COMMIT, PAGE_READWRITE);

    //
    // This should fail as buffersize is too small.
    //

    status = NtCreateProfile (&Profile,
                              NtCurrentProcess(),
                              NULL,
                              0xFFFFFFFF,
                              16,
                              Buffer,
                              (ULONG)64*1024,
                              ProfileTime,
                              (KAFFINITY)-1);

    if (status != STATUS_SUCCESS) {
        DbgPrint("(Expected) create profile #2 failed - status %lx\n", status);
    }

    status = NtStartProfile (Profile);
    if (status != STATUS_SUCCESS) {
        DbgPrint("(Expected) start profile #2 failed - status %lx\n", status);
    }

    status = NtStopProfile (Profile);
    if (status != STATUS_SUCCESS) {
        DbgPrint("(Expected) stop profile #2 failed - status %lx\n", status);
    }

    status = NtClose (Profile);

    //
    // This should succeed.
    //

    status = NtCreateProfile (&Profile,
                              NtCurrentProcess(),
                              NULL,
                              0xFFFFFFFF,
                              18,
                              Buffer,
                              (ULONG)64*1024,
                              ProfileTime,
                              (KAFFINITY)-1);

    if (status != STATUS_SUCCESS) {
        DbgPrint("(Unexpected) create profile #3 failed - status %lx\n", status);
    }

    status = NtStartProfile (Profile);
    if (status != STATUS_SUCCESS) {
        DbgPrint("(Unexpected) start profile #3 failed - status %lx\n", status);
    }

    status = NtStopProfile (Profile);
    if (status != STATUS_SUCCESS) {
        DbgPrint("(Unexpected) stop profile #3 failed - status %lx\n", status);
    }

    status = NtClose (Profile);

    //
    // Attempt to create a profile that can't work because the
    // address range is too big.
    //

    status = NtCreateProfile (&Profile,
                              NtCurrentProcess(),
                              (PVOID)0x203030,
                              0xffffffff,
                              6,
                              Buffer,
                              (ULONG)64*1024,
                              ProfileTime,
                              (KAFFINITY)-1);

    if (status != STATUS_SUCCESS) {
        DbgPrint("(Expected) create profile #4 failed - status %lx\n", status);
    }

    status = NtStartProfile (Profile);
    if (status != STATUS_SUCCESS) {
        DbgPrint("(Expected) start profile #4 failed - status %lx\n", status);
    }

    status = NtStopProfile (Profile);
    if (status != STATUS_SUCCESS) {
        DbgPrint("(Expected) stop profile #4 failed - status %lx\n", status);
    }

    status = NtClose (Profile);

    //
    // Attempt to create a sucessful profile.
    //

    status = NtCreateProfile (&Profile,
                              NtCurrentProcess(),
                              (PVOID)0x80000000,
                              0x7fffffff,
                              17,
                              Buffer,
                              (ULONG)64*1024,
                              ProfileTime,
                              (KAFFINITY)-1);

    if (status != STATUS_SUCCESS) {
        DbgPrint("(Unexpected) create profile #5 failed - status %lx\n", status);
    }

    status = NtStartProfile (Profile);
    if (status != STATUS_SUCCESS) {
        DbgPrint("(Unexpected) start profile #5 failed - status %lx\n", status);
    }

    status = NtStopProfile (Profile);
    if (status != STATUS_SUCCESS) {
        DbgPrint("(Unexpected) stop profile #5 failed - status %lx\n", status);
    }

    //
    // now start it again.
    //

    status = NtStartProfile (Profile);
    if (status != STATUS_SUCCESS) {
        DbgPrint("(Unexpected) start profile #6.1 failed - status %lx\n", status);
    }

    //
    // now start it again, should fail.
    //

    status = NtStartProfile (Profile);
    if (status != STATUS_SUCCESS) {
        DbgPrint("(Expected) start profile #6.2 failed - status %lx\n", status);
    }

    //
    // now create another one (using the same buffer).
    //

    status = NtCreateProfile (&Profile2,
                              NtCurrentProcess(),
                              NULL,
                              0x3000000,
                              15,
                              Buffer,
                              (ULONG)64*1024,
                              ProfileTime,
                              (KAFFINITY)-1);


    if (status != STATUS_SUCCESS) {
        DbgPrint("create profile #7 failed - status %lx\n", status);
    }

    status = NtStartProfile (Profile2);
    if (status != STATUS_SUCCESS) {
        DbgPrint("start profile #7.1 failed - status %lx\n", status);
    }

    status = NtStopProfile (Profile2);
    if (status != STATUS_SUCCESS) {
        DbgPrint("stop profile #7.2 failed - status %lx\n", status);
    }

    status = NtStopProfile (Profile2);
    if (status != STATUS_SUCCESS) {
        DbgPrint("(Expected) stop profile #7.3 failed - status %lx\n", status);
    }

    status = NtStartProfile (Profile2);
    if (status != STATUS_SUCCESS) {
        DbgPrint("start profile #7.4 failed - status %lx\n", status);
    }

    status = NtClose (Profile);
    if (status != STATUS_SUCCESS) {
        DbgPrint("close profile #7.5 failed - status %lx\n", status);
    }

    return status;
}
예제 #3
0
파일: mod32.c 프로젝트: shuowen/OpenNT
BOOL
StartProfileModule32(
    PVOID ModuleList,
    PVOID ModuleHandle
)
/*++

Routine Description:

    This routine starts profiling for the specified 32 bit module

Arguments:

    ModuleList -- Supplies the module list
    ModuleHandle -- Supplies the Module to profile

Return Value:

    True if profiling started

--*/
{
    PMODULE32 Module;
    NTSTATUS Status;
    UCHAR MessageString[80];

    if (ModuleHandle == NULL) {
        return FALSE;
    }

    Module = GetDataFromListItem(ModuleList, ModuleHandle);

    if (!Module->ProfileObject) {
        Module->ProfileBufferSize = ((Module->SizeOfCode +
                                      (1 << (PROFILE_BUCKET_SIZE - 1))) /
                                     (1 << PROFILE_BUCKET_SIZE)) * sizeof(ULONG);
        Module->ProfileBuffer = malloc(Module->ProfileBufferSize);

        if (!Module->ProfileBuffer) {
            return FALSE;
        }

        memset(Module->ProfileBuffer, 0, Module->ProfileBufferSize);

        Status = NtCreateProfile(
                     &(Module->ProfileObject),
                     Module->Process,
                     (PVOID)(Module->BaseOfCode),
                     Module->SizeOfCode,
                     PROFILE_BUCKET_SIZE,
                     Module->ProfileBuffer,
                     Module->ProfileBufferSize,
                     ProfileTime,
                     (KAFFINITY)-1);

        if (!NT_SUCCESS(Status)) {

            sprintf(
                MessageString,
                "Failed to create profile object for dll %s, error code %lx",
                Module->ImageName,
                Status
            );
            MessageBox(
                NULL,
                MessageString,
                "Segmented Profiler",
                MB_ICONSTOP | MB_OK
            );

            exit(0);
        }
        Module->ReferenceCount++;
    }

    Status = NtStartProfile(Module->ProfileObject);

    if (!NT_SUCCESS(Status)) {

        sprintf(
            MessageString,
            "Failed to create profile object for dll %s, error code %lx",
            Module->ImageName,
            Status
        );
        MessageBox(
            NULL,
            MessageString,
            "Segmented Profiler",
            MB_ICONSTOP | MB_OK
        );

        exit(0);
    }

    return TRUE;
}