You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
144 lines
3.5 KiB
144 lines
3.5 KiB
/*
|
|
* Copyright 2002-2019 Intel Corporation.
|
|
*
|
|
* This software is provided to you as Sample Source Code as defined in the accompanying
|
|
* End User License Agreement for the Intel(R) Software Development Products ("Agreement")
|
|
* section 1.L.
|
|
*
|
|
* This software and the related documents are provided as is, with no express or implied
|
|
* warranties, other than those that are expressly stated in the License.
|
|
*/
|
|
|
|
//
|
|
// This tool prints a trace of image load and unload events
|
|
//
|
|
|
|
#include <stdio.h>
|
|
#include "pin.H"
|
|
|
|
namespace WIND
|
|
{
|
|
#include <windows.h>
|
|
}
|
|
|
|
// Whether to check current process id received in KnobCurrentProcessId
|
|
KNOB<BOOL> KnobLoadSystemDlls(KNOB_MODE_WRITEONCE, "pintool",
|
|
"load_system_dlls", "0", "load system dlls in main()");
|
|
|
|
|
|
// Pin calls this function every time a new img is loaded
|
|
// It can instrument the image, but this example does not
|
|
// Note that imgs (including shared libraries) are loaded lazily
|
|
|
|
VOID ImageLoad(IMG img, VOID *v)
|
|
{
|
|
printf("Loading %s, Image id = %d\n", IMG_Name(img).c_str(), IMG_Id(img));
|
|
fflush(stdout);
|
|
}
|
|
|
|
// Pin calls this function every time a new img is unloaded
|
|
// You can't instrument an image that is about to be unloaded
|
|
VOID ImageUnload(IMG img, VOID *v)
|
|
{
|
|
printf("Unloading %s\n", IMG_Name(img).c_str());
|
|
fflush(stdout);
|
|
}
|
|
|
|
VOID ThreadStart(THREADID threadid, CONTEXT *ctxt, INT32 flags, VOID *v)
|
|
{
|
|
printf("Got thread start notification\n");
|
|
fflush(stdout);
|
|
}
|
|
|
|
void FiniCore()
|
|
{
|
|
fflush(stdout);
|
|
}
|
|
|
|
VOID Fini(INT32 code, VOID *v)
|
|
{
|
|
FiniCore();
|
|
}
|
|
|
|
class PROBE_FINI_OBJECT
|
|
{
|
|
public:
|
|
~PROBE_FINI_OBJECT()
|
|
{
|
|
FiniCore();
|
|
}
|
|
};
|
|
|
|
VOID AppStart(VOID *v)
|
|
{
|
|
printf("Application started\n");
|
|
fflush(stdout);
|
|
}
|
|
|
|
// argc, argv are the entire command line, including pin -t <toolname> -- ...
|
|
int main(int argc, char * argv[])
|
|
{
|
|
// Initialize symbol processing
|
|
PIN_InitSymbols();
|
|
|
|
// Initialize pin
|
|
PIN_Init(argc, argv);
|
|
|
|
// Register ImageLoad to be called when an image is loaded
|
|
IMG_AddInstrumentFunction(ImageLoad, 0);
|
|
|
|
// Register ImageUnload to be called when an image is unloaded
|
|
IMG_AddUnloadFunction(ImageUnload, 0);
|
|
|
|
printf("In tool's main, probed = %d\n", PIN_IsProbeMode());
|
|
|
|
if(KnobLoadSystemDlls)
|
|
{
|
|
WIND::HMODULE h1 = WIND::LoadLibrary("RPCRT4.dll");
|
|
if(h1 == NULL)
|
|
{
|
|
printf("Failed to load RPCRT4\n");
|
|
fflush(stdout);
|
|
exit(-1);
|
|
}
|
|
WIND::HMODULE h2 = WIND::LoadLibrary("advapi32.dll");
|
|
if(h1 == NULL)
|
|
{
|
|
printf("Failed to load advapi32\n");
|
|
fflush(stdout);
|
|
exit(-1);
|
|
}
|
|
WIND::HMODULE h3 = WIND::LoadLibrary("dbghelp.dll");
|
|
if(h1 == NULL)
|
|
{
|
|
printf("Failed to load dbghelp\n");
|
|
fflush(stdout);
|
|
exit(-1);
|
|
}
|
|
WIND::HMODULE h4 = WIND::LoadLibrary("user32.dll");
|
|
if(h1 == NULL)
|
|
{
|
|
printf("Failed to load user32\n");
|
|
fflush(stdout);
|
|
exit(-1);
|
|
}
|
|
}
|
|
|
|
// Never returns
|
|
if ( PIN_IsProbeMode() )
|
|
{
|
|
static PROBE_FINI_OBJECT finiObject;
|
|
PIN_AddApplicationStartFunction(AppStart, 0);
|
|
PIN_StartProgramProbed();
|
|
}
|
|
else
|
|
{
|
|
PIN_AddThreadStartFunction(ThreadStart, 0);
|
|
PIN_AddFiniFunction(Fini, 0);
|
|
PIN_StartProgram();
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|