mirror of
https://github.com/hasherezade/tiny_tracer
synced 2026-06-08 14:36:37 +00:00
hasherezade
119 lines
2.9 KiB
C++
119 lines
2.9 KiB
C++
#include "TraceLog.h"
|
|
|
|
#define DELIMITER ';'
|
|
|
|
std::string get_dll_name(const std::string& str)
|
|
{
|
|
std::size_t len = str.length();
|
|
std::size_t found = str.find_last_of("/\\");
|
|
std::size_t ext = str.find_last_of(".");
|
|
if (ext >= len) return "";
|
|
|
|
std::string name = str.substr(found + 1, ext - (found + 1));
|
|
std::transform(name.begin(), name.end(), name.begin(), tolower);
|
|
return name;
|
|
}
|
|
|
|
void TraceLog::logCall(const ADDRINT prevModuleBase, const ADDRINT prevAddr, bool isRVA, const std::string module, const std::string func)
|
|
{
|
|
if (!createFile()) return;
|
|
ADDRINT rva = (isRVA) ? prevAddr : prevAddr - prevModuleBase;
|
|
if (!isRVA) {
|
|
m_traceFile << "> " << prevModuleBase << "+";
|
|
}
|
|
m_traceFile <<
|
|
std::hex << rva
|
|
<< DELIMITER;
|
|
|
|
if (!m_shortLog) {
|
|
m_traceFile << "called: "
|
|
<< module;
|
|
}
|
|
else {
|
|
m_traceFile << get_dll_name(module);
|
|
}
|
|
if (func.length() > 0) {
|
|
m_traceFile << "." << func;
|
|
}
|
|
m_traceFile << std::endl;
|
|
m_traceFile.flush();
|
|
}
|
|
|
|
void TraceLog::logCall(const ADDRINT prevBase, const ADDRINT prevAddr, const ADDRINT calledPageBase, const ADDRINT callAddr)
|
|
{
|
|
if (!createFile()) return;
|
|
if (prevBase) {
|
|
m_traceFile << "> " << prevBase << "+";
|
|
}
|
|
const ADDRINT rva = callAddr - calledPageBase;
|
|
m_traceFile <<
|
|
std::hex << prevAddr
|
|
<< DELIMITER
|
|
<< "called: ?? [" << calledPageBase << "+" << rva << "]"
|
|
<< std::endl;
|
|
m_traceFile.flush();
|
|
}
|
|
|
|
void TraceLog::logSectionChange(const ADDRINT prevAddr, std::string name)
|
|
{
|
|
if (!createFile()) return;
|
|
m_traceFile
|
|
<< std::hex << prevAddr
|
|
<< DELIMITER
|
|
<< "section: [" << name << "]"
|
|
<< std::endl;
|
|
m_traceFile.flush();
|
|
}
|
|
|
|
void TraceLog::logRdtsc(const ADDRINT base, const ADDRINT rva)
|
|
{
|
|
if (!createFile()) return;
|
|
if (base) {
|
|
m_traceFile << "> " << std::hex << base << "+";
|
|
}
|
|
m_traceFile
|
|
<< std::hex << rva
|
|
<< DELIMITER
|
|
<< "RDTSC"
|
|
<< std::endl;
|
|
m_traceFile.flush();
|
|
}
|
|
|
|
|
|
void TraceLog::logCpuid(const ADDRINT base, const ADDRINT rva, const ADDRINT param)
|
|
{
|
|
if (!createFile()) return;
|
|
if (base) {
|
|
m_traceFile << "> " << std::hex << base << "+";
|
|
}
|
|
m_traceFile
|
|
<< std::hex << rva
|
|
<< DELIMITER
|
|
<< "CPUID:"
|
|
<< std::hex << param
|
|
<< std::endl;
|
|
m_traceFile.flush();
|
|
}
|
|
|
|
void TraceLog::logLine(std::string str)
|
|
{
|
|
if (!createFile()) return;
|
|
|
|
m_traceFile
|
|
<< "\t"
|
|
<< str
|
|
<< std::endl;
|
|
m_traceFile.flush();
|
|
}
|
|
|
|
void TraceLog::logNewSectionCalled(const ADDRINT prevAddr, std::string prevSection, std::string currSection)
|
|
{
|
|
createFile();
|
|
m_traceFile
|
|
<< std::hex << prevAddr
|
|
<< DELIMITER
|
|
<< "[" << prevSection << "] -> [" << currSection << "]"
|
|
<< std::endl;
|
|
m_traceFile.flush();
|
|
}
|