63 lines
2.4 KiB
C#
63 lines
2.4 KiB
C#
/* This software is licensed by the MIT License, see LICENSE file */
|
|
/* Copyright © 2024-2025 Gregory Lirent */
|
|
|
|
using WebmrAPI.Exceptions;
|
|
using WebmrAPI.Models;
|
|
using WebmrAPI.Utils;
|
|
|
|
namespace WebmrAPI.Services.Scanners
|
|
{
|
|
public class MemoryRegionScanner : AbstractScanner<MemoryRegionInfo>
|
|
{
|
|
override public ScanTarget Target { get => ScanTarget.MemoryRegions; }
|
|
internal int PID { get; private set; }
|
|
|
|
override internal async Task<bool> ScanAsync(Dictionary<long, MemoryRegionInfo> data)
|
|
{
|
|
|
|
return await Task.Run<bool>(() =>
|
|
{
|
|
using (var process = new WindowsProcess(PID))
|
|
{
|
|
try
|
|
{
|
|
process.ForeachMemoryRegion(info =>
|
|
{
|
|
long addr = info.BaseAddress.ToInt64();
|
|
data.Add(addr, new MemoryRegionInfo
|
|
{
|
|
MemoryAddress = addr,
|
|
MemorySize = info.RegionSize.ToUInt64(),
|
|
MemoryState = info.State,
|
|
MemoryPageProtection = info.PageProtection,
|
|
MemoryType = info.Type
|
|
});
|
|
});
|
|
return true;
|
|
}
|
|
catch (ProcessAccessDeniedException ex)
|
|
{
|
|
Provider.Logger.LogWarning($"Access denied to process {PID} for memory region scanning. Error: {ex.Message}");
|
|
}
|
|
catch (MemoryRegionException ex)
|
|
{
|
|
Provider.Logger.LogWarning($"Error scanning memory regions for PID {PID}. Error: {ex.Message}");
|
|
return true;
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
Provider.Logger.LogError($"An unexpected error occurred while scanning memory regions for PID {PID}. Error: {ex.Message}");
|
|
}
|
|
}
|
|
return false;
|
|
});
|
|
}
|
|
|
|
public MemoryRegionScanner(IScanProvider scanner, LazyConcurrentContainer<MemoryRegionInfo> container, int pid)
|
|
: base(scanner, container)
|
|
{
|
|
PID = pid;
|
|
}
|
|
}
|
|
}
|