1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
use std::mem::zeroed;
use crate::{size_of, FaitheError};
use windows::Win32::{
Foundation::{HANDLE, CloseHandle},
System::{
Diagnostics::Debug::{GetThreadContext, SetThreadContext},
Threading::{
NtQueryInformationThread, OpenThread, ResumeThread, SuspendThread, THREADINFOCLASS,
THREAD_ACCESS_RIGHTS,
},
},
};
pub use windows::Win32::System::Diagnostics::Debug::CONTEXT;
mod iter;
pub use iter::*;
pub struct OwnedThread(HANDLE);
impl OwnedThread {
pub fn open(
thread_id: u32,
inherit_handle: bool,
desired_access: THREAD_ACCESS_RIGHTS,
) -> crate::Result<Self> {
unsafe {
OpenThread(desired_access, inherit_handle, thread_id)
.map_err(|_| FaitheError::last_error())
.map(|v| Self(v))
}
}
pub unsafe fn handle(&self) -> HANDLE {
self.0
}
pub fn into_handle(self) -> HANDLE {
let handle = self.0;
core::mem::forget(self);
handle
}
pub fn start_address(&self) -> crate::Result<usize> {
let mut addr = 0;
unsafe {
NtQueryInformationThread(
self.0,
THREADINFOCLASS(9), &mut addr as *mut _ as _,
size_of!(usize) as _,
0 as _,
)?;
}
Ok(addr)
}
pub fn suspend(&self) -> crate::Result<u32> {
unsafe {
match SuspendThread(self.0) {
u32::MAX => Err(FaitheError::last_error()),
sus => Ok(sus),
}
}
}
pub fn resume(&self) -> crate::Result<u32> {
unsafe {
match ResumeThread(self.0) {
u32::MAX => Err(FaitheError::last_error()),
sus => Ok(sus),
}
}
}
pub fn get_context(&self) -> crate::Result<CONTEXT> {
unsafe {
let mut ctx = zeroed();
if GetThreadContext(self.0, &mut ctx) == false {
Err(FaitheError::last_error())
} else {
Ok(ctx)
}
}
}
pub fn set_context(&self, ctx: &CONTEXT) -> crate::Result<()> {
unsafe {
if SetThreadContext(self.0, ctx as _) == false {
Err(FaitheError::last_error())
} else {
Ok(())
}
}
}
}
impl Drop for OwnedThread {
fn drop(&mut self) {
unsafe {
CloseHandle(self.0);
}
}
}