Method load_module

windows/debug/symbols.py:328–363

Load a module at a given ``addr``. The module to load can be pass via a ``file_handle`` or the direct ``path`` of the file to load. :return: :class:`SymbolModule` -- The loaded module .. note:: The logic of ``SymLoadModuleEx`` seems somewhat strange about the n

(self, file_handle=None, path=None, name=None, addr=0, size=0, data=None, flags=0)

    def load_module(self, file_handle=None, path=None, name=None, addr=0, size=0, data=None, flags=0):
        """Load a module at a given ``addr``. The module to load can be pass via a ``file_handle``
        or the direct ``path`` of the file to load.

        :return: :class:`SymbolModule` -- The loaded module

        .. note::

            The logic of ``SymLoadModuleEx`` seems somewhat strange about the naming of the loaded module.
            A custom module ``name`` is only taken into account if the file is passed via a File handle.
            To make it more intuitive, if this function is call with a ``path`` and ``name`` and no ``file_handle``,
            it will open the path and directly call ``SymLoadModuleEx`` with a file handle and a name.
        """

        # Is that a bug in SymLoadModuleEx ?
        # To get a custom name for a module it use "path"
        # So we need to use file_handle and set a custom path
        # ! BUT it means we cannot get a custom name for a module where the path is not explicit and need to be searched
        if name is not None and file_handle is None and os.path.exists(path):
            try:
                f = open(path)
                file_handle = windows.utils.get_handle_from_file(f)
                path = name
            except Exception as e:
                pass
        # Expect a-string
        path = windows.pycompat.raw_encode(path)
        try:
            load_addr = winproxy.SymLoadModuleEx(self.handle, file_handle, path, name, addr, size, data, flags)
        except WindowsError as e:
            # if e.winerror == 0:
                # Already loaded ?
                # What if someone try to load another PE at the same BaseOfDll ?
                # return BaseOfDll
            raise
        return self.get_module(load_addr)

    def load_file(self, path, name=None, addr=0, size=0, data=None, flags=0):
        """Load the module ``path`` at ``addr``