From 806aa8b61b0246fc8478553779b7ee09a2d4c828 Mon Sep 17 00:00:00 2001 From: momo5502 Date: Sat, 9 Aug 2025 21:54:46 +0200 Subject: [PATCH] Print module name --- src/analyzer/analysis.cpp | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/src/analyzer/analysis.cpp b/src/analyzer/analysis.cpp index 67c45408..3ff57d84 100644 --- a/src/analyzer/analysis.cpp +++ b/src/analyzer/analysis.cpp @@ -134,6 +134,16 @@ namespace } } + void print_module_name(windows_emulator& win_emu, const size_t index) + { + const auto var_ptr = get_function_argument(win_emu.emu(), index); + if (var_ptr) + { + const auto* module_name = win_emu.mod_manager.find_name(var_ptr); + print_string(win_emu.log, module_name); + } + } + void handle_function_details(analysis_context& c, const std::string_view function) { if (function == "GetEnvironmentVariableA" || function == "ExpandEnvironmentStringsA") @@ -150,6 +160,11 @@ namespace print_arg_as_string(*c.win_emu, 2); print_arg_as_string(*c.win_emu, 1); } + else if (function == "GetProcAddress") + { + print_module_name(*c.win_emu, 0); + print_arg_as_string(*c.win_emu, 1); + } } bool is_thread_alive(const analysis_context& c, const uint32_t thread_id)