예제 #1
0
        /// <summary>
        /// Gets the name of the mapped image. In most cases, this is null. If the debugger is mapping an image file
        /// (for example, during minidump debugging), this is the name of the mapped image.
        /// </summary>
        /// <param name="module">The module.</param>
        public string GetModuleMappedImage(Module module)
        {
            ElfCoreDump dump       = GetDump(module.Process);
            string      modulePath = dump.GetModuleOriginalPath(module.Address);

            return(GetModuleMappedImage(dump, modulePath));
        }
예제 #2
0
        /// <summary>
        /// Gets the name of the image. This is the name of the executable file, including the extension.
        /// Typically, the full path is included in user mode but not in kernel mode.
        /// </summary>
        /// <param name="module">The module.</param>
        public string GetModuleImageName(Module module)
        {
            ElfCoreDump dump     = GetDump(module.Process);
            string      name     = dump.GetModuleOriginalPath(module.Address);
            string      fileName = Path.GetFileName(name);

            return(fileName);
        }
예제 #3
0
        /// <summary>
        /// Gets the name of the loaded image. Unless Microsoft CodeView symbols are present, this is the same as the image name.
        /// </summary>
        /// <param name="module">The module.</param>
        public string GetModuleLoadedImage(Module module)
        {
            ElfCoreDump dump = GetDump(module.Process);

            return(dump.GetModuleOriginalPath(module.Address));
        }