Exemple #1
0
        private List <ExportedFunction> GetNtDllFunctions()
        {
            var ntDllPath = Process.GetCurrentProcess().Modules.Cast <ProcessModule>().First(module => module.ModuleName == "ntdll.dll").FileName;

            using (var peParser = new PortableExecutableParser(ntDllPath))
            {
                return(peParser.GetExportedFunctions());
            }
        }
Exemple #2
0
        internal PeInstance(string modulePath)
        {
            PeParser = new PortableExecutableParser(modulePath);

            ExportedFunctions = PeParser.GetExportedFunctions();
        }