private List <ExportedFunction> GetNtDllFunctions() { var ntDllPath = Process.GetCurrentProcess().Modules.Cast <ProcessModule>().First(module => module.ModuleName == "ntdll.dll").FileName; using (var peParser = new PortableExecutableParser(ntDllPath)) { return(peParser.GetExportedFunctions()); } }
internal PeInstance(string modulePath) { PeParser = new PortableExecutableParser(modulePath); ExportedFunctions = PeParser.GetExportedFunctions(); }