예제 #1
0
        public Tuple <String, ulong, ulong>[] MatchSymbols(string Match, string Module = "ntkrnlmp")
        {
            List <Tuple <String, ulong, ulong> > rv = new List <Tuple <string, ulong, ulong> >();

            foreach (var sec in Sections)
            {
                if (sec.Value.DebugDetails != null &&
                    !string.IsNullOrWhiteSpace(sec.Value.DebugDetails.PDBFullPath) && sec.Value.DebugDetails.PDBFullPath.Contains(Module) || string.IsNullOrWhiteSpace(Module))
                {
                    rv.AddRange(sym.MatchSyms(Match, sec.Value.DebugDetails.PDBFullPath, sec.Value.VA.FullAddr));
                }
            }

            return(rv.ToArray());
        }