internal InjectionProperties(string targetProcessName, byte[] dllBytes)
{
DllBytes = dllBytes;
SyscallManager = new SyscallManager();
RemoteProcess = new ProcessInstance(targetProcessName, SyscallManager);
MemoryManager = new RemoteMemoryManager(RemoteProcess.Handle, SyscallManager);
PeParser = new PeParser(DllBytes);
}
internal InjectionProperties(string targetProcessName, string dllPath)
{
DllPath = dllPath;
SyscallManager = new SyscallManager();
RemoteProcess = new ProcessInstance(targetProcessName, SyscallManager);
MemoryManager = new RemoteMemoryManager(RemoteProcess.Handle, SyscallManager);
PeParser = new PeParser(dllPath);
}
internal PropertyWrapper(string targetProcessName, string dllPath)
{
DllPath = dllPath;
SyscallManager = new SyscallManager();
TargetProcess = new ProcessInstance(targetProcessName, SyscallManager);
MemoryManager = new MemoryManager(TargetProcess.Handle, SyscallManager);
PeParser = new PortableExecutableParser(DllPath);
}
internal PropertyWrapper(int targetProcessId, byte[] dllBytes)
{
DllBytes = dllBytes;
SyscallManager = new SyscallManager();
TargetProcess = new ProcessInstance(targetProcessId, SyscallManager);
MemoryManager = new MemoryManager(TargetProcess.Handle, SyscallManager);
PeParser = new PortableExecutableParser(DllBytes);
}
internal ProcessInstance(string targetProcessName, SyscallManager syscallManager)
{
Process = GetTargetProcess(targetProcessName);
_syscallManager = syscallManager;
Handle = OpenProcessHandle();
IsWow64 = GetProcessArchitecture();
_memoryManager = new MemoryManager(Handle, _syscallManager);
_peInstances = new Dictionary <string, PeInstance>();
Modules = new List <ModuleInstance>();
GetProcessModules();
}
internal ProcessInstance(string targetProcessName, SyscallManager syscallManager)
{
Modules = new List <ModuleInstance>();
_peInstanceCache = new Dictionary <string, PeInstance>();
TargetProcess = GetTargetProcess(targetProcessName);
_syscallManager = syscallManager;
Handle = OpenProcessHandle();
IsWow64 = GetProcessArchitecture();
_memoryManager = new RemoteMemoryManager(Handle, _syscallManager);
EnableDebuggerPrivileges();
Modules.AddRange(GetProcessModules());
}
internal MemoryManager(SafeProcessHandle processHandle, SyscallManager syscallManager)
{
_processHandle = processHandle;
_syscallManager = syscallManager;
}