internal InjectionProperties(string targetProcessName, byte[] dllBytes) { DllBytes = dllBytes; SyscallManager = new SyscallManager(); RemoteProcess = new ProcessInstance(targetProcessName, SyscallManager); MemoryManager = new RemoteMemoryManager(RemoteProcess.Handle, SyscallManager); PeParser = new PeParser(DllBytes); }
internal InjectionProperties(string targetProcessName, string dllPath) { DllPath = dllPath; SyscallManager = new SyscallManager(); RemoteProcess = new ProcessInstance(targetProcessName, SyscallManager); MemoryManager = new RemoteMemoryManager(RemoteProcess.Handle, SyscallManager); PeParser = new PeParser(dllPath); }
internal PropertyWrapper(string targetProcessName, string dllPath) { DllPath = dllPath; SyscallManager = new SyscallManager(); TargetProcess = new ProcessInstance(targetProcessName, SyscallManager); MemoryManager = new MemoryManager(TargetProcess.Handle, SyscallManager); PeParser = new PortableExecutableParser(DllPath); }
internal PropertyWrapper(int targetProcessId, byte[] dllBytes) { DllBytes = dllBytes; SyscallManager = new SyscallManager(); TargetProcess = new ProcessInstance(targetProcessId, SyscallManager); MemoryManager = new MemoryManager(TargetProcess.Handle, SyscallManager); PeParser = new PortableExecutableParser(DllBytes); }
internal ProcessInstance(string targetProcessName, SyscallManager syscallManager) { Process = GetTargetProcess(targetProcessName); _syscallManager = syscallManager; Handle = OpenProcessHandle(); IsWow64 = GetProcessArchitecture(); _memoryManager = new MemoryManager(Handle, _syscallManager); _peInstances = new Dictionary <string, PeInstance>(); Modules = new List <ModuleInstance>(); GetProcessModules(); }
internal ProcessInstance(string targetProcessName, SyscallManager syscallManager) { Modules = new List <ModuleInstance>(); _peInstanceCache = new Dictionary <string, PeInstance>(); TargetProcess = GetTargetProcess(targetProcessName); _syscallManager = syscallManager; Handle = OpenProcessHandle(); IsWow64 = GetProcessArchitecture(); _memoryManager = new RemoteMemoryManager(Handle, _syscallManager); EnableDebuggerPrivileges(); Modules.AddRange(GetProcessModules()); }
internal MemoryManager(SafeProcessHandle processHandle, SyscallManager syscallManager) { _processHandle = processHandle; _syscallManager = syscallManager; }