Skip to content

Exports

Lloyd Kinsella edited this page Jul 7, 2016 · 6 revisions

To get the exported functions for a Portable Executable you can get the tables that build the exports individually or you can can just supply an ExecutableImage instance.

Example:

var image = ExecutableImage.Get(@"C:\Windows\explorer.exe");
var exports = Exports.Get(image);

Exports supports IEnumerable<T> so you can easily iterate the exported functions.

Example:

foreach(Export export in exports)
{
    Console.WriteLine("Entry Point: 0x" + export.EntryPoint.ToString("X8"));
    Console.WriteLine("Name: " + export.Name);
    Console.WriteLine("Ordinal: " + export.Ordinal);
    Console.WriteLine("Forward Name: " + export.ForwardName);
}
Clone this wiki locally