-
Notifications
You must be signed in to change notification settings - Fork 5
Exports
Lloyd Kinsella edited this page Jul 7, 2016
·
6 revisions
To get the exported functions for a Portable Executable you can get the tables that build the exports individually or you can can just supply an ExecutableImage
instance.
Example:
var image = ExecutableImage.Get(@"C:\Windows\explorer.exe");
var exports = Exports.Get(image);
Exports
supports IEnumerable<T>
so you can easily iterate the exported functions.
Example:
foreach(Export export in exports)
{
Console.WriteLine("Entry Point: 0x" + export.EntryPoint.ToString("X8"));
Console.WriteLine("Name: " + export.Name);
Console.WriteLine("Ordinal: " + export.Ordinal);
Console.WriteLine("Forward Name: " + export.ForwardName);
}