PE-sieve
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Loading...
Searching...
No Matches
modules_enum.h
Go to the documentation of this file.
1#pragma once
2
3#include <windows.h>
4#include <stdexcept>
5#include <vector>
6
7namespace pesieve {
8 namespace util {
9 size_t enum_modules(IN HANDLE hProcess, OUT std::vector<HMODULE>& hMods, IN DWORD filters); //throws exceptions
10 };
11};
size_t enum_modules(IN HANDLE hProcess, OUT std::vector< HMODULE > &hMods, IN DWORD filters)
DWORD(__stdcall *_PssCaptureSnapshot)(HANDLE ProcessHandle