Method Init

WinArk/SymbolHelper.cpp:6–80

#include <filesystem>

void SymbolHelper::Init() {
	void* win32kBase = Helpers::GetWin32kBase();
	DWORD size = Helpers::GetWin32kImageSize();
	char symPath[MAX_PATH];
	::GetCurrentDirectoryA(MAX_PATH, symPath);
	std::string pdbPath = "\\Symbols";
	std::string name;
	pdbPath = symPath + pdbPath;

	for (auto& iter : std::filesystem::directory_iterator(pdbPath)) {
		auto filename = iter.path().filename().string();
		if (filename.find("win32") != std::string::npos) {
			name = filename;
			break;
		}
	}
	std::string pdbFile = pdbPath + "\\" + name;
	_win32kSize = size;
	_win32kPdb = pdbFile;
	_win32kModule = std::string(name, 0, name.find("."));

#ifdef _WIN64
	_win32kBase = (DWORD64)win32kBase;
#else
	_win32kBase = (DWORD32)win32kBase;
#endif

	void* kernelBase = Helpers::GetKernelBase();
	size = Helpers::GetKernelImageSize();

	for (auto& iter : std::filesystem::directory_iterator(pdbPath)) {
		auto filename = iter.path().filename().string();
		if (filename.find("ntk") != std::string::npos) {
			name = filename;
			break;
		}
	}

	ATLTRACE("%s", name.c_str());



	pdbFile = pdbPath + "\\" + name;
	_kernelSize = size;
	_kernelPdb = pdbFile;
	_kernelModule = std::string(name, 0, name.find("."));
#ifdef _WIN64
	_kernelBase = (DWORD64)kernelBase;
#else
	_kernelBase = (DWORD)kernelBase;
#endif

	void* flgmgrBase = Helpers::GetKernelModuleBase("fltmgr.sys");
	size = Helpers::GetKernelModuleImageSize("fltmgr.sys");
	for (auto& iter : std::filesystem::directory_iterator(pdbPath)) {
		auto filename = iter.path().filename().string();
		if (filename.find("flt") != std::string::npos) {
			name = filename;