Method ScanModule

Source/Client/NM_Engine/IModuleScanner.cpp:462–503

}

void IScanner::ScanModule(HANDLE hProcess, const std::string & szModuleName, DWORD64 dwModuleBase, DWORD dwModuleSize)
{
	std::lock_guard <std::recursive_mutex> __lock(m_Mutex);

	SCANNER_LOG(LL_SYS, "Module scanner has been started! Target module: %s(%p-%p) Target proc: %p(%u)",
		szModuleName.c_str(), dwModuleBase, dwModuleSize, hProcess, g_winapiApiTable->GetProcessId(hProcess));

	if (IsScannedModule(szModuleName))
	{
		SCANNER_LOG(LL_SYS, "Module already scanned!");
		return;
	}

	// Add to checked list
	m_vScannedModuleNames.push_back(szModuleName);

	// Scan routine

	auto bRet = false;

	// TODO: Scan export names

	/// 1
	// Scan module file
	bRet = ScanFile(hProcess, FILE_TYPE_MODULE);
//	SCANNER_LOG(bRet ? LL_SYS : LL_ERR, "Module file scan routine completed! Result: %d", bRet);

	/// 2
	// Scan module entrypoint
	bRet = ScanModuleBase(hProcess, szModuleName, dwModuleBase, dwModuleSize);
//	SCANNER_LOG(bRet ? LL_SYS : LL_ERR, "Module link scan routine completed! Result: %d", bRet);

	/// 3
	// Scan module informations
	bRet = ScanModuleInformations(hProcess, szModuleName, dwModuleBase, dwModuleSize);
//	SCANNER_LOG(bRet ? LL_SYS : LL_ERR, "Module information scan routine completed! Result: %d", bRet);

	/// 4
	// Scan module pe header
	bRet = ScanModuleHeader(hProcess, szModuleName, dwModuleBase, dwModuleSize);
//	SCANNER_LOG(bRet ? LL_SYS : LL_ERR, "Module header scan routine completed! Result: %d", bRet);
}


std::vector < std::shared_ptr <SModuleEnumContext> > IScanner::GetModuleList(HANDLE hProcess)