ntdll

Documentation

Index

• func NtQueryInformationProcess(hProcess win32.HANDLE, processInfoClass win32.DWORD, processInfo win32.PVOID, ...) error
• func NtUnmapViewOfSection(hProcess win32.HANDLE, baseAddress win32.PVOID) error
• type PROCESS_BASIC_INFORMATION

Functions

func NtQueryInformationProcess

func NtQueryInformationProcess(hProcess win32.HANDLE,
	processInfoClass win32.DWORD,
	processInfo win32.PVOID,
	processInfoLength win32.ULONG,
	returnLength win32.ULONG_PTR) error

NtQueryInformationProcess Win32 API wrapper TODO: test it

func NtUnmapViewOfSection

func NtUnmapViewOfSection(hProcess win32.HANDLE, baseAddress win32.PVOID) error

NtUnmapViewOfSection Win32 API wrapper https://msdn.microsoft.com/en-us/library/windows/hardware/ff567119(v=vs.85).aspx TODO: test it

Types

type PROCESS_BASIC_INFORMATION

type PROCESS_BASIC_INFORMATION struct {
	ExitStatus                   win32.NTSTATUS
	PebBaseAddress               win32.PPEB
	AffinityMask                 win32.KAFFINITY
	BasePriority                 win32.KPRIORITY
	UniqueProcessId              win32.ULONG_PTR
	InheritedFromUniqueProcessId win32.ULONG_PTR
}