kernel32

Documentation

Index

• Constants
• func CloseHandle(hObject windows.HANDLE) windows.BOOL
• func CreateRemoteThread(hProcess windows.HANDLE, lpThreadAttributes windows.LPVOID, ...) windows.HANDLE
• func CreateToolhelp32Snapshot(dwFlags, th32ProcessID windows.DWORD) windows.HANDLE
• func GetCurrentThreadId() windows.DWORD
• func Module32First(hSnapshot windows.HANDLE, lpme *MODULEENTRY32) windows.BOOL
• func Module32Next(hSnapshot windows.HANDLE, lpme *MODULEENTRY32) windows.BOOL
• func OpenProcess(dwDesiredAccess windows.DWORD, bInheritHandle windows.BOOL, ...) windows.HANDLE
• func Process32First(hSnapshot windows.HANDLE, lppe *PROCESSENTRY32) windows.BOOL
• func Process32Next(hSnapshot windows.HANDLE, lppe *PROCESSENTRY32) windows.BOOL
• func ReadProcessMemory(hProcess windows.HANDLE, lpBaseAddress windows.LPCVOID, ...) windows.BOOL
• func VirtualAlloc(lpAddress windows.LPVOID, dwSize windows.SIZE_T, ...) windows.LPVOID
• func VirtualAllocEx(hProcess windows.HANDLE, lpAddress windows.LPVOID, dwSize windows.SIZE_T, ...) windows.LPVOID
• func WaitForSingleObject(hHandle windows.HANDLE, dwMilliseconds windows.DWORD) windows.DWORD
• func WriteProcessMemory(hProcess windows.HANDLE, lpBaseAddress windows.LPVOID, ...) windows.BOOL
• type MODULEENTRY32
• type PROCESSENTRY32

Constants

const (
	PROCESS_TERMINATE                 = 0x0001
	PROCESS_CREATE_THREAD             = 0x0002
	PROCESS_SET_SESSIONID             = 0x0004
	PROCESS_VM_OPERATION              = 0x0008
	PROCESS_VM_READ                   = 0x0010
	PROCESS_VM_WRITE                  = 0x0020
	PROCESS_DUP_HANDLE                = 0x0040
	PROCESS_CREATE_PROCESS            = 0x0080
	PROCESS_SET_QUOTA                 = 0x0100
	PROCESS_SET_INFORMATION           = 0x0200
	PROCESS_QUERY_INFORMATION         = 0x0400
	PROCESS_SUSPEND_RESUME            = 0x0800
	PROCESS_QUERY_LIMITED_INFORMATION = 0x1000
	PROCESS_SET_LIMITED_INFORMATION   = 0x2000

	PROCESS_ALL_ACCESS = 0x001F0FFF
)

const (
	MEM_COMMIT                = 0x00001000
	MEM_RESERVE               = 0x00002000
	MEM_RESET                 = 0x00080000
	MEM_RESET_UNDO            = 0x1000000
	MEM_LARGE_PAGES           = 0x20000000
	MEM_PHYSICAL              = 0x00400000
	MEM_TOP_DOWN              = 0x00100000
	MEM_WRITE_WATCH           = 0x00200000
	MEM_COALESCE_PLACEHOLDERS = 0x00001000
	MEM_PRESERVE_PLACEHOLDER  = 0x00000002
)

const (
	PAGE_NOACCESS          = 0x01
	PAGE_READONLY          = 0x02
	PAGE_READWRITE         = 0x04
	PAGE_WRITECOPY         = 0x08
	PAGE_EXECUTE           = 0x10
	PAGE_EXECUTE_READ      = 0x20
	PAGE_EXECUTE_READWRITE = 0x40
	PAGE_EXECUTE_WRITECOPY = 0x80
	PAGE_GUARD             = 0x100
	PAGE_NOCACHE           = 0x200
	PAGE_WRITECOMBINE      = 0x400
)

const (
	WAIT_OBJECT_0  = 0x00000000
	WAIT_ABANDONED = 0x00000080
	WAIT_TIMEOUT   = 0x00000102
	WAIT_FAILED    = 0xFFFFFFFF

	INFINITE = 0xFFFFFFFF
)

const (
	TH32CS_SNAPHEAPLIST = 0x00000001
	TH32CS_SNAPPROCESS  = 0x00000002
	TH32CS_SNAPTHREAD   = 0x00000004
	TH32CS_SNAPMODULE   = 0x00000008
	TH32CS_SNAPMODULE32 = 0x00000010
	TH32CS_SNAPALL      = TH32CS_SNAPHEAPLIST | TH32CS_SNAPPROCESS | TH32CS_SNAPTHREAD | TH32CS_SNAPMODULE
	TH32CS_INHERIT      = 0x80000000
)

const (
	MAX_MODULE_NAME32 = 255
)

Functions

func CloseHandle

func CloseHandle(hObject windows.HANDLE) windows.BOOL

func CreateRemoteThread

func CreateRemoteThread(hProcess windows.HANDLE, lpThreadAttributes windows.LPVOID, dwStackSize windows.SIZE_T, lpStartAddress, lpParameter windows.LPVOID, dwCreationFlags windows.DWORD, lpThreadId *windows.DWORD) windows.HANDLE

func CreateToolhelp32Snapshot

func CreateToolhelp32Snapshot(dwFlags, th32ProcessID windows.DWORD) windows.HANDLE

func GetCurrentThreadId

func GetCurrentThreadId() windows.DWORD

func Module32First

func Module32First(hSnapshot windows.HANDLE, lpme *MODULEENTRY32) windows.BOOL

func Module32Next

func Module32Next(hSnapshot windows.HANDLE, lpme *MODULEENTRY32) windows.BOOL

func OpenProcess

func OpenProcess(dwDesiredAccess windows.DWORD, bInheritHandle windows.BOOL, dwProcessId windows.DWORD) windows.HANDLE

func Process32First

func Process32First(hSnapshot windows.HANDLE, lppe *PROCESSENTRY32) windows.BOOL

func Process32Next

func Process32Next(hSnapshot windows.HANDLE, lppe *PROCESSENTRY32) windows.BOOL

func ReadProcessMemory

func ReadProcessMemory(hProcess windows.HANDLE, lpBaseAddress windows.LPCVOID, lpBuffer windows.LPVOID, nSize windows.SIZE_T, lpNumberOfBytesRead *windows.SIZE_T) windows.BOOL

func VirtualAlloc

func VirtualAlloc(lpAddress windows.LPVOID, dwSize windows.SIZE_T, flAllocationType, flProtect windows.DWORD) windows.LPVOID

func VirtualAllocEx

func VirtualAllocEx(hProcess windows.HANDLE, lpAddress windows.LPVOID, dwSize windows.SIZE_T, flAllocationType, flProtect windows.DWORD) windows.LPVOID

func WaitForSingleObject

func WaitForSingleObject(hHandle windows.HANDLE, dwMilliseconds windows.DWORD) windows.DWORD

func WriteProcessMemory

func WriteProcessMemory(hProcess windows.HANDLE, lpBaseAddress windows.LPVOID, lpBuffer windows.LPCVOID, nSize windows.SIZE_T, lpNumberOfBytesWritten *windows.SIZE_T) windows.BOOL

Types

type MODULEENTRY32

type MODULEENTRY32 struct {
	DwSize        windows.DWORD
	Th32ModuleID  windows.DWORD
	Th32ProcessID windows.DWORD
	GlblcntUsage  windows.DWORD
	ProccntUsage  windows.DWORD
	ModBaseAddr   *windows.BYTE
	ModBaseSize   windows.DWORD
	HModule       windows.HMODULE
	SzModule      [MAX_MODULE_NAME32 + 1]byte
	SzExePath     [windows.MAX_PATH]byte
}

type PROCESSENTRY32

type PROCESSENTRY32 struct {
	DwSize              windows.DWORD
	CntUsage            windows.DWORD
	Th32ProcessID       windows.DWORD
	Th32DefaultHeapID   windows.ULONG_PTR
	Th32ModuleID        windows.DWORD
	CntThreads          windows.DWORD
	Th32ParentProcessID windows.DWORD
	PcPriClassBase      windows.LONG
	DwFlags             windows.DWORD
	SzExeFile           [windows.MAX_PATH]windows.CHAR
}