kernel

package
v0.0.0-...-efc12f5 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Sep 22, 2023 License: MIT Imports: 13 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type Kernel

type Kernel struct {
	Hook *hook.Hook
	File *pe.File
}

func New

func New(dll dll.Dll) (kernel *Kernel, err error)

func (*Kernel) FuncPtr

func (k *Kernel) FuncPtr(name string) (ptr uint64, err error)

func (*Kernel) Id

func (k *Kernel) Id(name string) (id uint16, err error)

func (*Kernel) IdOrdinal

func (k *Kernel) IdOrdinal(ordinal uint32) (id uint16, err error)

func (*Kernel) Images

func (k *Kernel) Images() (images map[string]windows.Image)

Images return a map of loaded dll paths to current process offsets

func (*Kernel) MemoryId

func (k *Kernel) MemoryId(name string) (uint16, error)

MemoryId takes the exported syscall name or ordinal and gets the ID it refers to

func (*Kernel) ModuleOrder

func (k *Kernel) ModuleOrder(i int) (start uintptr, size uintptr, path string)

ModuleOrder returns the start address of the module located at i in the load order

func (*Kernel) NewProc

func (k *Kernel) NewProc(name string) *windows.Procedure

func (*Kernel) WriteMemory

func (k *Kernel) WriteMemory(buf []byte, destination uintptr)

WriteMemory writes memory to the specified address May cause panic if memory is not writable

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL