system_services

func CloseHandle ¶

func CloseHandle(hObject syscall.Handle) (success bool, err error)

https://docs.microsoft.com/en-us/windows/win32/api/handleapi/nf-handleapi-closehandle BOOL CloseHandle(

HANDLE hObject

);

func OpenProcess ¶

func OpenProcess(dwDesiredAccess, bInheritHandle uint32, dwProcessId uint32) (handle syscall.Handle, err error)

https://docs.microsoft.com/en-us/windows/win32/api/processthreadsapi/nf-processthreadsapi-openprocess HANDLE OpenProcess(

DWORD dwDesiredAccess,
BOOL  bInheritHandle,
DWORD dwProcessId

);

func OpenProcessAllAccess ¶

func OpenProcessAllAccess(inheritHandle bool, processId uint32) (handle syscall.Handle, err error)

func ReadProcessMemory ¶

func ReadProcessMemory(hProcess syscall.Handle, lpBaseAddress, lpBuffer, nSize uintptr, numRead *uintptr) (success bool, err error)

https://docs.microsoft.com/en-us/windows/win32/api/memoryapi/nf-memoryapi-readprocessmemory BOOL ReadProcessMemory(

HANDLE  hProcess,
LPCVOID lpBaseAddress,
LPVOID  lpBuffer,
SIZE_T  nSize,
SIZE_T  *lpNumberOfBytesRead

);

func VirtualAllocEx ¶

func VirtualAllocEx(hProcess syscall.Handle, lpAddress, dwSize uintptr, flAllocationType, flProtect uint32) (baseAddress uintptr, err error)

https://docs.microsoft.com/en-us/windows/win32/api/memoryapi/nf-memoryapi-virtualallocex LPVOID VirtualAllocEx(

HANDLE hProcess,
LPVOID lpAddress,
SIZE_T dwSize,
DWORD  flAllocationType,
DWORD  flProtect

);

func VirtualFreeEx ¶

func VirtualFreeEx(hProcess syscall.Handle, lpBaseAddress, dwSize uintptr, dwFreeType uint32) (success bool, err error)

https://docs.microsoft.com/en-us/windows/win32/api/memoryapi/nf-memoryapi-virtualfreeex BOOL VirtualFreeEx(

HANDLE hProcess,
LPVOID lpAddress,
SIZE_T dwSize,
DWORD  dwFreeType

);