Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func ReadArea ¶
ReadArea reads a full memory area within a given process, starting at the base address and reading up to the buffer size. The memory area can consist of multiple regions with various access rights. If the region is inaccessible and protection changing flag is enabled, this function tries to change the region protection to read-only access. If the request to change region protection is granted, upon completion, the original access permissions are restored. On read failure the region is skipped, and the read is moving to the next one leaving in the output buffer an empty space of the region size.
Types ¶
type Region ¶
type Region struct {
// contains filtered or unexported fields
}
Region describes the state of a range of pages in the process virtual address space and offers convenient methods for reading and accessing region memory. This code is inspired by libpeconv library: https://github.com/hasherezade/libpeconv
Source Files