HooksDetection

Documentation

Index

• func AntiAntiDebug()
• func DetectHooksOnCommonWinAPIFunctions(moduleName string, functions []string) bool
• func GetModuleHandleA(library string) uintptr
• func GetProcAddress(hModule uintptr, function string) uintptr
• func LdrGetDllHandleEx(flags uint64, dllPath string, dllCharacteristics string, ...) uint32
• func LdrGetProcedureAddressForCaller(moduleHandle uintptr, procedureName *ANSI_STRING, procedureNumber uint16, ...) uint32
• func LowLevelGetModuleHandle(library string) uintptr
• func LowLevelGetProcAddress(hModule uintptr, function string) uintptr
• func RtlInitUnicodeString(destinationString *UNICODE_STRING, sourceString string)
• func RtlUnicodeStringToAnsiString(destinationString *ANSI_STRING, unicodeString *UNICODE_STRING, ...)
• type ANSI_STRING
• type UNICODE_STRING

Functions

func AntiAntiDebug

func AntiAntiDebug()

func DetectHooksOnCommonWinAPIFunctions

func DetectHooksOnCommonWinAPIFunctions(moduleName string, functions []string) bool

func GetModuleHandleA

func GetModuleHandleA(library string) uintptr

func GetProcAddress

func GetProcAddress(hModule uintptr, function string) uintptr

func LdrGetDllHandleEx

func LdrGetDllHandleEx(flags uint64, dllPath string, dllCharacteristics string, libraryName *UNICODE_STRING, dllHandle *uintptr) uint32

func LdrGetProcedureAddressForCaller

func LdrGetProcedureAddressForCaller(moduleHandle uintptr, procedureName *ANSI_STRING, procedureNumber uint16, functionHandle *uintptr, flags uint64, callback uintptr) uint32

func LowLevelGetModuleHandle

func LowLevelGetModuleHandle(library string) uintptr

func LowLevelGetProcAddress

func LowLevelGetProcAddress(hModule uintptr, function string) uintptr

func RtlInitUnicodeString

func RtlInitUnicodeString(destinationString *UNICODE_STRING, sourceString string)

func RtlUnicodeStringToAnsiString

func RtlUnicodeStringToAnsiString(destinationString *ANSI_STRING, unicodeString *UNICODE_STRING, allocateDestinationString bool)

Types

type ANSI_STRING

type ANSI_STRING struct {
	Length        int16
	MaximumLength int16
	Buffer        *byte
}

type UNICODE_STRING

type UNICODE_STRING struct {
	Length        uint16
	MaximumLength uint16
	Buffer        uintptr
}