memory

Documentation

Index

• func DecodeWindowString(b []byte) string
• type BaseMemoryBlock
• type ProcessInfo
  • func OpenProcessByPid(pid uint32) (ProcessInfo, error)

Functions

func DecodeWindowString

func DecodeWindowString(b []byte) string

DecodeWindowString decodes MS-Windows (16LE) UTF files

Types

type BaseMemoryBlock

type BaseMemoryBlock struct {
	Handle      win32.HANDLE    //句柄
	BaseAddress win32.ULONGLONG //内存基址
	RegionSize  win32.ULONGLONG //内存空间大小
}

type ProcessInfo

type ProcessInfo struct {
	Pid         uint32          //进程ID
	Path        string          //进程所在目录
	Handle      win32.HANDLE    //句柄
	BaseAddress win32.ULONGLONG //进程基址
	RegionSize  win32.ULONGLONG //进程分配空间大小
}

func OpenProcessByPid

func OpenProcessByPid(pid uint32) (ProcessInfo, error)