syscall

func BytePtrFromString ¶ added in v1.3.5

func BytePtrFromString(s string) (*byte, error)

func CheckRemoteDebuggerPresent ¶ added in v1.3.5

func CheckRemoteDebuggerPresent(hProcess uintptr, pbDebuggerPresent *bool) error

func DirectCall ¶

func DirectCall(funcAddr uintptr, args ...uintptr) (uintptr, error)

DirectCall calls a Windows API function directly by address using the libcall structure

func DoIndirectSyscallExternal ¶

func DoIndirectSyscallExternal(ssn uint16, syscallAddr uintptr, nargs uint32, args ...uintptr) uintptr

DoIndirectSyscallExternal calls the assembly indirect function directly

func DoSyscallExternal ¶

func DoSyscallExternal(ssn uint16, nargs uint32, args ...uintptr) uintptr

DoSyscallExternal calls the assembly function directly

func ExternalSyscall ¶

func ExternalSyscall(syscallNumber uint16, args ...uintptr) (uintptr, error)

ExternalSyscall is a wrapper that uses the assembly implementation

func GetProcAddress ¶ added in v1.3.5

func GetProcAddress(moduleHandle uintptr, proc unsafe.Pointer) uintptr

func HashIndirectSyscall ¶

func HashIndirectSyscall(functionHash uint32, args ...uintptr) (uintptr, error)

HashIndirectSyscall executes an indirect syscall using a function name hash

func HashSyscall ¶

func HashSyscall(functionHash uint32, args ...uintptr) (uintptr, error)

HashSyscall executes a direct syscall using a function name hash This simplifies API calls by automatically resolving the syscall number

func IndirectSyscall ¶

func IndirectSyscall(syscallNum uint16, syscallAddr uintptr, args ...uintptr) (uintptr, error)

IndirectSyscall executes an indirect syscall with the given number, syscall address, and arguments. This function acts as a wrapper around the assembly implementation with automatic trampoline resolution.

func IsDebuggerPresent ¶ added in v1.3.5

func IsDebuggerPresent() bool

func LoadLibraryW ¶ added in v1.3.5

func LoadLibraryW(name string) uintptr

func Syscall ¶ added in v1.3.4

func Syscall(syscallNum uint16, args ...uintptr) (uintptr, error)

Syscall executes a direct syscall with the given number and arguments. This function acts as a wrapper around the assembly implementation.

func UTF16PtrFromString ¶ added in v1.3.5

func UTF16PtrFromString(s string) (*uint16, error)

func UTF16ToString ¶ added in v1.3.5

func UTF16ToString(ptr *uint16) string

UTF16ToString converts a UTF16 string to a Go string