GetProcessModulesHandles list modules handles from a process handle
(procHandle windows.Handle)
| 160 | |
| 161 | // GetProcessModulesHandles list modules handles from a process handle |
| 162 | func GetProcessModulesHandles(procHandle windows.Handle) (processFilename string, modules []syscall.Handle, err error) { |
| 163 | var processRawName []byte |
| 164 | processRawName, err = GetProcessImageFileName(procHandle, 512) |
| 165 | if err != nil { |
| 166 | return "", nil, err |
| 167 | } |
| 168 | processRawName = bytes.Trim(processRawName, "\x00") |
| 169 | processPath := strings.Split(string(processRawName), "\\") |
| 170 | processFilename = processPath[len(processPath)-1] |
| 171 | |
| 172 | modules, err = EnumProcessModules(procHandle, 32) |
| 173 | if err != nil { |
| 174 | return "", nil, err |
| 175 | } |
| 176 | |
| 177 | return processFilename, modules, nil |
| 178 | } |
| 179 | |
| 180 | // DumpModuleMemory dump a process module memory and return it as a byte slice |
| 181 | func DumpModuleMemory(procHandle windows.Handle, modHandle syscall.Handle, verbose bool) []byte { |
no test coverage detected