GetBytesAtAddress - return bytes from an address given `size`. returns a BYTE array filled with values from `address` for `size` number of bytes */
| 379 | returns a BYTE array filled with values from `address` for `size` number of bytes |
| 380 | */ |
| 381 | BYTE* Process::GetBytesAtAddress(__in const uintptr_t address, __in const UINT size) //remember to free bytes if not NULL ret |
| 382 | { |
| 383 | BYTE* memBytes = new BYTE[size]; |
| 384 | |
| 385 | __try |
| 386 | { |
| 387 | memcpy((void*)memBytes, (void*)address, size); |
| 388 | return memBytes; |
| 389 | } |
| 390 | __except (EXCEPTION_EXECUTE_HANDLER) |
| 391 | { |
| 392 | delete[] memBytes; |
| 393 | memBytes = nullptr; |
| 394 | return NULL; |
| 395 | } |
| 396 | } |
| 397 | |
| 398 | /* |
| 399 | GetIATEntries -Returns a list of ImportFunction* from the program IAT , for later hook checks |
nothing calls this directly
no outgoing calls
no test coverage detected