Method GetProcessBaseAddressFromKernel

Usermode/memory.cpp:55–67

}

bool Memory::GetProcessBaseAddressFromKernel(int processID, uint64_t* baseAddress)
{
	Communication request = {};
	SecureZeroMemory(&request, sizeof(Communication));
	request.request = Request::GETBASE;
	request.key = COMMUNICATION_KEY;
	request.processID = processID;
	request.buffer = 0;
	NtUserCloseWindowStation(&request);

	*baseAddress = request.buffer;
	return (request.buffer != NULL);
}

bool Memory::GetModuleBaseAddressFromKernel(int processID, const char* moduleName, uint64_t* baseAddress)
{