MCPcopy Create free account
hub / github.com/Astronaut00/DoubleDataPointer / ReadMemoryFromKernel

Method ReadMemoryFromKernel

Usermode/memory.cpp:85–101  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

83
84
85bool Memory::ReadMemoryFromKernel(int processId, uint64_t address, void* buffer, size_t size)
86{
87 size_t read = NULL;
88 Communication request = {};
89 SecureZeroMemory(&request, sizeof(Communication));
90
91 request.request = Request::READPROCESSMEMORY;
92 request.key = COMMUNICATION_KEY;
93 request.address = address;
94 request.buffer = (uint64_t)buffer;
95 request.size = size;
96 request.processID = processId;
97 request.read = read;
98
99 NtUserCloseWindowStation(&request);
100 return (buffer != NULL);
101}
102
103bool Memory::WriteMemoryFromKernel(int processId, uint64_t address, void* buffer, size_t size)
104{

Callers

nothing calls this directly

Calls

no outgoing calls

Tested by

no test coverage detected