Class data_t

core.cpp:17–35

a structure holding data

// a structure holding data
struct data_t
{
	// imports
	using ps_lookup_process_by_process_id_t = NTSTATUS( * )( std::uint64_t, void*& );
	const ps_lookup_process_by_process_id_t ps_lookup_process_by_process_id = static_cast< ps_lookup_process_by_process_id_t >( get_ntk_export( "PsLookupProcessByProcessId" ) );

	using mm_copy_virtual_memory_t = NTSTATUS( * )( void*, void*, void*, void*, std::size_t, std::uint8_t, std::size_t& );
	const mm_copy_virtual_memory_t mm_copy_virtual_memory = static_cast< mm_copy_virtual_memory_t >( get_ntk_export( "MmCopyVirtualMemory" ) );

	using obf_dereference_object_t = void( * )( void* );
	const obf_dereference_object_t obf_dereference_object = static_cast< obf_dereference_object_t >( get_ntk_export( "ObfDereferenceObject" ) );

	// arguments
	const std::uint64_t from_pid, to_pid;
	
	void *const from_address, *const to_address;

	const std::size_t size;
};

// the function that will be mapped into the driver
NTSTATUS mapped( const data_t& data )