MCPcopy Create free account
hub / github.com/ELMERIKH/PyinMemoryPE / low_read_memory

Method low_read_memory

windows/winobject/process.py:1067–1075  ·  view source on GitHub ↗
(self, addr, buffer_addr, size)

Source from the content-addressed store, hash-verified

1065 return winproxy.WriteProcessMemory(self.handle, addr, lpBuffer=data)
1066
1067 def low_read_memory(self, addr, buffer_addr, size):
1068 if windows.current_process.bitness == 32 and self.bitness == 64:
1069 # OptionalExport can be None (see winproxy.py)
1070 if not winproxy.is_implemented(winproxy.NtWow64ReadVirtualMemory64):
1071 raise ValueError("NtWow64ReadVirtualMemory64 non available in ntdll: cannot read into 64bits processus")
1072 return winproxy.NtWow64ReadVirtualMemory64(self.handle, addr, buffer_addr, size)
1073 #if self.is_wow_64 and addr > 0xffffffff:
1074 # return winproxy.NtWow64ReadVirtualMemory64(self.handle, addr, buffer_addr, size)
1075 return winproxy.ReadProcessMemory(self.handle, addr, lpBuffer=buffer_addr, nSize=size)
1076
1077 def read_memory(self, addr, size):
1078 """Read ``size`` from ``addr``

Callers 2

read_memoryMethod · 0.95
read_memory_intoMethod · 0.95

Calls 1

is_implementedMethod · 0.80

Tested by

no test coverage detected