| 145 | } |
| 146 | |
| 147 | bool read_kernel_memory(HANDLE pid, uintptr_t address, void* buffer, SIZE_T size) |
| 148 | { |
| 149 | if (!address || !buffer || !size) |
| 150 | return false; |
| 151 | |
| 152 | SIZE_T bytes = 0; |
| 153 | NTSTATUS status = STATUS_SUCCESS; |
| 154 | PEPROCESS process; |
| 155 | PsLookupProcessByProcessId((HANDLE)pid, &process); |
| 156 | |
| 157 | status = MmCopyVirtualMemory(process, (void*)address, (PEPROCESS)PsGetCurrentProcess(), (void*)buffer, size, KernelMode, &bytes); |
| 158 | |
| 159 | if (!NT_SUCCESS(status)) |
| 160 | { |
| 161 | return false; |
| 162 | } |
| 163 | else |
| 164 | { |
| 165 | return true; |
| 166 | } |
| 167 | } |
| 168 | |
| 169 | bool write_kernel_memory(HANDLE pid, uintptr_t address, void* buffer, SIZE_T size) |
| 170 | { |