| 88 | } |
| 89 | |
| 90 | bool write_to_read_only_memory(void* address, void* buffer, size_t size) |
| 91 | { |
| 92 | PMDL Mdl = IoAllocateMdl(address, size, FALSE, FALSE, NULL); |
| 93 | |
| 94 | if (!Mdl) |
| 95 | return false; |
| 96 | |
| 97 | MmProbeAndLockPages(Mdl, KernelMode, IoReadAccess); |
| 98 | PVOID Mapping = MmMapLockedPagesSpecifyCache(Mdl, KernelMode, MmNonCached, NULL, FALSE, NormalPagePriority); |
| 99 | MmProtectMdlSystemAddress(Mdl, PAGE_READWRITE); |
| 100 | |
| 101 | write_memory(Mapping, buffer, size); |
| 102 | |
| 103 | MmUnmapLockedPages(Mapping, Mdl); |
| 104 | MmUnlockPages(Mdl); |
| 105 | IoFreeMdl(Mdl); |
| 106 | |
| 107 | return true; |
| 108 | } |
| 109 | |
| 110 | ULONG64 get_module_base_x64(PEPROCESS proc, UNICODE_STRING module_name) |
| 111 | { |
no test coverage detected