You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
70 lines
1.9 KiB
70 lines
1.9 KiB
#include "memory.h"
|
|
|
|
namespace i6
|
|
{
|
|
namespace memory
|
|
{
|
|
void read(void* addr, void* buffer, size_t size, unsigned pid)
|
|
{
|
|
if (!addr || !buffer || !size)
|
|
return;
|
|
|
|
char memcpy_buffer[0x1000];
|
|
memset(memcpy_buffer, NULL, sizeof(memcpy_buffer));
|
|
|
|
KAPC_STATE state;
|
|
PEPROCESS peproc;
|
|
if (NT_SUCCESS(PsLookupProcessByProcessId((HANDLE)pid, &peproc)) && peproc)
|
|
{
|
|
KeStackAttachProcess(peproc, &state);
|
|
if (MmIsAddressValid(addr))
|
|
memcpy(memcpy_buffer, addr, size);
|
|
|
|
KeUnstackDetachProcess(&state);
|
|
if(MmIsAddressValid(buffer))
|
|
memcpy(buffer, memcpy_buffer, size);
|
|
ObDereferenceObject(peproc);
|
|
}
|
|
}
|
|
|
|
void write(void* addr, void* buffer, size_t size, unsigned pid)
|
|
{
|
|
if (!addr || !buffer || !size)
|
|
return;
|
|
|
|
char memcpy_buffer[0x1000];
|
|
memset(memcpy_buffer, NULL, sizeof(memcpy_buffer));
|
|
|
|
if (MmIsAddressValid(buffer))
|
|
memcpy(memcpy_buffer, buffer, size);
|
|
|
|
KAPC_STATE state;
|
|
PEPROCESS peproc;
|
|
if (NT_SUCCESS(PsLookupProcessByProcessId((HANDLE)pid, &peproc)) && peproc)
|
|
{
|
|
KeStackAttachProcess(peproc, &state);
|
|
if (MmIsAddressValid(addr))
|
|
memcpy(addr, memcpy_buffer, size);
|
|
|
|
KeUnstackDetachProcess(&state);
|
|
ObDereferenceObject(peproc);
|
|
}
|
|
}
|
|
|
|
void disable_wp()
|
|
{
|
|
_disable();
|
|
auto cr0 = __readcr0();
|
|
cr0 &= 0xfffffffffffeffff;
|
|
__writecr0(cr0);
|
|
}
|
|
|
|
void enable_wp()
|
|
{
|
|
auto cr0 = __readcr0();
|
|
cr0 |= 0x10000;
|
|
__writecr0(cr0);
|
|
_enable();
|
|
}
|
|
}
|
|
} |